Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/go9cjKBYF0q-sVe32NFUvHb_c5g.roa
File: go9cjKBYF0q-sVe32NFUvHb_c5g.roa (raw, json)
Hash identifier: +BKof6lY+Bkpd/reiGvL5HCNcH8fCOef5jzsyJHZ9IA=
Subject key identifier: 82:8F:5C:8C:A0:58:17:4A:BE:B1:57:B7:D8:D1:54:BC:76:FF:73:98
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F150A161F5D315C9E6F8942C7E35CAA
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/go9cjKBYF0q-sVe32NFUvHb_c5g.roa
Signing time: Sun 01 Jan 2023 20:45:27 +0000
ROA not before: Sun 01 Jan 2023 20:45:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199513
IP address blocks: 85.120.204.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:15:0a:16:1f:5d:31:5c:9e:6f:89:42:c7:e3:5c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=828f5c8ca058174abeb157b7d8d154bc76ff7398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3d:98:2f:37:bc:ee:78:30:b0:81:cf:52:1d:
d3:0b:43:33:5a:23:ca:6f:a3:e3:12:a8:a6:21:64:
f4:62:db:f7:67:58:b9:67:ab:5c:17:07:6c:b6:76:
4b:27:b3:49:fe:65:23:e1:32:9a:dd:eb:94:97:0f:
67:fc:22:8b:7f:30:36:5a:5b:f3:b4:10:58:87:83:
d4:8c:8e:07:65:c0:fe:10:7f:b1:cf:cf:5f:c9:0a:
55:76:62:15:7a:09:01:27:d9:76:2b:fa:9d:98:a5:
b4:91:0e:99:5f:0c:19:5c:b8:26:fa:44:38:b7:14:
1e:e6:fc:09:8c:9f:e9:d6:7f:03:55:34:50:d5:24:
6f:89:42:7b:a7:7b:63:6f:be:90:fd:24:cb:ed:09:
f7:14:d6:cb:28:8b:1f:e6:1a:54:4c:b1:0a:46:69:
50:3f:79:fb:dc:ae:74:94:82:5d:4a:f9:9c:28:c0:
2a:46:35:36:60:4f:8d:2b:26:04:d6:cb:6f:c5:27:
8e:77:a7:18:6b:37:a7:fa:40:60:70:f3:ee:54:07:
58:52:03:90:b0:29:71:0d:e8:fa:14:d6:95:24:0a:
db:be:fc:e9:e0:06:cb:1c:c4:44:29:c5:be:e4:0a:
84:ff:7a:2d:ad:fc:0b:37:fe:7a:e2:a8:9e:39:14:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8F:5C:8C:A0:58:17:4A:BE:B1:57:B7:D8:D1:54:BC:76:FF:73:98
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/go9cjKBYF0q-sVe32NFUvHb_c5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.204.0/22
Signature Algorithm: sha256WithRSAEncryption
38:e5:69:a0:58:23:1b:45:7e:3c:55:4a:2f:7b:57:6a:20:13:
0c:8c:a3:0a:d3:cb:40:19:f1:ef:af:ab:d4:a3:63:ef:2e:94:
15:a8:8d:a2:fa:b1:e8:18:c2:b4:3e:ec:9b:fb:a5:7b:22:e5:
cc:86:03:db:63:ed:ec:03:67:67:0c:a4:cc:fa:96:06:94:b3:
89:57:1b:59:4e:f3:4a:51:64:6c:b1:69:15:c8:b2:e1:1d:41:
7e:c4:05:f5:a3:ed:f2:c5:6b:4a:bc:1e:eb:5b:7c:85:94:5d:
28:dc:71:22:b4:70:37:cc:19:b6:2b:b7:1e:90:03:c6:48:32:
9c:a9:19:cc:7f:38:d2:db:7a:86:9d:c9:7f:cc:e9:22:20:5e:
01:c0:da:f4:69:6b:a4:b1:b7:04:d2:29:4b:f6:aa:8a:1f:44:
52:be:f1:3d:fc:41:8c:86:54:44:44:e4:02:26:3f:a8:c0:c8:
39:41:d1:ff:bb:07:bf:bb:50:8d:e5:56:54:a9:b5:4b:9d:fb:
40:a6:22:1a:07:35:61:fd:0d:7b:fa:c9:4a:c3:d3:18:5a:3b:
52:56:2d:8d:85:7f:e4:c5:de:90:5e:60:c5:9c:72:7d:b4:ff:
8e:04:3a:cf:1f:77:48:0b:07:9d:3b:a7:88:1c:6d:31:53:15:
8a:c9:fc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:49 2024 by rpki-client on console-ams.rpki-client.org