Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/SWrmabWUiRjX1c1rZQBSVMxjsxE.roa
File: SWrmabWUiRjX1c1rZQBSVMxjsxE.roa (raw, json)
Hash identifier: D+iKXX4I3udAZ/mLN8Lzc3r25YK6EfoZPcpfrYy6nrU=
Subject key identifier: 49:6A:E6:69:B5:94:89:18:D7:D5:CD:6B:65:00:52:54:CC:63:B3:11
Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial: 01856E790D1B0BD7284382C61E9ACBB1C671
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/SWrmabWUiRjX1c1rZQBSVMxjsxE.roa
Signing time: Sun 01 Jan 2023 17:55:04 +0000
ROA not before: Sun 01 Jan 2023 17:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204085
IP address blocks: 185.132.8.0/23 maxlen: 23
185.132.10.0/23 maxlen: 23
185.127.44.0/23 maxlen: 23
185.127.46.0/23 maxlen: 23
185.110.0.0/23 maxlen: 23
185.110.3.0/24 maxlen: 24
185.110.2.0/24 maxlen: 24
185.123.252.0/22 maxlen: 22
185.123.248.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:79:0d:1b:0b:d7:28:43:82:c6:1e:9a:cb:b1:c6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Validity
Not Before: Jan 1 17:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=496ae669b5948918d7d5cd6b65005254cc63b311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ac:34:67:3a:2e:74:90:fe:d9:c1:0f:41:63:
c3:a2:4d:ee:65:e5:90:fb:ff:ce:ec:65:c2:d8:e7:
75:27:0b:b9:c6:48:f7:ce:88:f3:b3:83:a8:58:45:
81:6d:47:6a:c4:8c:d9:3b:dc:a4:0a:9f:ed:f9:05:
b4:47:75:fc:ef:f5:9c:68:54:79:14:f7:c4:58:bc:
34:5b:50:49:92:cc:7a:7d:83:f9:95:63:7c:36:a5:
13:f3:23:44:ca:c2:26:5e:94:08:a8:f1:69:7e:94:
0d:a0:65:e3:b3:1c:d8:59:4b:f5:b9:1b:05:db:8f:
84:a9:0c:cf:3c:55:70:18:70:8a:ab:32:c6:c0:9b:
75:5d:61:b6:f1:84:1d:16:4d:98:59:22:df:a2:f8:
0b:b6:5e:92:f0:cd:ec:a3:82:48:4e:19:ca:ae:25:
cd:66:0b:9f:ab:8f:98:af:0c:82:4b:11:94:dd:49:
5d:d0:13:56:12:eb:46:c0:5f:4c:3e:af:f3:23:f3:
ff:54:6d:9f:8f:76:4c:ff:af:c7:02:ab:f1:f2:87:
a5:cc:e0:c1:9c:48:49:35:f6:e9:3d:5c:c9:77:ac:
3f:87:5e:e8:85:4c:db:4d:54:49:57:ad:a9:c2:d8:
9b:14:0c:a8:c0:08:96:0f:cd:de:e9:0f:13:74:e3:
6b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6A:E6:69:B5:94:89:18:D7:D5:CD:6B:65:00:52:54:CC:63:B3:11
X509v3 Authority Key Identifier:
keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/SWrmabWUiRjX1c1rZQBSVMxjsxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.0.0/22
185.123.248.0/21
185.127.44.0/22
185.132.8.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:f2:99:37:ad:bd:a1:74:d1:35:0d:5f:39:52:8c:60:5a:26:
dc:56:d4:5f:bd:40:6c:15:a4:e9:92:86:ca:31:43:9b:54:88:
e6:fe:02:2a:0b:a9:c1:b6:ba:08:35:c7:89:ec:12:d7:7e:94:
02:36:92:f6:82:8e:79:68:39:a8:0e:c2:10:e7:fd:67:25:98:
0d:fe:c1:25:3b:a7:2c:57:e3:7c:5a:1d:70:83:79:4e:a1:40:
1d:d5:20:e5:40:46:34:3a:2d:1f:45:db:d3:60:66:5e:aa:f7:
29:10:5f:08:e4:a3:f4:c8:b9:ed:30:d8:71:86:93:06:c7:38:
b5:16:26:6b:1e:78:0f:ce:a0:e8:08:36:31:79:51:69:00:93:
ed:41:fd:20:ca:44:bf:d2:ac:5d:21:d7:3c:42:0a:88:ae:00:
a0:eb:69:75:bc:34:64:07:8a:93:36:32:34:9f:e2:99:e7:40:
a3:cf:6a:94:30:5e:64:69:cd:07:ba:3a:a2:fe:f5:cd:40:8a:
03:02:d6:c7:f1:ee:6d:0f:14:80:2a:1d:cb:4f:e1:4d:fa:c1:
54:a7:27:1f:e1:c2:87:34:d6:16:8f:d0:9b:45:61:16:11:e4:
c5:6f:b8:34:cb:63:3f:a6:a1:5c:97:f0:e7:32:99:8d:33:ce:
d0:ad:2a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:47 2024 by rpki-client on console-ams.rpki-client.org