Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KQh9DXzl8mDYXR2wjWpjh-F_WDs.roa
File: KQh9DXzl8mDYXR2wjWpjh-F_WDs.roa (raw, json)
Hash identifier: 14ushnGsOsKiy+V+nukM59Ul5vI86fHNMOO0XnVlTvI=
Subject key identifier: 29:08:7D:0D:7C:E5:F2:60:D8:5D:1D:B0:8D:6A:63:87:E1:7F:58:3B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A577205D4E12CADACFF4D553AA45B33CE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KQh9DXzl8mDYXR2wjWpjh-F_WDs.roa
Signing time: Sat 02 Sep 2023 19:50:04 +0000
ROA not before: Sat 02 Sep 2023 19:50:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209193
IP address blocks: 185.216.69.0/24 maxlen: 24
185.207.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:57:72:05:d4:e1:2c:ad:ac:ff:4d:55:3a:a4:5b:33:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 2 19:50:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29087d0d7ce5f260d85d1db08d6a6387e17f583b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:26:ff:ac:7f:85:0b:4d:9b:58:eb:c2:bb:61:
a4:42:0c:00:51:61:2f:ce:e8:44:5c:ac:cd:d2:dd:
4d:24:4e:e4:85:ea:ad:4b:62:90:de:80:47:f0:ab:
6d:b2:4b:20:c3:af:64:8c:f7:e7:c6:9b:79:b9:78:
58:4a:a4:94:70:a7:5c:9a:38:33:63:5b:8a:4a:c8:
bf:3f:2f:85:4c:83:0b:53:dd:5b:72:93:52:20:be:
fd:95:74:44:f3:d8:c9:8e:72:82:8b:3b:13:72:08:
d8:e8:5f:fe:3e:5a:36:0f:1e:59:cf:86:a8:03:42:
cb:0c:62:5c:67:da:b5:26:37:24:e2:ac:24:ac:77:
61:7e:20:99:c4:af:b4:f1:e7:77:e5:f1:0e:26:e4:
96:c1:d8:fb:8f:64:fd:9d:c6:01:c0:d6:7d:c2:d8:
12:29:07:7a:1b:5b:fa:a0:a0:06:a4:86:a1:ff:16:
86:3b:d9:53:0a:58:20:ef:df:a1:20:1b:91:38:ac:
9e:9c:b5:27:38:fc:b6:8f:b2:fd:14:64:c2:10:1e:
6c:df:9b:e2:3b:8e:c1:ad:a7:08:78:a9:0d:02:4f:
fa:56:9a:a1:45:e8:f3:79:12:35:6f:ac:06:f0:95:
49:e1:a2:9b:d5:f9:ba:f9:f0:53:44:87:e3:38:10:
19:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:08:7D:0D:7C:E5:F2:60:D8:5D:1D:B0:8D:6A:63:87:E1:7F:58:3B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KQh9DXzl8mDYXR2wjWpjh-F_WDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.12.0/24
185.216.69.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e1:82:0e:34:43:05:f3:43:c9:1e:63:a1:73:b5:bb:1a:e8:
44:04:78:23:38:8f:65:ee:e6:b7:99:a9:3c:6a:aa:3e:f4:b0:
d7:d1:9e:18:38:17:5b:76:1f:81:e6:78:c8:ec:15:c9:71:33:
4d:27:41:22:ca:62:fb:2e:b1:ba:ba:2e:e5:c2:da:03:1b:d1:
f8:56:c9:5b:da:40:46:ec:59:2c:8a:5a:b7:a2:93:b4:61:86:
35:b1:2e:c3:49:76:86:b1:00:99:c2:89:ed:a1:0f:29:4d:9b:
5d:b8:5a:f8:a5:02:35:0f:bd:7c:42:1b:1e:cd:15:a2:d7:69:
d8:9f:b8:69:84:b6:0a:ca:83:1e:33:f0:2f:1a:d8:0c:a2:32:
43:48:50:d3:c9:dd:02:6c:18:18:21:6f:82:9d:59:a6:a4:af:
32:33:c3:a1:31:84:7d:9e:31:e5:b5:57:6e:8f:e8:86:a1:d4:
b8:4f:26:e9:28:5f:79:e3:f5:c3:55:3a:b1:d2:2b:54:bd:c7:
6e:b1:9d:99:78:5a:7e:68:1d:b2:3d:00:e3:70:63:c6:c7:7a:
25:39:c7:ae:8c:16:f0:3f:53:10:6a:5e:0a:87:f2:67:a4:fb:
79:f6:9f:ba:f8:6d:7b:27:d9:c6:a9:ad:56:8c:dc:d3:f4:67:
4a:29:da:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 07:26:31 2023 by rpki-client on console-ams.rpki-client.org