Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/hPPX4c2QY7aA_7gGjX-HKnUlMJs.roa
File: hPPX4c2QY7aA_7gGjX-HKnUlMJs.roa (raw, json)
Hash identifier: VCQsvPoqYvP/JblYoDrB42VQ97ey7f99PIWxOIj0aKY=
Subject key identifier: 84:F3:D7:E1:CD:90:63:B6:80:FF:B8:06:8D:7F:87:2A:75:25:30:9B
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018571E88E2033809B45F475026FA2F3C28D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/hPPX4c2QY7aA_7gGjX-HKnUlMJs.roa
Signing time: Mon 02 Jan 2023 09:55:44 +0000
ROA not before: Mon 02 Jan 2023 09:55:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203648
IP address blocks: 185.200.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e8:8e:20:33:80:9b:45:f4:75:02:6f:a2:f3:c2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 09:55:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84f3d7e1cd9063b680ffb8068d7f872a7525309b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a3:56:ef:b7:b3:b6:ad:c6:94:44:57:4e:01:
4e:fc:79:f7:a4:70:fd:19:25:1b:0c:12:eb:27:14:
2e:97:1c:4d:93:dc:d5:46:0d:2c:9c:08:65:57:1f:
00:1f:dc:94:1b:9f:66:32:c0:b9:43:8b:ae:19:9e:
8a:35:4c:c5:ba:8b:03:83:4a:e8:2b:34:13:df:a8:
a7:fa:41:bb:ce:64:d9:3c:ac:60:b4:d3:e7:86:bb:
92:60:7d:e8:3a:42:a0:13:ca:0d:74:a2:45:b8:77:
19:f9:a6:35:76:12:c9:05:a0:29:d2:1d:d6:c8:d1:
d8:cd:68:fc:85:09:03:50:a7:ae:07:74:22:12:40:
14:23:73:6b:ab:bf:70:e2:b5:a0:a8:9d:be:07:8b:
03:d9:c4:2e:48:aa:02:13:c9:d6:33:7b:df:6c:4b:
7e:3a:f6:47:f3:0b:6f:8c:32:f7:27:28:17:02:51:
07:1e:f4:1a:5a:6c:33:b3:b6:cc:f4:1f:fa:44:47:
3c:9f:f2:86:85:dc:94:bb:97:12:00:f3:eb:00:12:
06:6e:e2:b4:0f:11:f9:6b:c7:cc:b6:c0:c9:9f:a7:
0f:e9:c9:57:bb:84:03:e1:40:48:ab:68:f2:eb:c0:
9e:ad:53:f7:c0:ff:33:e7:66:8f:61:76:d0:d0:16:
99:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F3:D7:E1:CD:90:63:B6:80:FF:B8:06:8D:7F:87:2A:75:25:30:9B
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/hPPX4c2QY7aA_7gGjX-HKnUlMJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.63.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:82:7b:eb:5f:c4:f4:5c:61:6b:4c:d8:73:38:50:f0:25:f2:
d9:8e:2a:ba:d4:12:7b:bf:31:93:6a:6b:91:c7:81:9b:49:34:
1a:32:78:c9:25:94:78:7f:25:71:13:a6:09:6d:18:68:22:f3:
9c:74:10:c9:c9:55:ef:e9:03:16:ae:39:5d:1c:b4:9c:0e:98:
90:0c:bf:1b:1e:47:5b:f3:7d:3e:a1:0b:b1:13:f7:e6:f7:38:
c8:0a:da:9c:df:b3:d3:63:54:5a:5e:e6:72:57:82:3a:a4:91:
15:15:54:7b:fb:3a:64:26:53:be:f5:0a:87:29:e9:05:86:2e:
4f:a1:af:37:96:fd:0a:79:03:31:58:d8:7e:6d:b1:92:c3:fe:
b2:78:51:09:d5:3c:bd:a2:84:d1:f2:4e:ba:76:97:c6:6b:c3:
2e:e3:03:8d:60:b7:e3:28:a7:01:68:7b:c0:0c:25:5d:45:4a:
34:19:32:ab:71:8c:b4:fa:b5:4f:7c:98:26:ab:a5:da:16:05:
6f:85:8a:4e:58:07:29:9b:be:32:6d:dd:a4:6d:85:8d:21:a1:
cc:25:58:6f:c5:4b:d5:92:b5:cb:40:23:8d:c4:11:fd:0e:cc:
0a:de:f7:07:38:96:ed:f3:10:b6:99:97:51:7c:49:88:4d:02:
9f:1a:87:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:34 2024 by rpki-client on console-ams.rpki-client.org