Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m4Vn6x-KOF5H5znU6AD4N0AUm1I.roa
File: m4Vn6x-KOF5H5znU6AD4N0AUm1I.roa (raw, json)
Hash identifier: zCZmTfTRU3xPjS6m6igtZMW6lZeBDd0m+HdW1/eXijw=
Subject key identifier: 9B:85:67:EB:1F:8A:38:5E:47:E7:39:D4:E8:00:F8:37:40:14:9B:52
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018BEBFC2290114369FDAA4850EE82FA4276
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m4Vn6x-KOF5H5znU6AD4N0AUm1I.roa
Signing time: Mon 20 Nov 2023 09:07:31 +0000
ROA not before: Mon 20 Nov 2023 09:07:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 185.216.71.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:eb:fc:22:90:11:43:69:fd:aa:48:50:ee:82:fa:42:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 20 09:07:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b8567eb1f8a385e47e739d4e800f83740149b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:98:96:d2:a1:4e:3f:5c:03:15:c0:fb:04:89:
de:09:a2:7d:9c:f8:5c:59:dd:15:80:63:4c:a7:8e:
12:78:81:ac:f5:f5:39:44:4b:10:a9:e0:3c:02:63:
ab:49:7d:36:d8:15:28:a1:e7:69:4b:e6:c6:9b:d0:
0c:e0:c9:da:62:aa:69:ff:a5:8a:53:5e:73:f4:f7:
bf:0f:57:3b:7d:cb:e9:31:b4:8f:0d:3a:78:b7:d8:
aa:eb:fc:bf:6d:10:56:17:c5:57:e5:76:74:7f:7b:
aa:72:e8:6c:6c:82:c5:6d:12:a5:3f:99:2c:49:ce:
7e:35:b8:f0:4b:d8:32:c7:97:0c:02:e3:97:20:4c:
86:ff:4d:80:2a:7f:85:b8:bf:78:90:df:71:1f:01:
33:ed:bb:03:d2:a6:a6:a3:c2:ef:99:de:25:a2:b7:
7b:3b:a9:e8:88:2f:89:f3:fe:58:89:98:d1:b0:db:
1b:75:83:22:e1:51:b3:17:a3:4c:37:7d:9f:dc:19:
e3:e0:d3:d1:ff:bb:cc:d1:a7:27:59:2b:ec:67:54:
ff:c3:ff:88:72:f4:74:79:14:81:82:5b:33:b7:96:
f1:7f:7f:91:2c:01:f9:0b:58:60:4d:52:a0:eb:75:
ca:53:e8:02:68:3f:1c:d8:07:39:e5:3c:9a:c0:7c:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:85:67:EB:1F:8A:38:5E:47:E7:39:D4:E8:00:F8:37:40:14:9B:52
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m4Vn6x-KOF5H5znU6AD4N0AUm1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.7.0/24
185.216.71.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:fa:80:99:16:38:c1:64:4b:e9:34:95:b1:b2:da:98:7d:1d:
77:d5:5b:b9:65:f3:3f:d3:89:d8:4a:24:ff:b8:e2:83:54:9a:
d8:e1:95:84:f3:5f:8a:98:43:fd:cb:08:ba:dd:ea:09:5b:97:
6c:bb:64:42:aa:a6:ea:d1:67:7b:fd:a8:e4:1a:a8:46:0c:f2:
d0:f5:d3:d4:a1:c8:02:ef:5d:1d:64:72:b5:8c:a9:19:0f:c2:
c8:a2:0b:ba:9c:a9:dc:bd:57:06:84:4b:b8:b5:38:6e:b0:45:
5a:93:31:24:31:46:b0:31:a6:f2:5d:ce:79:5a:b4:75:c6:d1:
e2:64:b6:22:b1:9b:be:61:69:4b:48:4c:8c:81:15:0b:dc:60:
cd:66:c8:0b:60:9e:77:07:61:8a:ef:a2:24:1b:7a:a3:15:e3:
46:88:0a:99:30:a1:9b:86:96:22:8c:7c:49:0b:a4:ef:aa:38:
2a:21:0c:54:87:1f:e4:76:78:de:3b:11:88:f2:fb:4f:b8:ca:
be:79:c5:7a:49:b0:87:2f:6e:47:08:24:4e:32:c9:9d:65:f9:
7e:c7:ce:b9:e2:5f:73:f9:ed:06:1b:9a:75:fd:9e:78:07:a1:
fb:f0:89:1d:ec:24:a3:b6:50:b5:c7:1d:16:e3:ed:51:5e:c7:
0d:8e:be:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:13 2024 by rpki-client on console-ams.rpki-client.org