Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/9M2VOWMVD86KNvQE7QI8PmehhSw.roa
File: 9M2VOWMVD86KNvQE7QI8PmehhSw.roa (raw, json)
Hash identifier: gfk2GwkMbvosoCQAiFfSDX1wPANucSmPTRJ8ZVb3Rgk=
Subject key identifier: F4:CD:95:39:63:15:0F:CE:8A:36:F4:04:ED:02:3C:3E:67:A1:85:2C
Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial: 01856EC1F9E3FE452A13610BA8567DAB24D6
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/9M2VOWMVD86KNvQE7QI8PmehhSw.roa
Signing time: Sun 01 Jan 2023 19:14:44 +0000
ROA not before: Sun 01 Jan 2023 19:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29491
IP address blocks: 195.191.214.0/23 maxlen: 23
91.193.164.0/22 maxlen: 22
94.45.128.0/19 maxlen: 24
194.187.108.0/22 maxlen: 22
194.187.110.0/24 maxlen: 24
195.137.202.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c1:f9:e3:fe:45:2a:13:61:0b:a8:56:7d:ab:24:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Validity
Not Before: Jan 1 19:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4cd953963150fce8a36f404ed023c3e67a1852c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7b:ac:c3:17:ba:ae:c5:87:c0:13:58:84:03:
68:7e:12:7b:55:45:f8:6e:69:bf:6b:19:89:cd:ef:
41:b5:84:82:7b:66:55:78:68:9e:49:f0:c3:d7:c5:
b6:c1:c6:85:0f:61:20:48:b8:cc:1a:98:97:ad:13:
cf:97:85:15:36:a8:c2:58:91:a6:e6:57:4f:77:cf:
bb:ee:75:e2:be:34:0b:a0:a3:17:ff:e9:cf:ba:e4:
9d:4e:b0:ae:b0:2e:9b:fe:12:67:7b:71:2b:77:b0:
9d:a4:08:5e:d6:cd:57:4a:d4:d9:3b:b1:3a:bc:34:
56:42:5a:99:f8:12:c0:d2:78:64:98:15:0a:6d:7f:
07:4f:be:90:28:e9:6c:fe:7c:85:cf:b4:16:47:89:
fe:7c:63:4c:d7:98:20:a8:1f:89:d5:74:01:13:e8:
32:b3:21:9f:2d:af:ce:7e:ee:16:ab:3c:6f:4b:a2:
92:52:74:dc:5a:97:88:26:60:95:75:0e:a4:40:1c:
76:2e:14:10:e6:3c:8f:25:81:5c:00:b5:3a:d8:54:
dd:4e:2f:a0:39:5a:cc:03:1b:ca:bb:11:84:2b:60:
2d:a6:30:c3:28:fd:6d:27:80:19:02:b3:62:aa:1f:
4a:32:8e:97:1c:5c:46:68:77:e9:f8:9a:17:30:be:
43:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CD:95:39:63:15:0F:CE:8A:36:F4:04:ED:02:3C:3E:67:A1:85:2C
X509v3 Authority Key Identifier:
keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/9M2VOWMVD86KNvQE7QI8PmehhSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.164.0/22
94.45.128.0/19
194.187.108.0/22
195.137.202.0/23
195.191.214.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:85:e9:c0:18:2d:88:95:25:3d:9c:3c:d0:f2:30:9e:4e:c7:
80:ed:53:e5:75:1d:df:19:64:88:72:49:34:45:98:12:db:7d:
d8:88:e1:38:35:f5:48:6c:85:5d:dc:4e:6e:25:57:3c:da:15:
fd:78:3e:22:8c:ca:9d:ba:10:39:c5:64:bb:f1:00:c1:03:c0:
d9:53:08:93:6e:64:9e:c6:10:20:65:af:0c:14:4c:bf:1b:0a:
cf:9a:04:c8:46:35:fd:5c:8b:86:18:cc:52:d6:8a:d5:aa:6a:
f1:3e:9d:12:3f:9e:99:09:66:fd:13:06:c0:11:ad:08:30:b6:
76:d7:1c:e0:c0:96:d7:21:6e:75:c2:e7:21:18:10:34:6f:02:
e5:1a:54:c2:52:ab:0a:b9:aa:9b:d2:95:b2:c8:f3:7f:b4:65:
8b:98:f0:0d:6b:aa:7d:7f:2f:7f:ea:b7:15:bb:ed:ad:58:ce:
e1:8f:5e:c5:f8:35:a9:51:dd:8f:ff:28:b0:76:71:81:f1:65:
f1:69:9d:29:96:e8:8a:38:28:ae:b8:ba:be:14:13:99:75:7f:
ab:61:9b:b0:41:a3:83:5e:e0:6a:3c:23:f9:93:65:1f:20:e9:
d9:bd:c1:6a:40:fd:e7:94:89:4d:2b:74:02:04:5a:89:ad:b2:
da:6c:50:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:42 2024 by rpki-client on console-ams.rpki-client.org