Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/rIJgTbwNvXlcRvXXQG5PxGCMNsE.roa
File: rIJgTbwNvXlcRvXXQG5PxGCMNsE.roa (raw, json)
Hash identifier: Hv649zQuZZvdcVIHXrp2pxQSs/VzTjnxSGkOEuqHWYw=
Subject key identifier: AC:82:60:4D:BC:0D:BD:79:5C:46:F5:D7:40:6E:4F:C4:60:8C:36:C1
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 0187C23710F939BDC86C291BA7D9045E8CBB
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/rIJgTbwNvXlcRvXXQG5PxGCMNsE.roa
Signing time: Thu 27 Apr 2023 10:16:41 +0000
ROA not before: Thu 27 Apr 2023 10:16:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8903
IP address blocks: 212.80.160.0/19 maxlen: 24
213.170.32.0/19 maxlen: 24
185.123.120.0/22 maxlen: 24
212.66.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:37:10:f9:39:bd:c8:6c:29:1b:a7:d9:04:5e:8c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Apr 27 10:16:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac82604dbc0dbd795c46f5d7406e4fc4608c36c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a2:f1:2d:b8:37:38:ff:80:36:ff:79:b0:3f:
e2:b5:0f:12:1c:3a:19:c2:a6:51:ae:a9:65:8f:40:
60:68:dd:0d:b9:8e:2f:99:ac:39:10:0b:54:2a:67:
34:08:7c:67:81:d0:0d:d8:2f:88:74:95:ce:15:19:
9f:bd:fe:ae:f1:ba:bd:e1:f6:25:e3:34:4c:1d:2d:
cb:20:33:d8:34:07:31:7f:35:79:4b:8b:0e:e8:09:
5b:85:d8:8d:f4:b4:70:cf:12:3d:8b:59:d8:27:04:
65:4b:67:7f:4f:4f:6a:43:df:bb:cc:23:16:f5:0b:
d7:55:81:f0:b6:32:b1:61:78:1b:07:43:d9:ae:29:
29:85:e0:a1:96:ea:61:a0:60:b3:61:f7:bf:45:86:
e9:3b:a6:0d:06:5a:85:ec:48:18:c7:bb:0c:83:2e:
44:6e:6b:6d:1e:68:d2:b5:81:93:72:13:3a:3a:e6:
31:48:a3:36:ad:44:6a:a7:e9:a2:e1:27:af:17:ca:
0e:f2:b5:81:b2:f4:61:ea:92:96:34:96:73:e7:6d:
3e:54:35:56:17:5a:ec:ba:27:01:91:bb:04:5b:54:
cf:ea:ed:71:83:e5:e4:56:08:9f:18:45:62:b0:05:
41:7e:17:c8:a7:db:e4:c1:83:fd:dc:c0:65:65:2c:
d3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:82:60:4D:BC:0D:BD:79:5C:46:F5:D7:40:6E:4F:C4:60:8C:36:C1
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/rIJgTbwNvXlcRvXXQG5PxGCMNsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.120.0/22
212.66.160.0/24
212.80.160.0/19
213.170.32.0/19
Signature Algorithm: sha256WithRSAEncryption
7e:2d:8b:2c:9a:f3:31:6f:09:60:58:14:4c:a0:54:d5:d7:cf:
11:b8:b8:3c:e2:78:30:3a:53:b1:79:20:9c:9c:8b:8a:c6:e8:
25:e2:12:d1:aa:de:5e:fa:5d:47:01:a4:96:d0:9a:2e:9e:0d:
95:07:2e:99:aa:2e:42:24:ef:a9:57:72:20:be:b3:73:97:ab:
d1:aa:c7:c2:6a:2a:3a:2e:da:5f:5f:f2:e5:48:5e:06:fc:39:
0c:4e:cb:0f:00:0f:17:90:e5:ec:51:3c:2a:22:ef:66:b5:00:
55:bd:e3:44:ba:7d:24:cd:0e:ce:70:70:70:bc:b1:51:af:16:
d0:f3:12:42:22:92:6d:35:f8:ab:d6:be:61:f9:ff:5d:1a:1f:
1f:4b:b8:0b:f6:37:c5:56:89:d3:f9:9b:15:85:59:94:29:81:
9f:d7:82:01:73:1b:c0:df:96:7c:af:3d:4b:12:55:df:39:4c:
a2:c8:a8:df:c6:dd:dd:a0:90:51:08:c5:b1:37:9e:32:aa:6a:
eb:51:cf:61:5b:c7:05:5d:48:fc:e5:a1:4e:c3:11:43:e2:6a:
65:a5:67:fc:74:db:d5:ad:9f:72:64:c9:73:c3:50:a1:6a:74:
50:fb:95:ed:f2:8a:80:17:d7:2d:ae:f7:b9:25:85:14:3d:94:
6e:c5:1d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:41 2024 by rpki-client on console-fra.rpki-client.org