Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gRrOB8X1oKkgolLmhjwRkiuI9IE.roa
File: gRrOB8X1oKkgolLmhjwRkiuI9IE.roa (raw, json)
Hash identifier: 98EmcfdJQyaHu+tF5St2qKoG2yEtOdo7HZQCtL7+FbE=
Subject key identifier: 81:1A:CE:07:C5:F5:A0:A9:20:A2:52:E6:86:3C:11:92:2B:88:F4:81
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A2BCEFC380B3995651330108CD549288E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gRrOB8X1oKkgolLmhjwRkiuI9IE.roa
Signing time: Fri 25 Aug 2023 08:28:19 +0000
ROA not before: Fri 25 Aug 2023 08:28:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57463
IP address blocks: 185.219.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2b:ce:fc:38:0b:39:95:65:13:30:10:8c:d5:49:28:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 25 08:28:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=811ace07c5f5a0a920a252e6863c11922b88f481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:76:7d:bf:13:08:24:cf:d3:20:ce:50:a9:
53:92:af:54:20:d3:91:e9:1c:43:6d:b1:1f:71:f3:
51:53:7e:57:e2:84:af:88:2a:c7:dc:34:66:a1:19:
ce:f1:02:fb:c3:86:e7:5f:1a:cc:a7:34:d4:f7:11:
b9:29:37:8e:06:b8:8b:81:c5:4a:c7:27:c4:02:31:
e6:38:a7:e7:7c:64:dd:d4:e2:d8:2e:14:2a:f8:cf:
4c:47:1d:ad:94:19:fc:13:e3:58:60:e5:ba:de:ae:
5e:82:48:2b:95:78:fa:73:a9:be:46:5c:9f:fa:d8:
01:a3:6c:2f:93:cf:bf:9c:52:e4:96:a6:43:08:ca:
a1:38:60:cb:f6:c9:23:a5:3b:88:d5:80:32:d0:e7:
be:5f:64:4b:04:a8:56:16:6c:27:5f:f4:d4:cd:a9:
22:e2:e6:76:bf:62:99:84:1a:73:bf:40:0d:ad:ea:
cd:fc:4d:2f:53:b0:5e:a0:77:71:87:55:92:40:e0:
60:b6:4e:df:cc:ed:18:7e:85:d9:61:82:49:51:6a:
13:c1:e4:dc:49:01:a2:86:ab:d6:84:f0:7f:57:50:
1c:d9:86:f2:0d:0a:d3:43:46:e7:39:3a:5e:bd:c5:
75:52:20:e1:d1:5c:9b:c8:73:00:f0:bd:38:12:14:
e7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1A:CE:07:C5:F5:A0:A9:20:A2:52:E6:86:3C:11:92:2B:88:F4:81
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gRrOB8X1oKkgolLmhjwRkiuI9IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.124.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:67:b5:20:a6:50:b3:f7:d6:b8:48:da:bd:e7:af:9e:a9:9f:
89:df:6c:85:11:28:d3:a2:1c:6f:28:8f:25:2d:68:aa:20:63:
0f:79:e4:07:84:2c:c2:91:50:cf:12:9d:a7:19:a3:e5:62:65:
a0:ee:e9:57:ec:c5:2b:c2:c9:99:69:22:de:68:f2:4b:ac:2b:
3d:bb:9c:79:d8:40:82:83:84:57:f9:c9:f9:32:06:51:34:59:
14:f1:59:e8:0f:66:74:15:79:fd:70:45:7f:06:d1:20:b2:43:
e8:36:5e:a0:c8:76:e7:93:ff:e8:12:97:c5:29:e0:52:61:c6:
5b:c5:2a:08:97:fb:3e:5b:46:cc:04:04:36:8d:88:45:7e:52:
1b:ef:97:08:9a:96:f9:76:91:41:a0:25:8c:ff:62:05:7d:0b:
39:d9:19:9c:7f:53:b0:44:a1:38:da:66:c8:cb:30:5f:b0:35:
ac:c7:27:f5:ab:28:56:58:91:0a:a0:93:ec:03:85:0a:82:b1:
8b:c3:ef:1d:2b:3e:2a:a0:e0:94:13:87:94:65:9f:f8:3c:67:
59:f9:05:f9:c4:b4:c6:e2:97:ef:7f:19:cc:4f:72:fd:86:3c:
6d:89:fc:d3:33:12:ef:01:ea:d1:c2:7a:fa:a2:e1:05:1b:73:
37:e7:a3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:12 2024 by rpki-client on console-ams.rpki-client.org