Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/cuqmJV3Ei1iAympEIbBNgP2VQCg.roa
File: cuqmJV3Ei1iAympEIbBNgP2VQCg.roa (raw, json)
Hash identifier: 7eoYxX8vvJJ+XSN619MmwIA3SqgVY+9hhvxYZOvN+U8=
Subject key identifier: 72:EA:A6:25:5D:C4:8B:58:80:CA:6A:44:21:B0:4D:80:FD:95:40:28
Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial: 01856E38C055C631D4BFD393713170162AAC
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/cuqmJV3Ei1iAympEIbBNgP2VQCg.roa
Signing time: Sun 01 Jan 2023 16:44:51 +0000
ROA not before: Sun 01 Jan 2023 16:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207147
IP address blocks: 185.178.88.0/22 maxlen: 24
130.0.88.0/22 maxlen: 24
185.194.120.0/22 maxlen: 24
185.237.40.0/22 maxlen: 24
185.164.212.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:c0:55:c6:31:d4:bf:d3:93:71:31:70:16:2a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Validity
Not Before: Jan 1 16:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72eaa6255dc48b5880ca6a4421b04d80fd954028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:51:c1:f9:2c:eb:51:c0:18:a9:6c:02:3e:
42:3a:f8:8a:33:0b:8a:9b:2c:11:93:7b:18:5d:da:
0b:b0:4b:e2:29:ea:f5:e0:18:a6:7a:c7:14:10:0c:
7d:e0:73:9a:8f:64:46:64:0d:a3:a9:6e:4d:79:c5:
6f:7f:4d:7a:4b:65:db:b6:5b:3a:91:c7:c7:e1:a0:
99:3c:9f:6e:fa:74:fb:62:b0:0d:8a:60:12:9a:86:
92:59:27:65:1a:9f:d8:13:06:f0:fd:1a:8f:d7:74:
de:64:f5:af:ca:08:56:18:ec:9a:16:95:9f:0e:80:
66:1a:4a:52:9c:f4:10:11:e7:e3:bf:3f:5a:82:21:
b4:ce:5b:34:3a:b8:57:13:f6:a7:8e:8c:05:f0:91:
3a:e8:82:94:3f:0d:14:23:78:61:88:4d:07:71:68:
a6:83:a9:27:e0:21:f2:94:38:a9:e9:c1:aa:c6:e1:
69:10:5b:85:c0:ae:ef:b2:ad:0a:c1:ae:f9:cc:93:
8d:4f:bd:ae:1b:75:8b:c6:4c:6b:fe:35:dc:d1:de:
1a:c7:c9:c9:f5:d9:2c:e2:5c:39:1f:a0:2b:97:2a:
77:5d:a3:44:ca:0b:93:d6:49:33:e3:e0:fc:e7:c6:
ad:1c:7a:90:03:98:d3:25:2b:24:a6:be:b1:16:d8:
11:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EA:A6:25:5D:C4:8B:58:80:CA:6A:44:21:B0:4D:80:FD:95:40:28
X509v3 Authority Key Identifier:
keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/cuqmJV3Ei1iAympEIbBNgP2VQCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.0.88.0/22
185.164.212.0/22
185.178.88.0/22
185.194.120.0/22
185.237.40.0/22
Signature Algorithm: sha256WithRSAEncryption
77:b6:d2:57:ba:7e:f2:95:54:e1:ca:0e:b5:dd:8c:20:81:8c:
32:0e:68:23:77:c4:d9:19:25:63:f3:55:e8:42:53:9e:c2:95:
8f:55:ae:08:bd:f9:2e:dc:fa:00:17:a6:eb:da:eb:b0:5f:1a:
16:ce:1c:25:f0:e4:bd:8d:4a:28:da:2f:06:04:fd:31:c0:41:
60:5c:7b:55:d0:4a:df:3d:5e:ec:0d:85:ea:9c:17:d3:ee:ba:
15:a9:e6:81:43:99:89:9a:23:0e:8a:b1:c9:6c:da:dc:ab:43:
ca:9c:ab:ca:41:de:92:60:44:38:b2:dc:9f:3d:e9:eb:5b:73:
5a:76:7b:1c:d8:2a:ef:f0:ee:cd:5f:91:75:d8:ac:ce:8d:a8:
88:4c:ff:3f:f1:00:3f:a1:12:c4:f9:3d:01:f2:ad:f0:b7:8a:
5a:ff:ff:92:f2:bc:73:5b:ec:d0:66:03:d3:ae:f4:33:04:2b:
dd:54:f3:ca:7d:a6:20:60:c2:5d:4c:fb:cc:03:c7:2e:88:68:
dc:d4:03:6c:4e:cf:ca:39:80:b4:83:f1:90:50:66:0c:77:77:
86:e0:f2:07:32:fb:dd:0f:10:8f:57:9b:5d:70:81:37:11:15:
4d:6c:35:7c:08:65:68:c6:c6:5d:9a:73:18:87:ac:72:37:5d:
0b:59:63:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:46 2023 by rpki-client on console.sobornost.net