Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/E_Nd_-yp2cwZ_28yayxURwfKjDA.roa
File: E_Nd_-yp2cwZ_28yayxURwfKjDA.roa (raw, json)
Hash identifier: 0EoPwA41l3gzFekpQXS48hTqqFC/stLWGRMN81AnO30=
Subject key identifier: 13:F3:5D:FF:EC:A9:D9:CC:19:FF:6F:32:6B:2C:54:47:07:CA:8C:30
Certificate issuer: /CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Certificate serial: 01856EAFE48BDA32C76543FEBFF20E8559CE
Authority key identifier: AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/E_Nd_-yp2cwZ_28yayxURwfKjDA.roa
Signing time: Sun 01 Jan 2023 18:54:59 +0000
ROA not before: Sun 01 Jan 2023 18:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60848
IP address blocks: 185.247.96.0/24 maxlen: 24
185.247.99.0/24 maxlen: 24
94.127.60.0/22 maxlen: 22
2a02:2188:2000::/36 maxlen: 36
2a02:2188:f000::/36 maxlen: 36
2a02:2188::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:e4:8b:da:32:c7:65:43:fe:bf:f2:0e:85:59:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Validity
Not Before: Jan 1 18:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13f35dffeca9d9cc19ff6f326b2c544707ca8c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:d4:6f:82:32:74:3b:7a:ef:c0:6e:b6:5b:
c5:36:5c:f9:f3:44:8c:d6:44:39:64:07:de:23:b2:
63:40:2b:67:f7:47:5b:a1:33:31:1b:52:50:13:69:
9f:03:a7:0d:7c:33:b4:8d:44:39:e1:fe:ac:cd:56:
84:c0:da:6f:76:8a:64:56:66:1b:06:f3:8c:61:7c:
89:61:7f:dc:07:26:f1:0d:b4:8a:d1:32:0a:ef:54:
da:87:3b:1f:64:55:91:bf:c3:91:5c:6b:ac:17:fe:
5c:9a:14:93:80:7e:53:6d:24:20:5f:d8:08:3f:79:
00:bd:a1:03:a2:5d:8c:23:ad:7a:50:42:5f:e2:93:
11:82:1d:66:a4:4e:48:4f:57:bf:fc:af:2b:36:32:
ad:24:52:87:74:80:26:2c:8c:48:b9:ea:c7:64:b9:
be:f3:97:dc:f7:56:22:33:0f:c4:ef:0d:c3:9a:ad:
bc:25:e6:f6:34:81:77:38:15:f9:46:34:ef:49:00:
ab:89:11:a5:1f:d1:03:6d:d8:34:16:66:4c:f9:b5:
4f:5c:ab:f2:83:79:09:e4:ee:ee:05:47:e4:65:43:
65:a5:da:e8:aa:70:de:92:73:05:b5:b9:96:b6:68:
f8:24:fc:1f:21:e2:16:e2:f6:80:c6:f1:bf:a6:0c:
33:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F3:5D:FF:EC:A9:D9:CC:19:FF:6F:32:6B:2C:54:47:07:CA:8C:30
X509v3 Authority Key Identifier:
keyid:AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/E_Nd_-yp2cwZ_28yayxURwfKjDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.60.0/22
185.247.96.0/24
185.247.99.0/24
IPv6:
2a02:2188::/48
2a02:2188:2000::/36
2a02:2188:f000::/36
Signature Algorithm: sha256WithRSAEncryption
32:1b:45:d9:da:4b:85:90:41:0e:f3:65:e3:9e:d7:bf:fa:f5:
44:ac:73:b6:75:7e:9c:c7:07:f0:3d:d7:4f:20:8a:76:7f:e5:
fa:99:58:78:46:4a:d9:f1:01:5a:38:21:fa:89:07:75:8b:fc:
8a:21:d1:2a:ab:49:41:86:e0:d3:ef:80:f8:54:16:e0:c2:b8:
61:53:5c:3a:c2:2f:e0:06:78:18:b5:a1:cb:44:81:13:76:17:
c4:38:2a:63:10:44:2d:06:0c:f0:1e:29:12:44:68:bf:c4:a3:
30:d9:2d:88:ba:90:68:c2:52:0b:01:ff:6f:0b:8a:47:19:1a:
9b:2b:77:55:98:bc:56:ec:a4:9f:f2:e2:2b:35:f4:f1:15:f7:
7e:2d:d1:c1:09:76:a1:a5:4d:b5:5e:60:c3:87:d4:67:8b:b2:
97:91:c8:66:1b:95:a2:4c:a9:94:85:dd:d1:b7:1e:59:bd:1d:
22:da:b7:9d:16:15:76:56:d1:ce:cc:45:72:86:38:77:ed:2c:
62:49:64:13:d9:67:64:bc:af:ea:9e:46:09:bd:82:c2:83:1c:
6b:d8:cb:14:df:e5:8a:8e:80:c6:2a:82:10:ca:c8:ae:86:1e:
88:fa:85:bf:12:9f:da:4b:b0:ae:51:d4:36:b2:42:dc:db:2c:
c0:c4:e0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:01 2024 by rpki-client on console.sobornost.net