Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/Afe9BpkjNfwsrSjjWoYFtr2g6vo.roa
File: Afe9BpkjNfwsrSjjWoYFtr2g6vo.roa (raw, json)
Hash identifier: K5WnrQeIo/VU4u4+6gMJiDqiGHeKZpb/UyJJYWKO+rE=
Subject key identifier: 01:F7:BD:06:99:23:35:FC:2C:AD:28:E3:5A:86:05:B6:BD:A0:EA:FA
Certificate issuer: /CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Certificate serial: 01856EC20FD669089A1C38DF6C3D58EE98C2
Authority key identifier: E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/Afe9BpkjNfwsrSjjWoYFtr2g6vo.roa
Signing time: Sun 01 Jan 2023 19:14:49 +0000
ROA not before: Sun 01 Jan 2023 19:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 185.204.94.0/24 maxlen: 24
185.204.93.0/24 maxlen: 24
185.204.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:0f:d6:69:08:9a:1c:38:df:6c:3d:58:ee:98:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Validity
Not Before: Jan 1 19:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01f7bd06992335fc2cad28e35a8605b6bda0eafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:35:04:c6:d7:25:46:83:13:e0:ae:5e:11:6d:
a3:05:a6:44:1f:a5:85:da:f1:12:68:a2:24:7e:36:
4d:c9:a2:c6:81:16:61:80:85:77:d4:90:24:35:01:
0f:3a:9f:fb:2b:25:00:c9:65:2c:03:74:96:ce:b1:
10:f2:16:8f:0d:1f:fc:65:5a:94:a5:94:98:f8:7d:
8f:30:38:94:67:f4:0a:a6:3f:00:da:0e:2a:73:7d:
c8:4d:81:3c:03:ae:58:22:43:8b:ea:a6:3a:62:ac:
4f:cf:5f:b0:51:b8:92:13:28:15:90:1b:a3:c1:fe:
8c:62:48:52:fd:84:1f:dd:3c:30:c3:ad:3a:c4:a2:
3d:b3:89:0c:6b:83:8c:b1:a7:0a:63:4d:9e:e8:04:
a7:5f:2b:a2:59:86:7d:56:af:2f:c7:b6:a7:23:1a:
82:86:22:34:b6:82:ac:e1:b6:83:fe:0c:a2:48:7b:
88:c0:7f:eb:04:9c:9c:22:3f:a7:71:cc:2c:36:c0:
c3:4c:76:73:b2:e7:72:44:2d:be:4e:83:aa:94:24:
45:7a:b2:e0:95:73:de:8a:49:2a:ca:cf:de:d7:e9:
99:42:0f:37:fb:a0:9c:c7:06:7a:ef:0c:c8:08:bd:
a4:39:01:c2:dc:99:3d:68:cc:f6:db:f9:03:ab:99:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F7:BD:06:99:23:35:FC:2C:AD:28:E3:5A:86:05:B6:BD:A0:EA:FA
X509v3 Authority Key Identifier:
keyid:E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/Afe9BpkjNfwsrSjjWoYFtr2g6vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.93.0-185.204.95.255
Signature Algorithm: sha256WithRSAEncryption
63:2b:7e:f7:6e:85:7a:e0:1a:2d:24:9b:64:ec:8c:d8:a7:81:
fe:17:c5:bb:84:1f:5d:f5:35:0f:a2:98:bb:59:df:a1:b2:e1:
c2:bb:1b:a2:fc:e5:5c:0a:f7:2e:09:5a:53:25:c9:60:7c:e6:
b2:1c:ac:70:ae:db:fd:cc:54:c6:b2:e0:2a:8d:a4:55:5f:d4:
a1:8f:59:2e:48:f9:49:9e:dc:b8:d8:47:82:97:f7:8b:5f:4d:
2a:b7:48:aa:33:63:1b:e7:ca:ff:eb:c3:5f:cf:42:ce:95:86:
24:6d:08:9a:b9:d1:9a:8b:3e:a7:98:45:8a:ef:81:0e:ff:79:
96:1d:58:39:a6:79:3c:10:85:5d:bb:33:87:12:93:9b:3f:e1:
b8:d7:c7:e6:6d:96:2e:30:3d:dd:4f:94:39:54:21:ea:d2:5e:
dc:c4:41:94:0d:a1:fb:43:6b:5b:37:47:44:61:3a:fd:aa:1a:
81:f1:50:b2:b5:40:28:86:17:e3:4f:63:0d:63:57:4a:ec:23:
80:bc:9e:45:16:ad:49:7f:2c:b8:28:26:f0:d6:24:36:c3:48:
18:5a:33:21:8a:d8:2e:40:d1:68:28:88:fa:7c:b1:52:32:7c:
4d:5b:48:22:1c:43:ee:32:fe:9a:47:55:13:a0:05:55:42:4d:
c8:21:4a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 14:56:53 2023 by rpki-client on console-fra.rpki-client.org