Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/_iheDoK_IFLp4p06HGLupDansCc.roa
File: _iheDoK_IFLp4p06HGLupDansCc.roa (raw, json)
Hash identifier: gvRTGE3FbCuEfHTks+7X0vQGYxGMOGRM6beiIViSDLY=
Subject key identifier: FE:28:5E:0E:82:BF:20:52:E9:E2:9D:3A:1C:62:EE:A4:36:A7:B0:27
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 0188F6E9CA79F9C0C2835B17889661A4D9E7
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/_iheDoK_IFLp4p06HGLupDansCc.roa
Signing time: Mon 26 Jun 2023 08:54:56 +0000
ROA not before: Mon 26 Jun 2023 08:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.85.78.0/24 maxlen: 24
185.85.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:e9:ca:79:f9:c0:c2:83:5b:17:88:96:61:a4:d9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Jun 26 08:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe285e0e82bf2052e9e29d3a1c62eea436a7b027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:09:3e:61:5d:ae:07:9e:2d:03:a6:10:d2:15:
79:eb:ef:7a:8e:1a:6c:cf:74:65:da:8d:c8:d0:0a:
a1:ae:1c:de:3d:fa:7d:c8:b5:d3:83:53:f0:3a:36:
fd:f7:9a:38:40:fb:b7:0a:7e:33:cf:51:37:8c:51:
34:42:c4:43:2c:03:d0:2b:51:5a:d6:1b:b3:6a:57:
2f:fd:31:3b:c3:66:f5:6d:83:28:df:8b:c1:af:d9:
22:15:b7:06:bd:04:84:40:e5:70:f8:dd:36:d8:b1:
a3:5b:53:22:51:c2:cf:74:51:07:4c:57:c6:3c:30:
10:f3:ca:bc:93:b7:18:ad:f3:1f:ad:87:cc:d1:89:
70:42:45:da:a1:08:31:35:d3:36:ac:3d:f8:88:cb:
ec:07:cd:fb:be:e6:b6:e9:8b:38:9e:a6:5f:30:a8:
05:da:08:d2:fc:8c:6d:cc:5e:0e:1f:d4:91:56:78:
ef:fe:cd:7f:98:da:10:3e:78:a6:66:1e:f9:26:ca:
82:90:37:5e:7a:e3:6d:43:b1:70:25:1c:65:17:b8:
55:cc:fb:05:52:bf:ee:ef:a6:6e:f2:2c:f9:01:cb:
22:81:51:b1:ed:ae:91:f1:1d:bf:90:a5:df:72:a3:
96:c7:f5:7d:6a:17:b7:ca:85:4f:2e:19:26:2e:d7:
2c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:28:5E:0E:82:BF:20:52:E9:E2:9D:3A:1C:62:EE:A4:36:A7:B0:27
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/_iheDoK_IFLp4p06HGLupDansCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.78.0/23
Signature Algorithm: sha256WithRSAEncryption
85:f5:fc:d6:e9:5e:7b:95:ea:4e:82:f2:3b:c6:79:e5:cc:b2:
6c:2c:fe:7c:46:92:19:1d:c6:90:cf:1b:f7:31:e0:3c:4e:9c:
71:b8:e5:d4:f4:da:d4:67:a8:4b:49:f5:d2:c1:ce:2f:a9:6d:
77:23:c8:b6:6a:15:1d:e2:65:03:0e:65:e3:af:8e:47:39:80:
d8:2c:09:41:f9:2e:20:e9:68:3b:7b:e6:43:c4:7c:f5:08:bb:
78:11:a1:65:5a:ba:c0:8d:65:23:4a:15:c0:de:d0:f4:35:55:
46:51:46:e9:fc:3b:9a:88:ff:6a:0a:d2:bf:be:9e:2b:6c:40:
28:00:5c:18:4d:ce:bb:19:1c:ca:b1:70:d3:db:56:db:c1:a5:
6e:6c:1a:7b:11:f9:0e:30:02:27:c1:7a:ca:8c:6e:9a:c1:5d:
95:ad:0d:71:86:a4:1f:14:f5:84:25:b0:7c:6c:9c:1d:ef:56:
4f:8c:34:01:6a:81:0f:1f:f1:2c:4f:e4:6b:87:12:f1:fb:a8:
13:77:49:d0:55:e3:40:5d:ba:8b:5d:96:61:a9:67:a3:20:a6:
c3:c4:6b:1a:c6:95:be:b9:9f:1e:08:45:55:ff:85:2b:92:b6:
9f:0a:50:e6:a4:a0:df:f9:e2:f9:21:2e:55:a8:58:94:e4:93:
18:79:90:b0
-----BEGIN CERTIFICATE-----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Generated at Tue Jul 25 11:08:53 2023 by rpki-client on console-fra.rpki-client.org