Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/E1-sD9luwsN8g7Bhgpn3O40wzP0.roa
File: E1-sD9luwsN8g7Bhgpn3O40wzP0.roa (raw, json)
Hash identifier: VJE/bPq03lAKocCwdTQ8MWJa/2T7a85/OZnHywnlP9M=
Subject key identifier: 13:5F:AC:0F:D9:6E:C2:C3:7C:83:B0:61:82:99:F7:3B:8D:30:CC:FD
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 0185CE110346B92BE8D652B86E82F7075C61
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/E1-sD9luwsN8g7Bhgpn3O40wzP0.roa
Signing time: Fri 20 Jan 2023 07:24:59 +0000
ROA not before: Fri 20 Jan 2023 07:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209689
IP address blocks: 212.87.210.0/23 maxlen: 24
185.174.149.0/24 maxlen: 24
185.174.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ce:11:03:46:b9:2b:e8:d6:52:b8:6e:82:f7:07:5c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Jan 20 07:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=135fac0fd96ec2c37c83b0618299f73b8d30ccfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:02:3a:7b:ec:05:75:d6:06:30:b1:14:f5:28:
35:10:2c:8e:f6:84:69:96:dd:fc:0d:56:42:c3:f8:
64:62:1b:2f:44:b2:16:0f:5a:c1:65:a9:df:9c:f8:
30:26:48:e0:c5:37:e3:df:60:e9:ee:d2:83:91:d2:
79:2b:1f:22:83:be:65:30:39:90:43:75:23:42:d4:
33:05:81:d5:1b:ff:d5:90:8e:51:87:99:c9:0d:65:
fd:6d:d1:6c:f1:7c:a0:7a:ad:57:7c:fe:f8:d9:ae:
80:93:db:3f:2d:f6:65:d2:43:7c:59:b8:31:82:69:
4a:47:41:c7:e0:46:a6:74:74:cc:58:2b:94:08:bc:
f1:d7:af:1f:f5:00:f3:cf:6f:04:5c:5a:3a:6c:3c:
cd:e9:e8:99:8b:aa:63:d2:a8:ac:1c:8e:17:eb:f4:
f7:4a:30:ef:6d:b2:44:3b:d5:63:6b:3b:02:19:4e:
6e:63:d7:a6:df:fc:2c:69:22:45:53:66:23:c1:9d:
74:29:28:80:bd:39:3a:1e:aa:8d:17:bc:da:74:b1:
32:c9:22:7a:fd:63:e3:7c:90:84:46:bd:91:26:6c:
04:69:69:38:b0:76:1c:52:d9:71:2f:ca:4b:f3:64:
ce:b3:26:81:21:6b:18:c0:61:71:f5:a7:84:4d:03:
b2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5F:AC:0F:D9:6E:C2:C3:7C:83:B0:61:82:99:F7:3B:8D:30:CC:FD
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/E1-sD9luwsN8g7Bhgpn3O40wzP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.148.0/23
212.87.210.0/23
Signature Algorithm: sha256WithRSAEncryption
41:d9:ed:6d:0e:df:6b:c7:22:3a:92:75:12:c5:f9:98:d2:29:
f5:15:37:49:12:16:c6:d3:de:00:43:7d:6c:45:bb:2a:08:b8:
40:10:9a:69:15:ab:be:8c:04:ec:2e:ea:36:79:51:20:b0:01:
06:8f:84:57:d3:41:3e:a2:f6:ab:ab:12:0b:c2:fe:4f:47:5e:
14:22:88:96:50:f2:85:66:25:58:9a:0a:b5:ed:2a:f7:97:0d:
24:b5:13:f0:e8:93:e1:a9:41:c6:6c:ce:20:79:9d:69:8a:68:
7c:cd:c7:a7:1a:d1:21:32:85:2d:47:68:f9:a7:1e:41:bf:ab:
3c:67:90:e6:01:39:d6:93:4c:32:83:13:ee:91:24:7b:66:d0:
32:af:7a:c8:c9:07:2a:46:ee:db:4f:a8:f8:b5:1d:d0:23:3b:
9d:5b:9e:93:3a:12:14:b9:6e:06:1b:70:93:ba:30:ec:10:97:
96:be:56:be:ed:b1:4e:b0:9c:c9:39:15:87:d0:85:ad:68:a4:
d6:52:e7:df:46:b8:11:92:b7:b2:ed:5a:83:09:43:73:2b:f5:
19:b6:da:3f:99:fa:70:01:1a:f5:a1:c9:8b:4d:27:42:2b:3c:
6e:07:1c:9b:fe:8b:96:27:87:c0:d1:a9:c4:a9:7d:1f:13:f4:
3d:b4:4a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:20 2023 by rpki-client on console-ams.rpki-client.org