Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/9W7XZeNnuYHR4Ati0WgrWBlggug.roa
File: 9W7XZeNnuYHR4Ati0WgrWBlggug.roa (raw, json)
Hash identifier: iu7w027DnnjgjG6iX/+/Af9h9jNSUFhhajE/3WOPK4E=
Subject key identifier: F5:6E:D7:65:E3:67:B9:81:D1:E0:0B:62:D1:68:2B:58:19:60:82:E8
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 01879EE18331140948BE2C5B88FCD6353004
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/9W7XZeNnuYHR4Ati0WgrWBlggug.roa
Signing time: Thu 20 Apr 2023 13:36:31 +0000
ROA not before: Thu 20 Apr 2023 13:36:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212609
IP address blocks: 185.239.245.0/24 maxlen: 24
185.254.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:e1:83:31:14:09:48:be:2c:5b:88:fc:d6:35:30:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Apr 20 13:36:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f56ed765e367b981d1e00b62d1682b58196082e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f7:dd:34:6f:9d:76:2d:f8:fc:92:91:71:27:
3b:87:7b:5d:ca:37:55:e9:5e:82:a6:0b:33:76:e6:
4f:3b:fe:94:50:99:68:1e:24:ec:f9:3b:44:83:09:
8b:9e:0a:0f:c1:2d:b7:53:c9:f9:d9:74:da:23:a8:
da:2b:c9:2b:aa:f5:b4:60:9f:ce:c5:39:95:cd:66:
c8:30:c0:cf:3d:ce:18:1b:18:23:c3:12:be:fc:c8:
19:d7:6d:6d:08:04:21:28:be:28:f3:56:32:28:b0:
bd:fa:88:e8:dc:2e:38:21:ef:ba:fc:69:d2:98:44:
59:76:83:37:53:3f:c3:10:2a:5a:9a:78:b2:b0:42:
cd:af:ee:57:5c:13:18:d0:4d:67:53:d8:40:6d:f9:
b6:53:c4:29:6d:a6:fb:ef:a4:23:dc:da:62:be:da:
76:e7:94:7a:7d:b8:6f:65:b5:c1:e0:4b:6e:48:af:
d6:9c:3d:98:91:cf:6d:96:61:7b:63:74:d4:51:6a:
20:1f:5c:6f:e5:87:7b:79:8b:24:f8:cb:7c:53:5c:
6a:8c:e1:ee:71:b0:28:63:05:79:21:92:7b:d4:f8:
a4:05:47:02:e6:0f:0c:9f:1c:8d:86:5f:6c:0c:68:
a1:e5:04:b4:68:0c:be:f0:02:40:33:0b:8c:c0:4e:
68:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6E:D7:65:E3:67:B9:81:D1:E0:0B:62:D1:68:2B:58:19:60:82:E8
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/9W7XZeNnuYHR4Ati0WgrWBlggug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.245.0/24
185.254.19.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:d2:c3:ac:03:17:16:e1:32:0f:1c:e2:92:ac:23:51:97:aa:
52:b2:3e:66:71:2c:c2:d6:51:b3:1f:df:0b:f2:41:9a:0b:d8:
ce:f1:04:95:e7:49:11:9d:17:71:9b:9e:2c:75:09:2b:29:68:
27:0a:d8:c5:65:73:43:50:57:16:8c:34:ee:b3:64:cb:b1:d0:
6e:d4:ff:ed:25:b2:bf:fd:f4:80:3d:d6:fd:1b:2b:e7:1b:c9:
0d:e1:d6:7f:82:7a:98:8d:97:e9:42:dd:49:21:14:d3:9c:0a:
9b:10:9c:ec:f6:3a:6d:f7:92:7c:f8:1b:5e:71:b7:0f:7c:b2:
36:fb:2a:a8:a5:48:23:83:46:d7:44:3d:a9:8d:01:f6:92:f5:
33:af:e0:03:5c:d5:21:14:f1:38:62:92:24:fd:a9:3e:18:59:
20:be:a8:64:37:f0:f4:fa:3c:46:1f:81:14:9d:90:ee:d0:fc:
ae:f1:64:11:fb:64:1f:d0:93:fb:f1:e4:21:ae:5f:8f:ed:aa:
09:4e:c9:83:81:ce:40:60:8b:7c:17:d3:08:2f:5f:74:1e:68:
5c:18:d8:d8:76:e8:c5:9f:3b:50:d6:99:23:78:56:1c:b4:0e:
30:a3:b9:24:b6:61:4e:95:2e:08:1f:79:80:ba:ae:97:1f:4b:
8c:5c:4d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:44 2024 by rpki-client on console-ams.rpki-client.org