Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/soltuXtd6a4tW9KfRVh_bE6Zvzk.roa
File: soltuXtd6a4tW9KfRVh_bE6Zvzk.roa (raw, json)
Hash identifier: MumuYVe1PILlSstZsPkFOII0xzMJaUaREzNiu78lDEo=
Subject key identifier: B2:89:6D:B9:7B:5D:E9:AE:2D:5B:D2:9F:45:58:7F:6C:4E:99:BF:39
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 0185B979D96BEDE192C0ACD6566AADE52570
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/soltuXtd6a4tW9KfRVh_bE6Zvzk.roa
Signing time: Mon 16 Jan 2023 07:27:28 +0000
ROA not before: Mon 16 Jan 2023 07:27:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209689
IP address blocks: 212.87.210.0/23 maxlen: 24
185.174.149.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b9:79:d9:6b:ed:e1:92:c0:ac:d6:56:6a:ad:e5:25:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Jan 16 07:27:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2896db97b5de9ae2d5bd29f45587f6c4e99bf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a1:72:a8:5b:28:ea:c7:70:fa:c9:0a:86:94:
ee:1d:6f:6a:7a:9f:b1:36:4d:a6:9d:ee:ef:04:86:
15:41:2d:77:85:e3:08:f6:33:23:93:cd:6c:7e:de:
b9:d9:1f:e5:4e:78:3d:14:75:dc:04:5d:90:5c:94:
e0:86:6e:9a:3e:e8:53:f6:ab:e1:7d:60:46:b3:5c:
1d:ad:54:cc:82:0e:cc:c1:af:78:85:e4:62:8d:ab:
fb:4c:50:80:f3:9c:ac:b7:b8:f3:90:5e:04:ea:50:
d4:48:f0:d0:be:c4:54:49:f6:66:40:a2:3b:cf:bb:
be:e3:3f:0b:f6:a7:1b:69:aa:0d:de:21:8d:e5:a7:
59:b6:d7:c9:74:35:f7:9b:7d:1d:63:1a:50:15:5e:
c7:4b:58:ac:9e:d1:a7:15:e8:3f:b7:f3:af:f4:5c:
0b:d7:af:54:4f:58:05:48:6a:09:35:6c:05:dd:8f:
f5:bf:d3:91:2f:ca:4e:dd:77:ee:6a:20:27:04:89:
47:81:0d:05:a8:fb:07:c6:46:fa:d6:5a:9a:c7:63:
6c:0c:40:a6:4a:4b:40:23:45:04:9b:81:7a:28:88:
64:7b:71:c6:7c:de:50:96:04:88:af:e4:1f:81:1a:
a0:5e:92:01:8f:51:e7:ad:78:d7:0c:14:7c:0d:1e:
bf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:89:6D:B9:7B:5D:E9:AE:2D:5B:D2:9F:45:58:7F:6C:4E:99:BF:39
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/soltuXtd6a4tW9KfRVh_bE6Zvzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.149.0/24
212.87.210.0/23
Signature Algorithm: sha256WithRSAEncryption
73:ce:7b:9a:6a:e4:a6:b4:05:cd:fd:7e:c4:91:b4:0c:c5:96:
8b:d3:7f:bc:bc:ce:c8:bc:7d:c5:19:b5:43:6d:29:9e:c0:c1:
52:01:ca:ad:9e:54:eb:15:54:97:d2:28:38:5e:9a:54:66:0f:
d1:c0:4d:99:a3:58:e6:8f:be:71:54:a8:c9:a0:29:c9:97:45:
53:80:f9:b6:cb:e2:31:56:a3:87:3e:3b:8f:6e:cf:a4:e2:66:
63:1d:d3:ed:89:d1:4d:ba:0b:4b:c0:27:50:ab:59:fd:d7:7e:
3f:31:f8:d6:3c:b0:83:f5:d9:ea:e0:0c:9c:37:09:e3:64:b7:
08:fa:8c:bf:24:73:c7:7a:f1:99:9a:12:34:0e:69:ad:ca:77:
a9:c7:5c:c0:0e:c2:e1:cc:00:a8:7e:dc:b8:d2:53:00:53:a3:
3b:5b:70:34:26:f7:c6:13:37:f1:19:cd:7b:29:72:6c:b0:a0:
a6:22:04:c9:a2:80:26:94:4b:10:1c:52:12:66:fd:53:8e:67:
68:db:8e:85:b4:2d:fa:2e:20:75:1c:8b:84:16:58:cf:1c:80:
3b:41:ab:fd:a8:20:23:ef:ad:ad:fb:bc:8f:36:ee:dd:3e:13:
8d:ed:f4:e2:b1:d7:51:7c:11:f8:ee:b9:56:8a:51:d9:a4:8e:
22:11:1b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:26 2023 by rpki-client on console-fra.rpki-client.org