Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/sDhxZ5O86eseqDtSEAX0t-MnQRg.roa
File: sDhxZ5O86eseqDtSEAX0t-MnQRg.roa (raw, json)
Hash identifier: ZsD419GfZJA6LlcAdvqwUvS8pGrbGpNs3FabsLQXbIQ=
Subject key identifier: B0:38:71:67:93:BC:E9:EB:1E:A8:3B:52:10:05:F4:B7:E3:27:41:18
Certificate issuer: /CN=23f8c999b30ce248e6c468c784d64d72f963e938
Certificate serial: 01856CF85779E524127EDC8264B38CA2C4B0
Authority key identifier: 23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/sDhxZ5O86eseqDtSEAX0t-MnQRg.roa
Signing time: Sun 01 Jan 2023 10:54:52 +0000
ROA not before: Sun 01 Jan 2023 10:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198948
IP address blocks: 178.218.193.0/24 maxlen: 24
91.239.248.0/22 maxlen: 22
185.129.112.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 15 Jun 2023 09:41:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:57:79:e5:24:12:7e:dc:82:64:b3:8c:a2:c4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f8c999b30ce248e6c468c784d64d72f963e938
Validity
Not Before: Jan 1 10:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b038716793bce9eb1ea83b521005f4b7e3274118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:d3:14:e4:8a:70:71:59:8c:ec:e1:b0:0c:
e6:06:ca:40:20:64:72:e6:32:e5:5a:c1:94:d9:fa:
c9:87:0d:6c:bf:d0:32:58:0a:67:2f:56:06:73:f6:
36:98:2c:a8:8a:fe:39:b9:c7:c7:11:99:bf:80:1c:
74:2f:03:4b:59:da:f3:48:f7:a1:a8:76:1d:7e:45:
fc:56:13:75:4c:f6:53:91:00:ac:94:ef:5a:55:a5:
26:1d:13:ba:5f:ee:5f:f3:23:49:6e:15:c4:5a:90:
c4:e6:f6:03:b5:5a:a5:e0:b7:9f:a4:85:bd:10:a4:
80:6b:2c:65:29:b1:32:17:78:69:c9:7a:a0:4b:ef:
67:0a:5f:e8:b9:1d:8f:bd:1d:94:76:d8:3b:ba:2b:
64:b3:42:e7:02:5e:e7:d7:e5:f7:57:e7:a8:f9:d5:
6e:29:fa:12:f6:79:ef:f3:28:96:43:cb:48:44:05:
b1:79:74:31:5a:39:7f:e5:d2:07:38:32:04:fa:7d:
36:93:04:9b:c6:71:16:c8:13:3d:2d:9a:1d:ae:dc:
6b:83:93:ba:76:e0:a9:e8:79:50:38:e2:2f:23:3e:
6d:a2:78:06:e2:d5:e9:28:d9:fa:74:d6:8b:ba:21:
32:62:4f:c4:80:f7:de:c5:6d:55:4b:46:78:e1:c2:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:38:71:67:93:BC:E9:EB:1E:A8:3B:52:10:05:F4:B7:E3:27:41:18
X509v3 Authority Key Identifier:
keyid:23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/sDhxZ5O86eseqDtSEAX0t-MnQRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.248.0/22
178.218.193.0/24
185.129.112.0/22
Signature Algorithm: sha256WithRSAEncryption
21:13:36:72:24:ae:de:14:97:8f:dd:f4:08:ad:f3:08:3e:2f:
06:49:a2:fa:69:99:33:40:05:cd:99:9f:01:6a:6f:a0:04:ca:
0e:d8:92:c8:e3:55:eb:29:63:56:4e:6d:8f:3f:9d:c2:f3:e3:
22:e0:a2:60:4e:03:eb:ec:95:0b:71:85:ad:35:bc:df:fa:9a:
84:88:19:20:8a:38:45:1b:c3:a4:4f:c7:e5:b7:c4:46:5f:bc:
64:00:83:0a:6a:d3:f9:41:0c:ed:6f:93:1a:5a:1e:50:e8:18:
d4:ba:55:4f:8a:36:58:08:0c:87:1d:cd:b7:36:de:21:f2:51:
6f:23:b9:6c:9b:0d:20:f7:9a:5b:a8:1a:d0:4c:7c:41:ea:02:
ee:d4:3f:8a:6a:99:41:02:95:d4:f8:01:e7:b7:fd:48:cb:0a:
6c:7f:b2:17:23:38:55:c1:b4:a0:66:0a:dc:c4:ed:bc:42:2b:
1d:3f:ef:00:ce:a3:1a:58:bc:49:5f:2a:4b:9b:50:dc:a7:ec:
28:f9:d5:ce:4e:b7:bf:81:15:21:b8:78:51:31:c0:25:a8:ac:
36:1d:d5:75:d0:15:5f:32:2a:b8:8f:fb:ac:37:be:3f:c0:be:
d8:96:3e:89:df:99:b9:7d:0a:43:46:01:d3:25:73:cd:54:a3:
21:07:eb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:17 2024 by rpki-client on console-fra.rpki-client.org