Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-iYdnNfzr5h7LEbnG3ClFl69tmU.roa
File: 1-iYdnNfzr5h7LEbnG3ClFl69tmU.roa (raw, json)
Hash identifier: g7NdO93ojsdp3qSpBKSkPTSyATCMfbD+5nhO5qCJTcs=
Subject key identifier: FA:26:1D:9C:D7:F3:AF:98:7B:2C:46:E7:1B:70:A5:16:5E:BD:B6:65
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B1465C56AB9BD60837C5915C73EFE3489
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-iYdnNfzr5h7LEbnG3ClFl69tmU.roa
Signing time: Mon 09 Oct 2023 12:24:55 +0000
ROA not before: Mon 09 Oct 2023 12:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42926
IP address blocks: 212.115.42.0/23 maxlen: 24
212.115.40.0/24 maxlen: 24
185.226.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:14:65:c5:6a:b9:bd:60:83:7c:59:15:c7:3e:fe:34:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 9 12:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa261d9cd7f3af987b2c46e71b70a5165ebdb665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:ec:70:da:8b:79:6d:77:bd:5b:ac:e1:ee:
a1:3c:a2:ec:d9:5d:a9:d2:dd:86:40:ac:7e:21:f9:
04:ce:45:73:13:eb:98:69:d8:ad:03:b8:36:d2:e0:
5f:d1:e0:e1:62:b4:5b:48:e2:c2:10:7c:2f:ff:8d:
6c:22:a4:33:1e:54:52:bc:9f:27:2a:db:a3:06:57:
aa:fc:22:b5:18:ec:3e:e2:b1:15:c7:39:f3:94:ac:
a3:d6:0b:90:18:de:0a:0b:ef:d3:8d:57:2c:90:f9:
d6:3e:d6:af:71:3e:0c:af:7b:0d:88:cf:7d:db:56:
9a:f8:0d:ae:26:0a:d9:b8:29:d4:c7:6b:39:1f:d5:
93:ad:79:f7:93:07:a4:29:bc:20:de:0d:2e:0b:a9:
17:e3:8a:1f:ae:90:6f:69:43:bc:45:62:e3:41:30:
c5:e6:5b:49:aa:7d:b8:53:76:58:d8:0a:19:8a:ad:
f6:2f:cd:be:9e:15:4a:99:65:3a:71:c0:44:9e:3d:
4a:b5:80:de:11:6f:3d:55:21:12:a7:ef:2d:dc:83:
48:17:e2:75:6d:a0:a5:44:aa:52:86:2b:fe:fc:87:
91:6e:5f:77:9e:0e:c8:2f:67:ab:af:aa:76:17:f6:
50:43:8a:ce:9b:7c:9e:b2:b1:17:f1:25:ab:4e:9f:
d9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:26:1D:9C:D7:F3:AF:98:7B:2C:46:E7:1B:70:A5:16:5E:BD:B6:65
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-iYdnNfzr5h7LEbnG3ClFl69tmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.174.0/24
212.115.40.0/24
212.115.42.0/23
Signature Algorithm: sha256WithRSAEncryption
58:bf:2d:12:f6:d0:e0:29:c7:f0:0e:48:5a:f3:e6:1e:d6:b6:
fd:06:db:c8:e7:a2:c8:24:5d:12:5f:29:4a:6d:70:68:c8:5f:
a4:e6:db:ad:ed:e6:51:bc:19:4a:fb:3d:a2:f1:bb:69:87:02:
ba:25:5e:e0:1c:04:fc:8a:a6:50:04:ec:2d:e4:19:c1:64:d5:
16:73:2c:76:19:a3:75:e5:3e:c7:7e:37:5c:6e:43:c9:51:05:
48:7d:78:2d:10:dd:08:c0:1f:c6:36:4c:ab:00:e3:2a:7d:ad:
fa:18:37:e5:29:0f:a9:ca:00:a3:fc:e5:bd:8d:ef:b2:d9:c6:
18:36:62:e7:b6:9a:17:34:b6:b2:34:25:f7:70:fd:82:7f:5e:
58:31:c4:9b:cd:77:89:c0:b1:e3:23:c9:1c:0b:30:05:cf:18:
61:e9:e8:12:38:f4:e3:d9:67:82:56:8c:30:a8:09:18:c7:b9:
65:7d:44:c7:0b:13:61:4d:e9:d9:6e:61:83:64:53:7a:e5:45:
64:ac:ae:06:21:18:a8:25:7a:a0:24:e7:10:0e:3b:fd:ba:b1:
bc:5e:84:ee:c8:54:a1:4a:f5:54:d4:4b:af:98:0f:f3:78:cb:
ca:78:8b:cb:b3:a3:2a:66:cb:50:cb:97:e9:bd:2f:bd:0b:a1:
4f:2e:de:62
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:08 2024 by rpki-client on console-ams.rpki-client.org