Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/Se0jGdkX23sqo5lrs8xZxGuBI5Y.roa
File: Se0jGdkX23sqo5lrs8xZxGuBI5Y.roa (raw, json)
Hash identifier: eg/AWV3f7drrLqQRwRmGySx9z6CxQC6+CNN5qMEztvY=
Subject key identifier: 49:ED:23:19:D9:17:DB:7B:2A:A3:99:6B:B3:CC:59:C4:6B:81:23:96
Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
Certificate serial: 01856D38570A990B16F0F488C054785C3D22
Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/Se0jGdkX23sqo5lrs8xZxGuBI5Y.roa
Signing time: Sun 01 Jan 2023 12:04:46 +0000
ROA not before: Sun 01 Jan 2023 12:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204064
IP address blocks: 185.201.12.0/22 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:57:0a:99:0b:16:f0:f4:88:c0:54:78:5c:3d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
Validity
Not Before: Jan 1 12:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49ed2319d917db7b2aa3996bb3cc59c46b812396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:35:72:0d:ab:e9:2c:1c:8e:7c:7a:b2:25:14:
9c:99:24:35:aa:ee:ba:be:42:7a:2c:4a:50:8f:34:
8e:5d:60:d7:8e:29:fb:ec:d5:94:a8:5b:70:fe:80:
d3:20:4d:99:11:19:6b:ab:6c:3d:25:09:9a:8e:18:
23:0e:04:a8:91:69:1e:8d:34:ee:d3:36:19:10:e7:
8d:5d:3c:da:2f:94:47:a3:37:15:2e:ce:db:db:c4:
a4:72:f7:6d:74:d7:5c:05:80:7d:00:60:6f:f6:c1:
b7:f5:2e:e3:41:07:2c:69:dd:13:a4:be:48:60:5a:
62:43:b8:c3:a6:de:3e:ac:04:2e:92:bf:23:d2:53:
77:f2:0b:4d:c1:c9:3b:72:87:5a:b2:02:5f:07:81:
08:e2:2c:01:0d:48:8c:8f:7d:c2:f6:b0:1b:13:cb:
4b:a1:53:b6:cc:d8:25:99:0a:e2:da:bf:34:fd:d9:
04:6e:6a:d4:cb:c7:16:90:4e:dc:4a:f8:94:cc:63:
9c:98:83:24:26:00:f3:a6:2d:ba:8e:8d:cc:4f:d0:
f7:c4:c0:c9:7f:37:0d:cf:cb:13:69:c5:52:56:49:
3d:d3:a7:09:d0:8e:87:7b:08:1b:70:56:02:52:d2:
fd:bd:75:15:17:13:06:37:76:20:2d:5d:ad:dc:ea:
a6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:ED:23:19:D9:17:DB:7B:2A:A3:99:6B:B3:CC:59:C4:6B:81:23:96
X509v3 Authority Key Identifier:
keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/Se0jGdkX23sqo5lrs8xZxGuBI5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.12.0/22
Signature Algorithm: sha256WithRSAEncryption
30:9f:c8:99:27:fb:0d:5c:0b:98:eb:a7:a3:7b:7b:ff:eb:e0:
76:cd:91:ad:12:14:33:3f:65:19:55:b2:0c:d2:f1:59:56:ff:
a9:9a:c7:2c:99:d7:e5:2d:b0:c1:b6:60:e7:0e:76:02:4e:11:
b9:20:5d:0a:1d:8d:ae:89:58:e6:42:15:47:20:1d:ed:fa:7a:
46:fc:b5:d8:1a:12:d2:81:14:76:71:e4:87:db:01:c8:fb:53:
c0:e6:27:dc:89:ec:8a:71:de:c1:aa:37:16:33:aa:dc:cd:f0:
9c:46:31:2c:75:35:58:41:56:4b:d4:2c:8b:a4:01:de:c6:25:
01:d6:ef:47:3b:17:ce:57:67:5d:6f:b9:ee:b1:c7:a4:55:e6:
6c:f9:28:58:13:23:9b:dc:d2:62:06:02:61:0e:82:24:0d:4a:
97:3c:52:b3:e9:91:56:22:71:b3:43:a0:c5:59:28:0c:4c:8e:
be:72:24:f3:b8:06:c7:b2:bf:55:1a:c6:99:0d:4d:6d:d4:70:
77:8a:22:b8:22:f7:0b:ec:3a:80:23:56:89:e5:55:25:86:67:
ad:db:3e:99:22:c4:ab:fa:30:2f:25:03:8d:6c:62:b2:6f:c7:
2d:6e:71:62:73:43:51:09:88:00:83:a2:26:97:5e:19:b6:b8:
55:5e:9d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 13:09:56 2023 by rpki-client on console-fra.rpki-client.org