Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/SI4ZLI-sWxrFCP38FWxEwE_fJ7c.roa
File: SI4ZLI-sWxrFCP38FWxEwE_fJ7c.roa (raw, json)
Hash identifier: U/CRLpSjNky56AbJ29E4Hoxb9nULpQ70OWqMBp9FTgY=
Subject key identifier: 48:8E:19:2C:8F:AC:5B:1A:C5:08:FD:FC:15:6C:44:C0:4F:DF:27:B7
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 018A459D33E2A2EF631B87946F75270B7D7D
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/SI4ZLI-sWxrFCP38FWxEwE_fJ7c.roa
Signing time: Wed 30 Aug 2023 08:44:04 +0000
ROA not before: Wed 30 Aug 2023 08:44:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210906
IP address blocks: 185.47.92.0/22 maxlen: 22
185.7.237.0/24 maxlen: 24
185.7.236.0/24 maxlen: 24
185.211.96.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:45:9d:33:e2:a2:ef:63:1b:87:94:6f:75:27:0b:7d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Aug 30 08:44:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=488e192c8fac5b1ac508fdfc156c44c04fdf27b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cf:94:24:67:e8:73:94:1c:b2:0a:2e:3d:93:
2e:28:e8:ec:23:7c:f3:cd:58:42:b9:91:1f:a5:98:
c3:be:89:5f:ad:46:2f:93:b6:0e:c3:ff:91:68:25:
db:b1:27:8b:7d:bb:d0:ef:e2:76:d0:40:65:94:67:
b5:88:b1:fb:f8:45:2e:6b:49:60:0e:3b:4b:46:e3:
36:cd:8c:01:17:93:45:8a:ae:9f:f0:dd:ef:80:13:
98:07:ca:e2:f6:71:f2:ac:bb:de:1b:3f:18:f5:bf:
b8:20:4c:cc:6e:9c:28:a6:0b:c8:cc:85:73:a4:04:
4b:d2:6e:3b:3f:64:df:c5:32:07:1c:4d:98:60:e5:
e2:cc:a8:2b:6a:fd:78:16:0f:a9:b9:bb:fc:b2:2f:
50:a8:a9:c9:ac:1e:ef:83:ad:36:aa:b1:d4:89:bf:
e1:97:ef:c2:b4:b6:0e:16:de:e0:14:eb:49:39:3e:
47:0f:89:41:9c:40:02:2b:ed:6f:fa:81:78:64:d1:
5b:d7:44:3f:fe:b0:23:f9:f3:7f:7f:b9:d0:82:e4:
dc:82:bf:6b:a7:70:a8:9b:a9:16:59:ba:6e:7a:7b:
a8:76:2c:4d:11:60:20:e3:da:53:b1:71:29:92:38:
a7:35:fa:63:42:f6:6c:2b:62:c8:c1:0d:21:3a:74:
0e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8E:19:2C:8F:AC:5B:1A:C5:08:FD:FC:15:6C:44:C0:4F:DF:27:B7
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/SI4ZLI-sWxrFCP38FWxEwE_fJ7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.236.0/23
185.47.92.0/22
185.211.96.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:2e:d2:a6:f5:b6:f5:43:d2:38:97:2a:eb:dc:82:de:42:1b:
91:a4:a4:84:fa:d0:59:c0:f6:2e:01:8a:d2:0e:69:e5:cb:d1:
c9:a7:4a:49:3f:47:0c:ac:2e:2a:76:c5:c4:3b:ce:24:5d:88:
2f:d8:ab:7d:a7:3b:51:36:9d:7d:ab:cb:df:e5:bf:0d:e0:02:
be:fe:41:f5:99:32:e4:94:2e:e0:2f:97:26:8f:ab:2e:bf:f6:
f2:25:06:c0:f7:34:4c:bf:85:23:25:06:1e:a2:36:c4:d9:29:
1d:2d:2c:b7:4e:d9:f1:39:ef:0f:a8:55:ca:8d:9c:62:9a:11:
0f:d7:19:d3:22:82:57:4a:16:5b:b9:e4:44:76:00:9f:01:82:
99:aa:36:2e:eb:ca:eb:3c:da:09:03:9a:c1:e5:4d:a0:87:fd:
36:60:05:b2:fe:e9:1e:da:5b:e7:4c:c4:a5:e3:92:dc:6e:65:
c8:7d:46:1c:c4:43:73:03:17:c7:83:1f:35:09:3d:20:82:83:
1e:8b:b6:26:73:06:7c:7a:40:5d:25:e6:a3:de:e0:d1:ff:3c:
f2:76:cf:6f:68:21:a6:4a:1c:b9:5d:ca:1a:39:50:0d:27:21:
ce:9c:91:45:4a:8c:81:3a:b3:4e:18:1a:b0:2a:f8:d9:07:60:
5a:fc:7f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:50 2024 by rpki-client on console.sobornost.net