Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9c2AJ5mK1SVDw4Tp5U6QVi4GiYE.roa
File: 9c2AJ5mK1SVDw4Tp5U6QVi4GiYE.roa (raw, json)
Hash identifier: d+caxLcYtf/ul18UvV1+3hWalCiR66BnC5b6Iuzz7P8=
Subject key identifier: F5:CD:80:27:99:8A:D5:25:43:C3:84:E9:E5:4E:90:56:2E:06:89:81
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81E7C119F1DA790B5BFB03CAB8A03C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9c2AJ5mK1SVDw4Tp5U6QVi4GiYE.roa
Signing time: Sun 01 Jan 2023 13:25:08 +0000
ROA not before: Sun 01 Jan 2023 13:25:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42926
IP address blocks: 212.115.40.0/22 maxlen: 24
185.226.172.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:e7:c1:19:f1:da:79:0b:5b:fb:03:ca:b8:a0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5cd8027998ad52543c384e9e54e90562e068981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4e:7d:54:10:a6:b5:66:59:5f:58:90:b1:96:
cb:d6:f3:96:79:4d:3a:f5:7a:c4:85:f2:96:a7:ba:
b5:fd:25:b3:04:5e:af:3f:4e:9b:8d:6f:9b:f6:81:
18:c5:e7:e9:cf:94:1d:4d:73:4d:10:8d:83:9a:8e:
64:b2:72:7d:d1:7f:7e:64:cc:42:2d:b0:53:57:2a:
27:04:be:ef:85:d1:85:df:6f:6c:0f:f6:f0:4d:73:
7d:2f:54:91:35:1c:0f:3a:9d:d9:c5:1f:88:61:3f:
cc:ae:c8:a2:2a:77:e0:c1:fb:e1:20:16:59:a0:e7:
ed:e1:2b:5d:ce:00:7b:00:1f:4d:7e:00:ab:a8:a7:
05:b6:4c:0d:e4:73:b4:ce:e9:b7:90:ff:9a:bb:b5:
eb:16:c1:f5:49:59:4f:fa:5e:ba:15:50:10:c8:5c:
43:f8:e4:35:7f:09:78:93:76:79:4c:49:60:ae:92:
f6:0e:0c:7d:3d:7f:f7:bd:40:68:70:ec:f7:b3:c9:
64:af:2d:4b:a4:a3:48:5a:46:d2:33:d5:3e:ba:84:
99:65:5d:14:32:1f:cf:f6:4b:c8:c0:58:db:9b:55:
bb:60:bc:86:c6:f6:00:68:70:5f:81:8c:29:6b:89:
ed:ee:9d:23:be:64:f6:8a:df:48:d5:2f:ed:68:0a:
93:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CD:80:27:99:8A:D5:25:43:C3:84:E9:E5:4E:90:56:2E:06:89:81
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9c2AJ5mK1SVDw4Tp5U6QVi4GiYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.172.0/22
212.115.40.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:d7:8e:e5:32:90:b8:89:9f:5f:7c:5d:bb:b9:cc:6d:f4:55:
63:67:25:11:5d:2a:9b:fb:e0:53:9b:73:e6:1f:7d:08:ea:37:
54:91:b1:60:67:c1:e2:19:a1:88:c8:ce:79:3a:ac:0e:76:37:
5a:e4:2b:d9:32:7c:ac:3f:39:03:a2:45:a9:84:20:0c:4e:34:
f4:57:a6:bd:c4:4f:ce:00:a7:13:45:74:c0:09:0a:7c:fb:84:
46:f6:2f:b9:f0:45:3c:2e:ec:48:38:c9:a1:df:e0:35:b5:47:
16:9b:48:fb:e0:ff:3c:2b:d0:2a:ae:b2:b1:41:72:f2:c1:b1:
17:08:b1:f3:d6:3b:f1:da:0c:2c:91:00:c7:e2:7a:a0:81:1c:
82:9b:b4:20:2d:f6:9a:6a:45:ce:03:b7:26:7a:73:30:94:b2:
51:8b:4f:0d:a2:bc:ad:00:1b:ee:4a:17:36:0c:e7:fb:4b:b2:
63:45:03:d7:82:43:e4:fe:d9:af:9c:c1:ee:01:7b:02:22:79:
d0:32:19:94:a8:73:f4:8c:a3:ca:17:82:4b:b1:0c:cc:78:7b:
8c:12:d5:14:37:6b:e8:87:2d:d8:f2:fb:6f:3f:1b:a0:6a:db:
00:88:cb:45:d8:82:70:ff:01:3e:8f:d9:be:2c:5f:1b:ad:0d:
3b:5f:d4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 15:17:22 2023 by rpki-client on console-ams.rpki-client.org