Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/q7oQJvkvfZ-YTWSLQkdL1oImLX0.roa
File: q7oQJvkvfZ-YTWSLQkdL1oImLX0.roa (raw, json)
Hash identifier: esd4/Uh9XEKi2z8gnMw6+T0ZGv5BgngBrUPNwZtdrzE=
Subject key identifier: AB:BA:10:26:F9:2F:7D:9F:98:4D:64:8B:42:47:4B:D6:82:26:2D:7D
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 018571D7BD6AC9655D919036FD4CB1DC8AA6
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/q7oQJvkvfZ-YTWSLQkdL1oImLX0.roa
Signing time: Mon 02 Jan 2023 09:37:21 +0000
ROA not before: Mon 02 Jan 2023 09:37:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34078
IP address blocks: 185.112.148.0/22 maxlen: 22
185.112.148.0/23 maxlen: 23
185.112.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:bd:6a:c9:65:5d:91:90:36:fd:4c:b1:dc:8a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 2 09:37:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abba1026f92f7d9f984d648b42474bd682262d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:79:ad:79:49:04:a5:3d:8b:a7:3f:12:8a:31:
fa:4e:be:e0:99:dd:e9:6f:bf:ee:46:11:c4:fe:71:
34:a8:9a:60:c4:2a:df:ed:ec:99:9e:a5:bd:45:a3:
b3:b6:b4:4e:4e:e5:c4:93:c8:7b:49:90:22:1e:76:
22:5f:05:45:7f:81:37:f7:d6:62:4e:fc:14:54:7c:
bf:42:60:24:51:ec:bc:61:d9:74:1a:3b:82:00:54:
7e:67:30:b5:7a:cd:fb:c6:39:96:40:67:8e:70:62:
ce:75:88:5c:73:0f:ec:a2:e7:7d:45:e3:2f:14:c7:
90:2f:c9:57:c8:c7:d6:86:5d:0f:76:85:b6:b7:59:
98:73:47:5b:51:53:a5:9e:27:7f:48:1b:32:ef:5f:
40:e0:7c:b4:57:c6:d5:95:f2:22:05:d8:3e:4b:1e:
26:b4:73:5f:10:bf:57:11:da:a5:20:01:f4:b1:78:
1e:54:f2:97:4f:97:9e:88:37:22:bb:f1:02:57:bf:
19:46:96:63:a8:8e:6a:1b:ce:02:96:63:7d:42:92:
6c:73:ce:7f:66:1e:e9:52:99:c7:2e:c1:f9:e9:19:
9a:7a:05:38:40:88:4e:94:39:bb:c2:9c:77:20:ad:
c0:f1:d5:2a:ef:2c:11:d3:5d:13:f6:46:ee:0a:c0:
7d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BA:10:26:F9:2F:7D:9F:98:4D:64:8B:42:47:4B:D6:82:26:2D:7D
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/q7oQJvkvfZ-YTWSLQkdL1oImLX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.148.0/22
Signature Algorithm: sha256WithRSAEncryption
21:c4:30:2b:fd:a9:7a:96:a4:85:62:84:0c:98:a1:71:f2:f6:
26:e7:81:d3:ef:6e:51:79:03:b3:a3:3e:93:98:81:d4:46:4d:
e5:4f:49:a0:f4:60:94:5b:66:c9:34:ce:7e:46:73:9a:14:f2:
af:e2:c7:d0:f5:30:64:be:01:22:5f:b3:21:ae:05:12:72:55:
e5:8e:3d:9e:17:61:0f:31:87:b7:a6:fd:0b:27:6d:66:e8:ab:
76:ec:4b:32:9a:97:78:22:15:9a:89:9f:c3:df:fd:e4:94:d2:
6d:3e:0a:8d:f2:df:8d:96:2e:77:ec:8a:7a:d4:b3:f3:20:b0:
84:1c:5c:4c:4b:ea:70:a2:c1:25:a5:41:8d:a1:ec:47:21:95:
78:ce:2e:6a:da:ca:cd:d8:a4:0a:76:fd:dd:10:dd:95:02:ae:
47:8e:f5:c7:a6:c1:12:ed:bc:f1:ec:b7:50:f5:d1:bb:a9:24:
28:56:71:a8:9b:3d:e9:5d:13:0d:1c:60:d7:71:82:ba:ce:57:
b8:f5:7d:6e:ec:7a:14:3d:f2:49:17:22:e8:d2:8d:15:54:7d:
2b:e1:33:85:e5:b9:fe:c3:c6:cc:1d:75:cc:36:34:63:1b:9f:
31:95:13:a1:10:08:77:19:da:98:3a:50:96:20:a5:d7:fd:b6:
ae:d9:84:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:20:03 2024 by rpki-client on console-ams.rpki-client.org