Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/AAmbebXU7OEmo44bF1PeR9q4DmU.roa
File: AAmbebXU7OEmo44bF1PeR9q4DmU.roa (raw, json)
Hash identifier: BbaKOzyGe/H2KpWIrobKImGaQZxXiYgcGt4wMFKUgyk=
Subject key identifier: 00:09:9B:79:B5:D4:EC:E1:26:A3:8E:1B:17:53:DE:47:DA:B8:0E:65
Certificate issuer: /CN=7117386973fbf88a867c82a8867b050fca60b011
Certificate serial: 01856DDD235C9E295A4A00103F48672F3652
Authority key identifier: 71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/AAmbebXU7OEmo44bF1PeR9q4DmU.roa
Signing time: Sun 01 Jan 2023 15:04:47 +0000
ROA not before: Sun 01 Jan 2023 15:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64478
IP address blocks: 185.162.246.0/24 maxlen: 24
185.162.245.0/24 maxlen: 24
185.162.244.0/24 maxlen: 24
185.162.247.0/24 maxlen: 24
2a0a:800::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:23:5c:9e:29:5a:4a:00:10:3f:48:67:2f:36:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7117386973fbf88a867c82a8867b050fca60b011
Validity
Not Before: Jan 1 15:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00099b79b5d4ece126a38e1b1753de47dab80e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c7:c1:e4:0f:6c:1a:a6:0b:6b:6d:7f:12:dc:
3b:85:ec:13:ee:04:58:fd:76:9b:ff:39:42:a4:05:
82:d2:66:37:5c:56:f1:b0:45:03:08:30:08:03:69:
47:10:7c:76:a6:40:99:e1:4f:6e:7f:c1:3f:cf:35:
fa:79:f7:9e:34:ea:06:d1:8e:23:b5:73:7e:b5:2f:
07:90:c1:9e:c6:59:c2:71:50:4e:35:b7:54:01:a3:
d7:2b:d3:0f:d4:d3:05:a3:c8:0e:51:11:29:c4:5a:
7c:aa:c0:0f:13:c2:94:87:72:a9:c9:e6:e6:b2:b0:
a3:8f:12:34:50:09:6e:11:dd:66:68:38:e0:9f:14:
38:a7:7e:57:c7:ca:f6:c8:2c:30:8d:1d:29:71:a6:
5c:c5:fe:b3:c9:9c:83:ce:5b:3d:bf:1a:85:1f:c8:
9a:26:f0:8a:72:a5:d8:54:dc:26:1d:4d:fe:eb:2b:
ec:b7:6f:64:b1:9a:14:2f:d6:74:0f:90:19:cf:be:
37:f6:b4:c3:a3:53:ad:b9:e9:62:38:d4:65:95:48:
f6:aa:cc:a4:80:22:3e:ff:2d:4d:3e:10:4f:71:cf:
2d:6d:14:b4:43:2a:64:b6:c1:31:80:12:20:80:c9:
ea:e5:f3:59:c6:86:0f:39:a1:c0:27:06:6b:92:78:
6d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:09:9B:79:B5:D4:EC:E1:26:A3:8E:1B:17:53:DE:47:DA:B8:0E:65
X509v3 Authority Key Identifier:
keyid:71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/AAmbebXU7OEmo44bF1PeR9q4DmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.244.0/22
IPv6:
2a0a:800::/29
Signature Algorithm: sha256WithRSAEncryption
5b:5f:32:d6:c9:27:08:ab:d9:c5:6d:31:03:bd:d7:cc:1a:d9:
85:10:25:dd:09:6d:95:e2:ab:90:59:71:c9:0d:78:8f:84:6e:
be:e8:f4:24:87:d7:17:d7:e0:6f:7a:c5:a9:a7:65:ae:9b:86:
53:1a:15:cd:2e:d1:97:e6:87:89:a6:d6:12:3c:45:5e:5a:5a:
8e:7d:72:da:0b:fe:3d:ba:48:69:b2:03:92:67:e3:ea:3b:73:
17:b5:ea:1a:4b:23:06:71:99:dd:7e:c0:82:b0:6f:48:9d:2a:
78:04:e3:d2:ca:c9:a1:97:dd:99:4a:a9:0d:54:b0:a7:8a:35:
c1:b5:d4:c3:8e:ce:8a:21:5f:e3:62:f8:bd:21:45:a1:c0:95:
4e:aa:8c:2d:cb:52:a4:7a:f9:7c:6c:f3:c1:84:8e:89:79:b0:
37:e3:b6:9a:41:c9:c0:4e:ae:e1:f5:47:02:7a:2f:bf:86:29:
2e:24:0b:88:82:21:f9:16:09:42:2c:18:9a:0e:cf:61:64:6b:
22:af:af:45:78:94:02:ce:0c:01:c7:71:7d:3b:e3:84:97:47:
05:a0:4d:86:65:d5:91:a1:d6:e0:b6:ee:da:bc:fe:31:d8:c7:
96:84:3c:cf:79:05:ad:65:dd:ae:6c:8a:4c:72:2c:78:89:89:
7f:ad:1f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:02:33 2024 by rpki-client on console.sobornost.net