Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/1L7_wEoTl1dN66xuomUbCLTQQyU.roa
File: 1L7_wEoTl1dN66xuomUbCLTQQyU.roa (raw, json)
Hash identifier: aaek8oGCTNpNm0Zhmg93IUn/+umUy5rmPlPkmsK2rcE=
Subject key identifier: D4:BE:FF:C0:4A:13:97:57:4D:EB:AC:6E:A2:65:1B:08:B4:D0:43:25
Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial: 018A18FCA665D0DA9716FBD26735EE1F732B
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/1L7_wEoTl1dN66xuomUbCLTQQyU.roa
Signing time: Mon 21 Aug 2023 16:45:25 +0000
ROA not before: Mon 21 Aug 2023 16:45:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25335
IP address blocks: 185.105.56.0/23 maxlen: 23
185.122.130.0/23 maxlen: 23
185.105.59.0/24 maxlen: 24
185.116.172.0/23 maxlen: 23
185.130.36.0/23 maxlen: 23
185.127.56.0/23 maxlen: 23
185.130.38.0/23 maxlen: 23
185.116.175.0/24 maxlen: 24
185.127.58.0/23 maxlen: 23
185.129.10.0/23 maxlen: 23
185.129.8.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:fc:a6:65:d0:da:97:16:fb:d2:67:35:ee:1f:73:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Validity
Not Before: Aug 21 16:45:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4beffc04a1397574debac6ea2651b08b4d04325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:68:b3:28:e4:8d:e5:5b:62:7d:a9:7b:f2:30:
7b:08:9d:67:e7:bf:27:48:28:9a:c6:c7:ce:66:1b:
ac:69:d4:96:13:ec:13:b8:49:a7:ae:39:ee:e0:64:
ec:39:6d:d6:9e:e8:bc:a4:26:48:ae:20:75:0c:9b:
11:b5:9a:85:c6:50:52:b7:3f:13:34:47:30:57:1f:
b0:cb:27:16:36:bc:fe:cd:89:1a:13:f5:ab:75:cb:
4d:a6:bf:01:94:29:8d:64:38:90:03:62:6c:35:bf:
e5:58:02:eb:bc:b1:30:2e:f4:8f:fd:f1:93:85:d0:
c5:2d:08:b0:ab:f8:d6:dd:fe:d5:f3:89:4d:d6:fd:
23:0b:f4:90:cc:d0:44:54:ba:13:ba:99:94:14:6a:
0e:bc:3c:86:c6:7b:d6:fa:0f:86:2a:f6:36:43:64:
5f:20:de:a3:3c:34:c1:80:d5:94:ce:39:2e:54:0c:
2b:98:95:97:96:10:a2:7c:8c:9a:62:6e:e4:0a:55:
51:14:04:7e:45:27:b4:31:ad:a4:04:e5:be:87:c1:
29:83:c7:05:99:54:4c:6e:be:ce:c2:39:4d:d2:8f:
a9:c7:74:ef:70:98:fc:a7:67:db:57:e2:c0:0f:fa:
a7:e6:1d:81:d0:8f:1a:d4:4e:d2:ef:72:6e:62:45:
76:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BE:FF:C0:4A:13:97:57:4D:EB:AC:6E:A2:65:1B:08:B4:D0:43:25
X509v3 Authority Key Identifier:
keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/1L7_wEoTl1dN66xuomUbCLTQQyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.56.0/23
185.105.59.0/24
185.116.172.0/23
185.116.175.0/24
185.122.130.0/23
185.127.56.0/22
185.129.8.0/22
185.130.36.0/22
Signature Algorithm: sha256WithRSAEncryption
82:4f:62:0e:89:04:d5:bd:11:59:a8:72:76:83:ef:7c:3a:44:
21:ae:58:a7:5e:95:bb:36:b2:fc:27:75:84:5d:ce:8c:ff:99:
ae:e3:6b:45:91:c2:3e:6f:fb:69:40:a9:69:5d:5d:95:79:1b:
f1:72:49:6d:db:f8:05:2c:25:1b:d6:1c:6f:e6:9f:7d:aa:cf:
00:48:cd:7a:87:2b:a5:45:f9:44:e4:d4:e5:fc:63:f3:47:4f:
ed:32:6f:69:6b:6c:f0:79:99:bd:e5:f6:13:7f:d8:61:30:3c:
60:88:b5:5f:84:ae:de:ca:1c:26:76:c7:ef:b6:3f:56:62:fc:
e3:44:7f:13:80:b1:bc:ec:4c:c0:ee:68:4b:fd:ca:43:6d:30:
35:cf:2f:f9:48:cf:0f:93:83:ea:0b:32:c6:20:63:a0:6b:7b:
b5:7c:1f:a7:b9:19:48:29:d5:75:ed:a0:0e:cd:7a:7a:0a:20:
07:c8:68:fe:f1:0b:be:c5:f1:30:4b:ee:93:0f:f2:6a:90:0b:
66:ee:4d:68:ba:bd:c4:d4:d5:3d:08:0c:6e:a0:61:79:c8:07:
46:3b:a3:a5:fb:c9:ee:28:b1:89:a4:d5:c4:b5:4b:24:6b:1d:
94:d2:a8:54:28:25:5e:cf:3a:9d:89:2d:fe:e6:9c:05:88:50:
92:8d:3b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:57:06 2024 by rpki-client on console-fra.rpki-client.org