Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/h8Ly8x4ku2KdHKDT_Oexywt3Hvk.roa
File: h8Ly8x4ku2KdHKDT_Oexywt3Hvk.roa (raw, json)
Hash identifier: AZX8jT/NtkGHvFLTzB+tuIszLkWv3+1jUDSGI54H3lo=
Subject key identifier: 87:C2:F2:F3:1E:24:BB:62:9D:1C:A0:D3:FC:E7:B1:CB:0B:77:1E:F9
Certificate issuer: /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Certificate serial: 01888C51D11EF85E4AFE115124D8763AB50C
Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/h8Ly8x4ku2KdHKDT_Oexywt3Hvk.roa
Signing time: Mon 05 Jun 2023 16:09:12 +0000
ROA not before: Mon 05 Jun 2023 16:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48815
IP address blocks: 185.54.34.0/24 maxlen: 24
185.54.33.0/24 maxlen: 24
185.54.32.0/24 maxlen: 24
185.54.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8c:51:d1:1e:f8:5e:4a:fe:11:51:24:d8:76:3a:b5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Validity
Not Before: Jun 5 16:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87c2f2f31e24bb629d1ca0d3fce7b1cb0b771ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:56:47:65:8e:b6:ce:3a:a5:87:68:37:ce:2d:
e6:20:3c:2f:51:9d:43:55:0f:aa:e9:fc:9f:2d:21:
e3:80:26:0a:37:cf:ae:48:db:f2:a5:47:6d:2f:e0:
17:6e:1a:02:25:dc:6a:1f:5f:c9:83:26:e9:2e:42:
09:04:15:28:c2:88:9d:ea:51:dc:9a:cc:4d:68:49:
0e:4f:6b:2a:12:e0:24:25:f6:a5:25:e9:72:2f:f4:
42:b9:22:38:ad:37:9e:cf:32:25:fb:ac:b3:1e:84:
23:9a:46:a1:e7:fe:e1:0f:21:0e:c5:fa:c6:d9:be:
a9:75:2d:10:06:d0:4d:41:8f:7a:bf:a5:f3:25:88:
55:b7:8b:9a:ae:17:8f:ea:ea:7f:91:72:29:7d:97:
ac:d4:9b:68:ba:9d:17:99:71:c0:93:bc:d2:2c:e2:
6f:73:bc:7b:a8:1e:d9:cb:95:b8:5b:f2:46:d9:96:
c0:f3:5a:85:c7:68:a0:da:6f:ed:59:12:3c:d1:1e:
65:6f:a0:bd:56:11:bc:ea:55:5f:43:b3:33:b6:9e:
73:bb:3f:59:87:ec:fe:49:64:50:12:7f:1b:76:ed:
c2:6e:b6:11:67:47:e1:ed:64:2a:0f:c7:fc:1a:eb:
8e:5a:28:ca:d6:b8:c8:ac:36:39:99:98:b0:70:f5:
b0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C2:F2:F3:1E:24:BB:62:9D:1C:A0:D3:FC:E7:B1:CB:0B:77:1E:F9
X509v3 Authority Key Identifier:
keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/h8Ly8x4ku2KdHKDT_Oexywt3Hvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.32.0/22
Signature Algorithm: sha256WithRSAEncryption
71:d9:a4:19:5c:fc:31:89:e8:c1:9e:55:03:bf:76:31:c4:b2:
f0:17:55:28:a7:cb:50:41:a1:c3:bb:6b:7c:01:bd:dd:84:0a:
a3:02:be:74:dc:a7:dc:b8:66:d1:d1:ac:f9:7d:dd:82:1f:e4:
94:f2:6a:e4:4b:f6:b4:b9:2e:a2:5c:d5:b3:4a:6c:44:e8:41:
ff:9f:da:71:23:4e:f5:61:a7:4d:41:43:32:42:47:a2:66:6e:
21:f8:93:1d:21:c3:38:02:c4:42:8c:39:95:5c:23:fc:e8:44:
c3:d3:e5:04:96:6d:52:30:89:3e:b8:b0:63:a4:07:24:25:8e:
b9:ae:80:9b:f0:0d:52:3a:07:16:8a:7a:bc:47:45:64:ae:75:
d5:51:d1:e1:ad:c5:d3:4b:22:99:35:be:79:5d:4c:e9:c3:61:
b4:6b:91:1b:32:5f:d3:1d:a4:4e:79:45:58:a2:2a:90:6c:e0:
10:03:15:1b:e2:35:47:f2:c9:15:5d:15:b4:62:6d:ba:9f:0b:
ce:25:ed:b1:57:51:23:8f:c3:5e:e4:e7:d5:8d:1a:ba:e9:06:
04:9b:d0:4f:4b:13:69:7c:b9:49:ff:90:9a:7e:b5:53:f9:4f:
58:08:e6:1b:34:45:42:18:ce:34:92:30:90:e0:b9:00:77:87:
8b:b9:e1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:43 2024 by rpki-client on console-fra.rpki-client.org