Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6F3hbjwhr5LjYszmTXQnM7PutJE.roa
File: 6F3hbjwhr5LjYszmTXQnM7PutJE.roa (raw, json)
Hash identifier: pttA1MCHjEgJRoivL8sPkuuqJ+znDLlitP9mXNRFj3g=
Subject key identifier: E8:5D:E1:6E:3C:21:AF:92:E3:62:CC:E6:4D:74:27:33:B3:EE:B4:91
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 0187BD3AD6C16FD73C8183318652691FAE03
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6F3hbjwhr5LjYszmTXQnM7PutJE.roa
Signing time: Wed 26 Apr 2023 11:02:42 +0000
ROA not before: Wed 26 Apr 2023 11:02:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204653
IP address blocks: 212.80.177.0/24 maxlen: 24
185.123.120.0/23 maxlen: 23
185.123.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:3a:d6:c1:6f:d7:3c:81:83:31:86:52:69:1f:ae:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Apr 26 11:02:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e85de16e3c21af92e362cce64d742733b3eeb491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cb:af:4e:28:97:c0:1d:a6:4d:7a:62:2e:0f:
c4:95:da:59:2e:ee:7c:16:17:57:d3:3e:2c:f4:03:
cb:1f:85:87:23:2d:b0:9a:bc:77:e0:02:0f:57:ab:
2d:d2:38:fc:ed:91:63:73:81:06:ec:60:a6:9c:89:
9e:3d:92:a3:b4:6e:73:c4:61:00:ac:88:81:28:ca:
bb:4a:34:11:6d:9b:b3:db:0b:dd:d8:0a:be:48:55:
2f:a6:24:a6:79:a7:c2:bc:5b:2f:41:92:a3:72:bd:
ff:c7:bb:55:93:9b:20:7a:63:b7:94:08:3f:69:17:
af:be:ea:2d:de:57:41:c1:ea:ff:96:eb:d1:d0:4b:
a6:8c:5e:78:55:2d:d1:63:6e:31:21:37:63:2b:93:
16:98:38:79:1a:39:86:86:e9:5f:a8:07:a5:2a:8e:
23:74:68:d3:6a:77:07:0d:94:62:0d:f8:c7:4c:12:
34:ea:d6:34:e9:24:61:d5:38:72:2f:6e:e1:3d:d3:
50:f4:82:bc:1e:60:d3:0b:97:ff:89:b9:cd:82:b4:
52:8a:c4:fd:a7:d3:74:f9:b8:fc:6b:5a:9b:41:9e:
ce:29:a0:99:b9:66:48:6f:18:cc:4e:99:41:62:ea:
2d:73:49:e4:ee:b9:54:a9:27:6d:b4:76:1b:df:5d:
37:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5D:E1:6E:3C:21:AF:92:E3:62:CC:E6:4D:74:27:33:B3:EE:B4:91
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6F3hbjwhr5LjYszmTXQnM7PutJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.120.0/23
212.80.177.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:e8:fe:f7:fa:4e:d1:ef:37:32:03:1e:de:46:99:5d:aa:00:
db:9d:d8:43:f0:5a:1c:6a:73:cc:09:59:38:64:13:e7:c4:58:
35:d9:0c:16:b2:35:56:df:4d:b0:b6:95:c1:8d:40:d2:64:31:
d9:ec:2c:59:06:44:71:63:08:48:a6:11:b5:1b:7a:55:75:0e:
ec:68:97:43:df:7d:b1:c4:71:a7:73:c7:30:89:a6:80:d5:00:
45:b3:37:11:04:51:c0:ac:e8:46:83:86:b1:00:57:1d:14:4a:
b7:14:75:25:e4:9d:af:72:1d:60:8f:cd:b4:23:c2:53:03:b2:
02:49:1d:a3:66:16:23:19:f8:e4:de:ab:4e:b8:7c:9b:0c:45:
fe:6f:ae:3b:32:df:38:cf:9b:c9:23:97:30:a5:3d:2e:bb:1b:
c7:e1:c0:d2:2d:b0:ad:51:2e:50:00:da:db:9b:a9:46:42:be:
31:03:40:d5:1b:dd:04:2b:96:db:2b:3f:4c:5b:fc:97:3d:75:
36:0d:c8:f7:c0:31:2b:8b:09:81:73:00:1c:08:54:c8:d7:5c:
5b:0e:f7:49:0d:1b:d7:fb:f5:4e:9d:77:51:2d:a6:c9:9f:6d:
4f:db:3c:0f:70:e2:34:1c:bd:b2:b1:2f:d3:93:54:82:0a:da:
d4:53:09:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:41 2024 by rpki-client on console-fra.rpki-client.org