Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/Tn40oiOe4NfcPEk8cK5tDLWXbh0.roa
File: Tn40oiOe4NfcPEk8cK5tDLWXbh0.roa (raw, json)
Hash identifier: 15Q7unhCJgMHwb48XWl2flRqq1UHV9VPgQNYD3O0AKU=
Subject key identifier: 4E:7E:34:A2:23:9E:E0:D7:DC:3C:49:3C:70:AE:6D:0C:B5:97:6E:1D
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 01856EA68955C28F355AA2794F1BB6D31954
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/Tn40oiOe4NfcPEk8cK5tDLWXbh0.roa
Signing time: Sun 01 Jan 2023 18:44:45 +0000
ROA not before: Sun 01 Jan 2023 18:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210538
IP address blocks: 185.93.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:89:55:c2:8f:35:5a:a2:79:4f:1b:b6:d3:19:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 1 18:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e7e34a2239ee0d7dc3c493c70ae6d0cb5976e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a1:be:ab:0e:4f:ad:86:43:0b:79:0f:fd:3d:
43:23:51:38:06:03:cf:25:9f:8d:d5:c5:21:f7:00:
46:cd:d6:51:e6:61:44:59:5b:80:69:b7:1d:c8:52:
47:c9:03:d2:03:54:f3:2f:88:32:90:d6:74:c9:5c:
3d:77:9e:54:58:8b:62:ce:6b:57:65:84:03:53:8f:
00:76:fb:51:a4:90:d2:08:15:e6:06:c4:d8:f1:8e:
9b:d5:f0:7c:2a:bd:a0:5e:1c:0a:33:6f:b4:26:f6:
ec:d0:82:d2:71:3b:1d:64:ba:91:3d:7e:a0:a1:b1:
43:81:d2:cb:a4:76:2d:29:4f:8b:93:2e:de:21:09:
12:ab:e5:9a:8b:9b:55:ac:64:12:15:af:f2:d5:52:
70:06:9e:bf:3c:92:58:86:47:f1:87:ef:29:33:d9:
70:65:36:4f:43:f9:85:16:69:94:af:0a:d9:4f:71:
c8:55:e0:06:97:d5:59:5b:d6:e7:ea:c8:a1:c1:64:
04:87:e4:0c:8b:e6:a9:95:20:21:ab:1e:b4:d9:3b:
b4:e5:cd:b7:f9:bc:4a:ca:a2:c5:d0:f2:4d:4c:26:
a8:73:fd:a4:c5:bb:f2:3c:6e:ce:33:41:28:23:98:
a7:f9:46:48:24:1a:ac:79:dd:17:8d:d8:03:da:8f:
c9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7E:34:A2:23:9E:E0:D7:DC:3C:49:3C:70:AE:6D:0C:B5:97:6E:1D
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/Tn40oiOe4NfcPEk8cK5tDLWXbh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.222.0/24
Signature Algorithm: sha256WithRSAEncryption
30:44:cc:0e:03:09:1e:d9:e7:ab:00:69:30:b3:ed:ba:0c:9f:
8c:71:c6:de:00:50:48:bd:d0:54:ef:75:e7:62:0e:64:53:de:
f2:62:c0:0e:1e:90:48:7a:40:13:42:cd:d9:0b:12:61:a4:b5:
43:92:5d:e6:e8:5d:e7:46:e0:a8:e0:f5:ff:20:de:95:a3:16:
63:f1:4b:4e:a2:d4:fe:ad:1c:11:7f:e2:0b:36:74:5e:69:00:
8d:e6:0c:ba:8e:78:35:47:ed:9c:c3:75:4d:ff:dd:b9:80:9c:
d6:98:10:25:05:ea:d4:26:a2:b2:59:30:0f:df:d1:4b:cf:4e:
d5:ec:9b:eb:f3:d0:ad:7a:d2:fa:73:ce:ed:89:6f:80:69:11:
12:e2:f0:2c:a4:19:3c:20:19:55:be:15:29:65:c7:d2:5b:65:
3f:1e:c0:f8:9e:3a:18:26:32:09:67:27:70:10:23:70:22:22:
29:16:66:08:e3:c1:e9:55:c6:31:c8:dc:14:f1:b0:27:87:11:
74:8a:bb:ec:88:4b:62:9b:f6:96:ec:f7:0f:24:61:2e:74:66:
d9:d3:15:84:79:f7:0e:da:f3:b6:43:c8:cf:bf:8f:aa:45:0d:
76:95:95:5d:77:90:02:aa:d3:17:2d:31:32:1d:57:03:28:f4:
25:86:e1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org