Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/cKq06Rt4kiW_5owjWGQWmxt6TR8.roa
File: cKq06Rt4kiW_5owjWGQWmxt6TR8.roa (raw, json)
Hash identifier: XAU8+EnAaaNXuAIXuKPQDV7qdf+zHL5rDapjihlxZ9U=
Subject key identifier: 70:AA:B4:E9:1B:78:92:25:BF:E6:8C:23:58:64:16:9B:1B:7A:4D:1F
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 01856EA684CA2EB2EA16919D5740BE0A50E8
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/cKq06Rt4kiW_5owjWGQWmxt6TR8.roa
Signing time: Sun 01 Jan 2023 18:44:44 +0000
ROA not before: Sun 01 Jan 2023 18:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.93.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:84:ca:2e:b2:ea:16:91:9d:57:40:be:0a:50:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 1 18:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70aab4e91b789225bfe68c235864169b1b7a4d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a4:09:48:f1:16:2a:16:80:ca:20:5b:18:04:
45:df:ac:0a:f5:c2:66:93:48:d8:34:47:15:4c:93:
69:b7:45:01:61:39:c6:c3:2c:bd:f1:15:b4:8c:6b:
3c:c3:75:40:bd:67:7a:2f:b2:d2:01:e7:c4:47:6c:
51:3f:a1:c2:1f:40:64:70:3a:1c:a0:c3:3b:cf:94:
95:d2:8b:84:ee:80:3e:66:94:20:d8:21:ba:a3:4c:
52:bd:88:5b:70:78:30:b2:5f:a5:b7:19:7e:ff:0f:
08:8a:af:fd:5c:05:c0:96:63:c2:be:97:a8:6e:a1:
57:68:7d:6f:87:1a:04:a2:02:f5:82:7a:72:62:00:
bc:de:ea:13:30:12:08:61:fb:01:33:ed:61:9d:a7:
d6:89:5d:d8:34:ed:b8:94:f2:7e:3a:06:f5:98:51:
de:b5:01:5c:5f:65:e8:24:df:89:25:6f:f1:18:7b:
02:57:d4:c8:db:70:11:43:2d:6f:b4:17:dc:51:31:
bb:e9:0b:59:32:db:79:fe:bc:41:0e:05:68:eb:c8:
f7:07:8c:da:d6:05:4d:d1:54:14:55:7d:b9:04:70:
bb:5c:af:67:aa:d3:b4:73:11:d1:f4:32:81:cc:02:
01:75:14:fd:ac:90:34:35:f1:e4:18:72:49:00:d6:
17:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AA:B4:E9:1B:78:92:25:BF:E6:8C:23:58:64:16:9B:1B:7A:4D:1F
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/cKq06Rt4kiW_5owjWGQWmxt6TR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.222.0/24
Signature Algorithm: sha256WithRSAEncryption
12:38:0f:d4:5d:e2:97:48:d4:12:a8:46:a0:2c:7b:38:52:c1:
a1:00:f7:f0:ac:79:56:4a:31:20:fd:69:67:31:56:57:84:79:
79:37:1f:96:38:81:24:5d:dc:5e:e9:0a:05:18:ca:6e:da:83:
3c:25:b4:77:43:ad:df:e1:e9:ec:34:c6:6e:e9:51:b7:14:96:
f5:20:29:fb:1f:8e:ed:bf:63:12:e0:83:b6:f4:84:fd:04:56:
1f:5f:8f:05:44:0d:23:1a:94:47:54:56:f5:27:99:76:50:31:
0d:4b:1e:92:a3:da:33:33:fd:0a:55:26:67:e2:02:93:00:02:
2d:25:43:77:9a:15:1c:31:4d:68:5b:b5:8a:b0:39:3c:1f:e4:
a3:ef:a7:e5:1e:09:d8:15:9c:e9:2b:a4:d1:d3:3a:fa:85:64:
65:b9:98:8b:b2:59:32:df:2d:69:c1:cc:1f:c8:0e:a5:d0:b0:
5d:a7:33:84:65:24:24:01:2d:95:d1:66:24:f4:a0:c4:1c:b6:
90:fa:e8:19:de:e4:af:00:44:ab:b2:98:d4:c3:98:61:97:d9:
76:6d:eb:57:de:a5:9b:9e:e8:d0:dc:24:f4:cc:a2:ad:aa:5a:
4f:fa:34:9d:06:5f:02:8a:0e:3f:88:cc:23:06:ef:f8:5e:be:
8e:41:a7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org