Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iG7PkGAK6pfw3QgQIuRs2UJu3oM.roa
File: iG7PkGAK6pfw3QgQIuRs2UJu3oM.roa (raw, json)
Hash identifier: 2RELpJoHpZtsv2FdDPdWcZaPU9cFXhnCrw0rHFf24SU=
Subject key identifier: 88:6E:CF:90:60:0A:EA:97:F0:DD:08:10:22:E4:6C:D9:42:6E:DE:83
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018BFAF720A899AADB39E08A0D7BEEDFAB3D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iG7PkGAK6pfw3QgQIuRs2UJu3oM.roa
Signing time: Thu 23 Nov 2023 06:56:21 +0000
ROA not before: Thu 23 Nov 2023 06:56:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44103
IP address blocks: 85.209.132.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fa:f7:20:a8:99:aa:db:39:e0:8a:0d:7b:ee:df:ab:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 23 06:56:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=886ecf90600aea97f0dd081022e46cd9426ede83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a0:15:24:77:fc:0e:3a:92:e7:08:7a:87:ba:
b8:95:b0:a0:3f:e0:75:32:3a:82:91:22:f2:74:47:
6f:ea:ba:bb:01:7d:34:6c:d3:01:65:0b:0e:9f:41:
53:53:88:e0:17:9a:ec:26:a2:6d:f9:c9:b1:09:b3:
65:36:84:6a:36:ea:9f:0b:6a:c1:df:3a:1e:3d:30:
1f:14:b5:14:c2:22:7f:a2:72:d1:95:84:b5:dd:f3:
ab:4a:49:40:96:dc:8a:ed:b3:79:cd:8c:99:6f:f7:
9c:e0:08:31:bb:dd:76:f0:8c:49:a4:30:ca:7b:92:
34:e7:5c:9e:ee:79:d1:08:3d:d0:ee:a7:fb:c1:a1:
9c:14:35:0a:17:c5:8d:55:fe:a3:29:68:c2:a9:a4:
d8:5f:15:0e:49:55:27:1f:87:27:35:c9:aa:22:af:
fd:c2:10:ea:4d:84:68:0b:7e:ad:ab:6a:cb:dc:42:
da:08:f0:25:8c:28:ec:f7:10:cc:6f:8e:3f:49:e6:
03:c5:e1:79:4c:1f:89:80:b4:72:cf:40:07:5e:44:
2e:5f:05:39:ce:8d:2d:44:17:18:ac:c3:c5:7f:f3:
d3:f5:22:90:cf:9c:07:fc:58:51:53:74:97:52:b4:
da:5b:b8:e5:0e:45:03:d1:68:26:11:df:f2:c0:fe:
e2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6E:CF:90:60:0A:EA:97:F0:DD:08:10:22:E4:6C:D9:42:6E:DE:83
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iG7PkGAK6pfw3QgQIuRs2UJu3oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.132.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:9c:c1:92:b0:a4:d5:9b:53:53:c6:f8:e2:2d:f6:82:e7:b4:
81:16:e2:23:b9:80:8a:a6:68:06:d7:cc:08:88:1f:f8:6f:82:
db:9b:d7:e0:10:8d:3d:18:87:96:89:19:a1:14:1a:b7:e7:7b:
a7:2e:73:91:60:24:f5:84:ff:b9:9d:81:8f:0b:5a:03:77:01:
7b:65:ee:57:0a:79:d8:94:cd:3c:34:1f:99:a5:e5:cc:83:17:
b9:aa:5d:dd:34:61:0a:75:31:bd:ad:06:48:fe:8a:3f:21:da:
e6:42:b6:71:f3:59:9f:9d:de:f3:b3:5b:a3:33:de:f4:0e:39:
44:33:fd:ea:62:5e:85:a5:79:a2:90:87:01:a9:77:a5:70:31:
81:f9:26:ad:23:97:e6:fe:2e:54:52:93:84:87:b0:98:73:f8:
a3:a1:bb:fd:bd:39:35:b7:d3:14:e5:06:58:e8:62:90:37:0a:
4c:d5:d5:00:f7:bd:e5:b5:64:3a:a1:fe:99:7c:ac:76:71:8d:
ab:8d:c9:c7:36:ae:52:23:88:1e:8f:48:55:25:fb:cc:74:e8:
0b:87:8e:65:cd:e8:ea:f2:e9:bd:7c:16:cb:3c:57:80:4d:a1:
a5:eb:36:2b:7e:a0:f6:91:d6:ed:bc:4a:c6:a5:f4:28:92:5e:
0a:94:e5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:13 2024 by rpki-client on console-ams.rpki-client.org