Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/HbAs7xMhlQ34ZNSpUUR1aisjLUU.roa
File: HbAs7xMhlQ34ZNSpUUR1aisjLUU.roa (raw, json)
Hash identifier: u15Z1dYbeI68Fo7XFE2t801PIjZtp6PwYpv1e+a1Ag8=
Subject key identifier: 1D:B0:2C:EF:13:21:95:0D:F8:64:D4:A9:51:44:75:6A:2B:23:2D:45
Certificate issuer: /CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Certificate serial: 018B5DA6D4C6096F6EAC51734C20A0B6A6AE
Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/HbAs7xMhlQ34ZNSpUUR1aisjLUU.roa
Signing time: Mon 23 Oct 2023 17:48:16 +0000
ROA not before: Mon 23 Oct 2023 17:48:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206360
IP address blocks: 185.220.136.0/30 maxlen: 30
185.220.136.0/24 maxlen: 24
185.220.139.0/24 maxlen: 24
185.220.138.0/24 maxlen: 24
185.220.136.32/28 maxlen: 28
185.220.137.0/24 maxlen: 24
185.220.136.4/30 maxlen: 30
185.220.137.4/30 maxlen: 30
185.220.136.16/29 maxlen: 29
185.220.137.8/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5d:a6:d4:c6:09:6f:6e:ac:51:73:4c:20:a0:b6:a6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Validity
Not Before: Oct 23 17:48:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1db02cef1321950df864d4a95144756a2b232d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f2:ec:dd:31:80:57:99:f8:ff:fa:8c:c1:f9:
e3:e6:0b:d2:fe:cf:43:5b:b5:9e:64:92:98:72:8e:
95:cb:16:0a:5f:84:e5:8b:44:1b:ee:68:25:af:82:
99:26:40:51:f2:90:5d:12:aa:54:92:05:16:90:6e:
e2:c6:bc:ce:00:05:e7:06:8c:ea:ca:a0:e1:29:9f:
53:68:e4:a2:bd:29:77:51:f1:8c:7b:76:58:ea:96:
a1:70:0c:b9:15:df:e5:3e:a2:f1:f9:d3:99:96:72:
3b:6a:44:b6:f5:95:23:2c:92:51:4e:7c:26:1e:0d:
2c:b8:27:24:ff:55:01:61:ed:60:02:99:30:b3:ef:
1f:88:01:0c:0d:5e:41:5e:52:d4:fa:f9:fb:6f:ac:
f4:96:f2:bb:c5:c9:23:4c:ec:37:d1:01:94:65:cf:
b4:84:74:3b:b9:6a:93:ec:50:0d:d8:7f:ad:62:ee:
98:17:48:15:0a:ca:46:a2:21:e6:19:61:0b:8d:fe:
84:e6:53:03:e7:93:61:92:78:2d:9b:b5:61:05:cf:
1a:7d:4d:ea:ec:19:ca:25:48:13:3c:6d:ae:18:14:
86:4a:35:6d:40:3c:58:9f:83:ff:bf:8f:7b:59:97:
48:8d:14:87:72:07:b0:10:97:fe:98:f3:fe:01:f9:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B0:2C:EF:13:21:95:0D:F8:64:D4:A9:51:44:75:6A:2B:23:2D:45
X509v3 Authority Key Identifier:
keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/HbAs7xMhlQ34ZNSpUUR1aisjLUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.136.0/22
Signature Algorithm: sha256WithRSAEncryption
89:37:56:fd:a9:a8:05:9d:0c:b6:35:92:7a:8d:01:18:0a:aa:
d4:a0:0b:0e:4a:13:d1:fe:41:93:0e:d6:b5:b4:2e:98:04:fa:
06:a5:91:bb:7f:18:02:f5:60:3c:b2:e7:31:8d:73:03:67:6b:
7e:34:5c:4d:81:11:39:a7:ab:77:8b:46:94:50:81:81:6c:e8:
14:12:83:f6:80:2a:a1:54:de:12:a8:d0:d3:82:02:16:c5:ff:
35:20:e9:8a:0a:d1:0a:53:9f:7e:90:67:ff:50:1c:a3:83:4a:
91:08:e7:19:9d:51:32:9e:66:8c:ee:5d:b6:99:29:f8:ea:96:
ed:40:26:e3:e8:97:a6:83:d0:f6:17:b7:66:99:5b:3e:d1:7c:
5d:de:6b:32:38:8c:d8:a3:89:75:fc:7f:a5:f9:c5:53:2d:db:
98:1d:79:4b:c4:1e:fa:c6:b7:10:7c:5a:da:8a:0d:0d:6d:3a:
92:8b:df:cc:b2:a8:78:dc:d0:08:e4:70:dc:08:a9:96:36:32:
58:11:0b:f2:85:56:57:86:b6:9d:f6:51:9e:b4:7a:7c:e0:a0:
b5:2f:a0:e4:42:89:b1:d6:9f:50:c0:e7:73:85:68:fa:11:76:
cf:0c:83:b7:d4:e0:24:44:2d:b5:39:35:4c:76:35:73:1c:7d:
32:9c:43:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:23 2024 by rpki-client on console-fra.rpki-client.org