Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/b5b732-e313-4043-9c2d-fba23099d76b/1/p8BpB44qNBQY1wdspuCXfEVBYEM.roa
File: p8BpB44qNBQY1wdspuCXfEVBYEM.roa (raw, json)
Hash identifier: QB2JBay2TvnCSTmKQ+dkmKj9igGe5fRbbor8EXnisvM=
Subject key identifier: A7:C0:69:07:8E:2A:34:14:18:D7:07:6C:A6:E0:97:7C:45:41:60:43
Certificate issuer: /CN=2b0b1a51773d1a0f09f626e61fe057b81a432bb2
Certificate serial: 018698D7D0903E6B235AE3C7CBA36E98530F
Authority key identifier: 2B:0B:1A:51:77:3D:1A:0F:09:F6:26:E6:1F:E0:57:B8:1A:43:2B:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/b5b732-e313-4043-9c2d-fba23099d76b/1/p8BpB44qNBQY1wdspuCXfEVBYEM.roa
Signing time: Tue 28 Feb 2023 16:25:25 +0000
ROA not before: Tue 28 Feb 2023 16:25:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209235
IP address blocks: 185.130.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:98:d7:d0:90:3e:6b:23:5a:e3:c7:cb:a3:6e:98:53:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0b1a51773d1a0f09f626e61fe057b81a432bb2
Validity
Not Before: Feb 28 16:25:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7c069078e2a341418d7076ca6e0977c45416043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:30:01:1e:b4:49:7d:b1:e5:8b:5c:8b:85:64:
53:81:f9:c6:c4:b9:31:cc:01:87:1b:08:cc:b9:2f:
18:26:aa:9a:a2:b9:28:14:74:49:1a:89:2b:4f:c9:
aa:15:c4:f9:c4:75:e5:93:c5:42:fb:a0:6c:33:42:
24:7f:cd:97:51:6a:8e:61:21:74:9c:34:15:38:02:
94:49:73:c4:70:a1:ac:e8:5d:b7:73:da:1f:3a:ba:
55:9d:66:69:80:3d:00:f5:32:9b:64:c7:cd:4f:f7:
2e:b7:30:cf:06:39:32:29:cc:4b:f8:f5:16:0a:42:
fb:25:e8:4b:42:09:c7:1d:9c:be:8f:fe:16:34:61:
a5:77:c8:72:70:32:86:36:ba:2d:55:a5:b6:43:fd:
de:7f:15:db:7f:e3:a7:bf:85:d9:eb:6e:51:01:a2:
67:bb:20:f8:3b:fe:15:70:28:08:01:b6:90:89:28:
47:95:5f:c2:85:3f:b5:4b:af:ba:5a:1e:61:e3:6e:
8b:70:a8:63:dd:fa:ce:3d:3c:18:07:d3:1c:7f:20:
ea:c2:15:97:a1:62:24:5b:a2:3e:97:ec:bc:20:ca:
de:ae:29:95:fb:75:85:df:8b:fb:aa:41:2e:61:46:
a4:a4:ab:0e:3b:e1:ae:f4:0a:f1:d6:67:ab:31:9a:
5a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C0:69:07:8E:2A:34:14:18:D7:07:6C:A6:E0:97:7C:45:41:60:43
X509v3 Authority Key Identifier:
keyid:2B:0B:1A:51:77:3D:1A:0F:09:F6:26:E6:1F:E0:57:B8:1A:43:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/b5b732-e313-4043-9c2d-fba23099d76b/1/p8BpB44qNBQY1wdspuCXfEVBYEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/b5b732-e313-4043-9c2d-fba23099d76b/1/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.194.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:67:ae:5c:b7:45:15:b4:a1:b0:47:f4:67:d3:13:81:43:1c:
a3:c4:ff:c3:b6:d3:36:d7:db:23:e3:8d:33:93:fc:a5:cc:68:
67:73:fd:ec:6a:66:13:70:6a:30:f9:dd:01:d1:54:3b:00:fc:
90:60:e1:d1:64:d6:c6:99:32:c5:16:af:51:04:b3:88:e8:a6:
22:dc:d3:f9:25:b4:0f:7f:3a:12:e0:14:c4:ee:f4:ab:a3:c9:
21:6d:f8:d3:da:32:1a:24:f9:a5:08:d8:a6:2c:db:cf:3f:04:
ea:ff:68:cd:18:93:9b:8a:17:94:80:97:6e:10:a9:dd:8f:fb:
55:d1:d8:06:49:42:0f:57:af:b5:2c:8a:e8:d9:34:e2:a1:e4:
d0:e0:48:fb:db:96:f9:25:a7:0c:b3:de:ff:3c:60:2f:56:19:
f7:b3:ba:8d:8c:0c:c4:c1:5a:30:ca:0e:4d:0d:0a:b5:04:19:
5f:16:dc:68:a4:b0:d8:e0:42:15:9c:88:92:07:cc:e8:0f:08:
ee:65:87:8c:05:1b:28:1a:50:e3:f2:01:39:90:fa:66:94:83:
0a:f6:15:44:c7:a8:94:0c:10:13:67:36:e3:33:0d:cd:b1:d3:
8c:fc:f6:e6:4b:37:2c:a7:95:94:6d:cb:ec:6d:00:1f:23:5e:
9d:e1:06:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:43 2024 by rpki-client on console-ams.rpki-client.org