Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/ASCsKBkJCD_VjKM6b8fihETGBVM.roa
File: ASCsKBkJCD_VjKM6b8fihETGBVM.roa (raw, json)
Hash identifier: FhJ+H3Stejg9JTkkiJJ/zCe98ypAF62YaTD3FrKB4w0=
Subject key identifier: 01:20:AC:28:19:09:08:3F:D5:8C:A3:3A:6F:C7:E2:84:44:C6:05:53
Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial: 0188BA61AC7E2D64AF24DF370BFF5E5981B5
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/ASCsKBkJCD_VjKM6b8fihETGBVM.roa
Signing time: Wed 14 Jun 2023 14:49:03 +0000
ROA not before: Wed 14 Jun 2023 14:49:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207104
IP address blocks: 185.163.158.0/24 maxlen: 24
185.163.157.0/24 maxlen: 24
185.163.156.0/24 maxlen: 24
185.163.159.0/24 maxlen: 24
185.191.32.0/24 maxlen: 24
2a0a:400:2000::/36 maxlen: 36
2a0a:400:3000::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ba:61:ac:7e:2d:64:af:24:df:37:0b:ff:5e:59:81:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
Validity
Not Before: Jun 14 14:49:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0120ac281909083fd58ca33a6fc7e28444c60553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b4:b8:b2:c6:99:b8:df:99:d6:8e:52:0a:8b:
cd:40:00:b4:7f:10:11:e3:a7:fb:c1:58:22:48:da:
44:0e:7e:90:8c:dd:9b:9c:fa:88:cf:4f:84:1c:55:
1f:00:0f:b9:d6:5b:71:e9:93:81:2a:49:62:1e:c0:
9c:81:b1:df:7e:fc:90:f2:a5:c5:2e:06:c7:8e:ee:
49:2c:c5:b5:bc:e9:a2:b6:0f:23:d8:69:99:59:07:
1b:44:c3:65:ce:81:eb:31:cc:51:7a:45:fd:57:6d:
25:45:b7:47:0f:2d:9a:28:a1:da:4d:4b:53:4b:f9:
81:e3:09:e4:39:64:02:f6:a7:2a:b8:55:65:e2:28:
17:14:08:8a:99:92:6c:8e:9c:e3:01:c6:2c:52:c9:
ae:c9:76:ab:ee:67:63:60:ef:ec:50:49:37:06:0f:
77:e2:d9:50:c8:82:15:ac:55:9e:a0:13:7c:bd:54:
65:84:38:ba:f4:d0:32:11:75:3d:41:5f:9e:d5:b5:
02:94:4b:57:31:b6:79:e3:3a:13:6f:bb:10:9e:cf:
ce:c7:86:32:ea:bf:ed:26:c5:8a:89:f0:60:9f:11:
f2:ee:19:29:b2:86:49:5e:fb:88:69:85:89:a0:d2:
af:e9:73:f0:8e:1c:64:e7:bd:21:e1:f7:f2:68:bb:
92:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:20:AC:28:19:09:08:3F:D5:8C:A3:3A:6F:C7:E2:84:44:C6:05:53
X509v3 Authority Key Identifier:
keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/ASCsKBkJCD_VjKM6b8fihETGBVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.156.0/22
185.191.32.0/24
IPv6:
2a0a:400:2000::/35
Signature Algorithm: sha256WithRSAEncryption
42:05:ed:d1:43:ad:6d:b6:1b:72:2d:f7:34:67:bc:7a:bc:32:
8a:35:47:57:af:8a:58:9c:1e:98:8c:12:68:85:32:8c:9d:63:
95:6f:d3:8b:ad:60:5b:b4:56:89:36:c9:96:57:09:d8:41:99:
89:eb:38:71:92:b6:7e:69:62:3b:5b:35:95:42:6d:7e:ae:f9:
60:df:f7:c2:60:15:5a:ff:f6:ce:82:00:bc:ed:9b:76:9e:49:
1c:30:4f:cf:ad:6c:23:9b:1b:52:a7:b5:cf:00:6d:a1:5a:4d:
57:3a:c8:b7:bf:d7:0b:7e:ab:e0:5d:96:4e:e7:59:0e:c7:47:
17:8e:6b:6f:11:b9:cf:40:81:47:e8:b3:d4:6e:6c:6b:d1:c3:
37:9c:01:cb:2d:ef:fe:b2:72:7c:67:1f:2d:09:a9:e0:47:d6:
75:06:a4:61:66:6e:53:c5:40:ea:2e:40:5d:56:d8:df:80:25:
95:34:0f:0c:66:c4:63:b9:bc:48:aa:58:39:c8:8e:b3:cf:74:
1f:3c:cc:49:8e:bd:3a:6c:14:27:28:a5:4d:f6:f3:18:15:3b:
9f:73:42:b7:f8:82:12:74:93:63:e5:78:f2:33:27:c7:95:ab:
72:17:31:b5:ce:4e:e4:c8:5b:42:f4:2a:9c:e3:0a:df:6f:70:
8d:f4:b5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 26 11:11:04 2023 by rpki-client on console-ams.rpki-client.org