Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mROSbI8aOtt8ohIKd9vdiMrl7FA.roa
File: mROSbI8aOtt8ohIKd9vdiMrl7FA.roa (raw, json)
Hash identifier: PqA5+ooQkwLqFoZk+trRR3ouIVg5RVsDBx47COSZ46E=
Subject key identifier: 99:13:92:6C:8F:1A:3A:DB:7C:A2:12:0A:77:DB:DD:88:CA:E5:EC:50
Certificate issuer: /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial: 018572A802093C45839B30362164C0F7B58B
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mROSbI8aOtt8ohIKd9vdiMrl7FA.roa
Signing time: Mon 02 Jan 2023 13:24:51 +0000
ROA not before: Mon 02 Jan 2023 13:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16322
IP address blocks: 185.178.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a8:02:09:3c:45:83:9b:30:36:21:64:c0:f7:b5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Validity
Not Before: Jan 2 13:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9913926c8f1a3adb7ca2120a77dbdd88cae5ec50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:02:42:08:4a:b7:76:ca:8e:a9:50:46:20:
56:5a:d9:e2:64:0c:b7:a9:da:65:ce:58:a1:ee:54:
69:02:a8:c4:5b:d5:aa:eb:d8:47:8f:f1:bd:2d:ba:
fa:37:6f:de:48:22:32:2d:d2:61:8f:3e:49:51:99:
46:d5:9b:1f:e8:b4:a3:26:34:17:05:24:f7:65:63:
79:ca:b9:0c:7a:76:d2:1c:a3:89:b2:c1:8b:ff:c1:
31:7e:0f:e2:bc:44:f7:69:d3:24:ae:11:ca:d7:75:
42:0d:36:b1:ca:44:01:ec:1d:de:62:5a:df:2a:16:
bd:3c:6f:46:4d:65:23:3a:f6:e1:51:55:c9:17:34:
69:61:85:02:e3:72:3a:1f:4b:4e:86:d2:89:5c:69:
00:8e:89:60:da:d2:48:8a:5d:be:17:d9:1d:f4:57:
44:48:8a:86:e7:f2:83:61:2e:79:f8:f6:24:b0:47:
3a:94:ef:55:8f:11:94:e8:ac:39:91:19:71:f0:7b:
ce:54:46:99:af:ee:52:38:0a:ed:53:2b:12:a6:09:
30:ed:15:0e:8b:11:03:69:d9:03:1a:94:ff:6c:b1:
c7:b2:d9:14:64:6e:3f:87:59:25:b2:38:85:0a:1a:
5c:d1:e4:40:74:d4:69:36:e6:96:97:89:74:95:42:
da:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:13:92:6C:8F:1A:3A:DB:7C:A2:12:0A:77:DB:DD:88:CA:E5:EC:50
X509v3 Authority Key Identifier:
keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mROSbI8aOtt8ohIKd9vdiMrl7FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.105.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ad:ba:09:b7:9e:b7:59:27:58:32:d1:cd:59:4d:0c:d5:29:
2b:a6:65:c5:49:96:1f:87:2b:74:c2:5f:eb:ea:25:a4:77:e4:
a9:0a:98:e6:f4:d1:38:75:d8:21:17:0d:2b:36:79:9e:0f:53:
d2:25:50:26:ca:d5:89:da:0d:b3:f6:59:90:92:a2:b0:a4:b0:
ba:b5:2d:4d:00:e6:d8:da:be:3d:dd:2e:e1:3b:3d:f6:02:05:
37:6a:2d:7b:a2:d2:b1:7a:b1:56:9c:35:2b:9c:b0:3d:b1:09:
e7:ea:7e:77:12:a4:2c:c8:8d:2f:96:99:5c:84:76:0d:22:81:
ae:a8:05:24:4f:2a:18:b1:82:5d:dc:a6:83:e6:f2:af:09:c4:
2e:ed:b0:f6:20:2e:6f:28:d5:2d:c2:ba:b2:ce:e8:8d:f0:11:
a2:1e:e1:e4:89:6d:6b:1d:af:69:78:93:66:1a:94:7f:87:27:
e9:df:b7:49:ee:d3:6a:5f:fe:44:70:d8:cc:c6:f9:11:30:ef:
8c:0a:87:68:3c:8f:d4:6f:e1:32:a3:40:0c:c8:b4:9c:53:18:
52:d1:b5:f3:4d:29:21:9d:dd:9e:54:f7:d7:8e:e4:6e:b0:86:
d2:70:7b:96:78:18:01:23:f7:f3:4a:fb:25:23:61:d4:f5:af:
5f:08:70:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:55 2024 by rpki-client on console-ams.rpki-client.org