Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4TInkUD165RquFhHyKsGVbWpHY0.roa
File: 4TInkUD165RquFhHyKsGVbWpHY0.roa (raw, json)
Hash identifier: Jk0DtUgexeMvFtwFKw3HeEPaYs44kShLXPGQZUn9U8o=
Subject key identifier: E1:32:27:91:40:F5:EB:94:6A:B8:58:47:C8:AB:06:55:B5:A9:1D:8D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B1D95C40025E70D9180266A485CE184F1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4TInkUD165RquFhHyKsGVbWpHY0.roa
Signing time: Wed 11 Oct 2023 07:13:56 +0000
ROA not before: Wed 11 Oct 2023 07:13:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 185.222.163.0/24 maxlen: 24
80.76.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1d:95:c4:00:25:e7:0d:91:80:26:6a:48:5c:e1:84:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 11 07:13:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e132279140f5eb946ab85847c8ab0655b5a91d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:86:2d:dd:7e:bc:74:b5:d3:c1:19:43:3f:51:
49:d9:dc:75:cc:cb:03:3b:78:b5:c1:e8:b5:8a:ff:
9d:86:db:d3:66:18:a6:9f:68:d2:63:d2:05:24:36:
57:7e:10:cc:0b:d5:ba:01:45:85:b4:13:a9:90:49:
b5:2f:fb:83:87:dc:5c:02:f5:b6:a9:b8:9e:53:98:
52:84:85:5f:7c:f2:86:e5:50:11:4e:d1:32:83:80:
fb:ef:4c:2c:39:c0:a6:45:bd:2d:c4:29:1f:d8:12:
06:61:28:23:6d:9a:b7:c9:d2:6f:cf:96:02:7a:4e:
be:75:c1:79:64:c1:e6:54:08:40:39:a9:cf:11:27:
a2:23:b7:f1:a3:f2:54:df:0a:76:4c:3f:df:99:05:
03:54:b7:c6:c3:8e:86:c7:90:b8:8a:4f:c9:d0:99:
d7:37:ca:62:57:ea:6f:4c:96:0a:af:7f:03:59:d4:
01:60:56:09:dd:70:31:9b:26:b9:a9:ce:aa:f5:ed:
3a:40:55:23:78:20:78:63:72:f6:9c:8e:ad:f8:3a:
1b:b2:74:1e:69:19:f8:36:0a:5e:67:2f:34:74:73:
d0:42:df:9a:f2:a9:15:5c:9e:3f:ff:88:16:7b:15:
b5:88:bc:d1:fd:8a:d3:3e:b2:0c:b0:c3:d1:8f:27:
dd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:32:27:91:40:F5:EB:94:6A:B8:58:47:C8:AB:06:55:B5:A9:1D:8D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4TInkUD165RquFhHyKsGVbWpHY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.50.0/24
185.222.163.0/24
Signature Algorithm: sha256WithRSAEncryption
65:9e:6d:8f:e7:2b:b9:21:98:d4:28:ed:25:74:bb:a9:ac:6b:
eb:a8:bc:ba:8e:6a:cf:2c:58:78:02:f2:a3:76:4c:4d:98:15:
9f:df:d2:1b:c0:00:e4:c5:95:15:ec:f1:26:0c:7a:79:9c:6b:
6e:60:33:8a:ba:cc:50:a9:ad:28:84:2b:85:30:a1:36:12:17:
aa:3a:fb:e9:20:a2:67:fa:6f:3d:6a:fa:51:cf:93:2f:12:93:
2e:70:c8:44:7b:d2:34:b8:16:97:24:ec:7c:71:2f:b0:83:5d:
c4:60:be:6f:52:62:d8:ea:dc:1a:86:65:e8:7b:b3:9b:f8:08:
5a:d2:d6:82:4f:38:3a:c4:b6:a3:90:2b:1d:4f:a9:01:6c:8a:
b0:8c:b1:56:dc:41:cb:7e:51:d3:1a:68:ab:3c:b5:12:5b:a8:
ff:4a:62:eb:af:63:f5:05:79:d9:7b:27:7f:51:e1:00:cb:fd:
7b:e1:be:c4:68:15:e7:50:f9:7b:98:77:44:4c:e6:ba:33:19:
70:7c:13:db:1c:83:02:e4:c8:a5:21:65:79:31:a1:3b:81:4b:
75:e6:64:fa:bf:54:f2:41:e2:7f:c6:89:68:77:d4:c6:9e:5c:
f0:51:7f:53:27:b7:cc:89:25:67:e5:12:d9:f3:39:53:9f:73:
ad:cc:11:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 09:12:48 2023 by rpki-client on console-ams.rpki-client.org