Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/9VQd4MsJuGeNLGJ5NwyHcrOjHpg.roa
File: 9VQd4MsJuGeNLGJ5NwyHcrOjHpg.roa (raw, json)
Hash identifier: 4gprCqrsEomx13U0p+kAezJFKmtNcm/pHuM1GMc90hw=
Subject key identifier: F5:54:1D:E0:CB:09:B8:67:8D:2C:62:79:37:0C:87:72:B3:A3:1E:98
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0191094C5BA6D5B5DD2ED5E2CB4A757C69C9
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/9VQd4MsJuGeNLGJ5NwyHcrOjHpg.roa
Signing time: Wed 31 Jul 2024 14:58:04 +0000
ROA not before: Wed 31 Jul 2024 14:58:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206119
IP address blocks: 185.169.182.0/24 maxlen: 24
185.174.20.0/24 maxlen: 24
185.174.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 11:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:09:4c:5b:a6:d5:b5:dd:2e:d5:e2:cb:4a:75:7c:69:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jul 31 14:58:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5541de0cb09b8678d2c6279370c8772b3a31e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:42:74:40:f9:f6:d7:8a:8c:e5:65:d5:fe:f0:
1d:c0:f3:1a:ba:e3:2b:73:f4:52:c8:f2:6a:c0:50:
32:8d:d0:ec:f5:86:1e:ad:f9:87:d8:7b:be:51:25:
52:bc:02:40:44:2c:38:9a:9c:c8:10:7d:af:88:c5:
b0:30:57:90:e2:df:8e:69:b2:31:4f:32:c7:b3:f3:
eb:08:f9:5c:4f:e2:e8:85:4d:d1:4b:87:1e:62:84:
0c:8a:65:84:4a:13:1a:2c:f3:94:7e:0f:4c:ae:9b:
6b:c7:49:d6:1b:ee:2a:eb:e2:bf:4f:9c:e3:e4:91:
d3:48:6e:e3:6e:ac:a5:51:3b:2e:ae:89:fb:b4:d0:
b3:bc:a9:c2:b1:01:ec:c0:78:a2:c1:be:1d:34:44:
54:3a:c1:da:86:71:25:5e:a6:ad:a0:d4:5b:6f:52:
51:61:f5:8f:7e:0a:49:3b:6a:27:cc:56:a4:40:f0:
4e:1c:f2:f1:12:c5:69:c4:ee:2b:f9:38:5b:c9:b1:
15:26:4b:c0:00:50:9e:e9:13:e5:5b:62:cc:b7:bb:
75:c2:d7:80:16:4d:e6:71:a0:52:6a:30:05:76:27:
70:f7:0f:75:fa:ca:f8:d7:76:63:91:e4:62:bb:24:
60:54:fa:49:c9:a2:6a:78:18:5f:0c:28:dd:f6:32:
1d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:54:1D:E0:CB:09:B8:67:8D:2C:62:79:37:0C:87:72:B3:A3:1E:98
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/9VQd4MsJuGeNLGJ5NwyHcrOjHpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.182.0/24
185.174.20.0/23
Signature Algorithm: sha256WithRSAEncryption
05:f5:1b:1e:da:5d:12:37:e7:84:39:a4:fc:76:5a:38:53:10:
34:44:0a:af:fd:e3:88:86:5f:eb:ac:f8:4a:23:cb:8e:ef:8c:
9e:9f:63:55:a6:9c:2d:e6:88:dd:c5:64:b4:04:a1:42:0f:6f:
05:1e:7a:2c:0a:4b:75:f8:45:ea:e3:7e:cc:39:eb:a4:d3:c9:
27:27:76:a3:84:29:0c:5a:e8:b7:c9:d5:3f:39:0d:ae:07:e2:
1a:cd:00:dc:64:a2:43:09:f3:9f:7a:54:94:43:13:93:9b:95:
59:4c:db:06:13:f4:ba:b0:df:74:bc:2e:74:f8:86:1d:0c:e9:
be:bc:c8:f5:e0:1d:e5:d5:14:61:73:14:75:41:71:3a:23:2e:
68:32:6f:59:18:c5:e5:9e:e8:18:28:e4:e2:3e:40:b3:73:50:
cc:8a:e9:84:8a:c2:53:d9:4c:17:f3:c0:b6:28:ed:40:61:e6:
e2:e5:d7:b7:fa:d4:6c:ec:39:09:95:f6:cf:e5:00:95:52:40:
9c:53:7b:01:02:cc:8a:3e:a6:c2:6c:9d:c3:8e:af:72:0b:fa:
80:de:1f:60:1e:19:4f:2d:50:f2:40:02:e7:86:90:bb:f8:4d:
f5:de:c3:34:d0:a3:b3:18:71:d2:20:99:b2:04:91:83:de:d0:
a5:8c:ca:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 14:04:23 2024 by rpki-client on console-ams.rpki-client.org