Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/nx4XYOtes1j5Jr_xMPV4wU3S1i4.roa
File: nx4XYOtes1j5Jr_xMPV4wU3S1i4.roa (raw, json)
Hash identifier: q0IiNJ2kmdBUfyQCbuZD2ZnRymDM/3N0j2vpLbhiloU=
Subject key identifier: 9F:1E:17:60:EB:5E:B3:58:F9:26:BF:F1:30:F5:78:C1:4D:D2:D6:2E
Certificate issuer: /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Certificate serial: 018572714107E427225DB802BE856C95744E
Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/nx4XYOtes1j5Jr_xMPV4wU3S1i4.roa
Signing time: Mon 02 Jan 2023 12:25:02 +0000
ROA not before: Mon 02 Jan 2023 12:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206334
IP address blocks: 185.189.93.0/24 maxlen: 24
185.189.92.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:41:07:e4:27:22:5d:b8:02:be:85:6c:95:74:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Validity
Not Before: Jan 2 12:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f1e1760eb5eb358f926bff130f578c14dd2d62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:07:75:dd:14:b5:77:06:c7:8e:7c:ec:49:
60:2b:38:a1:c1:e6:e2:08:da:da:9e:5e:33:fa:98:
38:ad:15:22:c0:35:ea:cb:28:af:14:3b:00:10:7b:
83:c2:71:20:63:64:73:dc:82:c9:6b:15:5a:6b:0a:
2d:30:e5:69:42:1a:66:03:db:30:63:a9:41:5e:2b:
f9:b3:40:5f:5f:02:8a:c8:f1:dd:84:06:05:4f:8f:
32:a4:29:45:bc:5b:f1:38:b4:cc:92:f4:33:d7:e6:
6e:65:29:42:3d:6e:c7:6c:73:e3:c1:79:d7:3b:00:
9e:b0:3a:d5:98:b9:bd:72:4b:f5:aa:87:7e:9a:65:
1e:fe:5d:ed:4f:e3:75:92:0c:c6:8a:a3:36:52:bd:
6f:c6:e9:94:a5:b1:d9:52:d4:77:13:e1:4f:9b:73:
1a:c0:0c:82:1a:f3:a5:36:cf:b3:50:ae:60:07:f1:
c8:8a:eb:63:ac:95:93:cb:18:eb:82:b0:9d:91:9c:
b8:eb:08:36:11:de:e8:34:12:e0:59:2f:62:23:06:
a2:ed:b7:19:07:1b:02:fe:62:6c:32:3e:64:ab:8d:
33:0f:7b:58:b7:a8:af:ad:f6:ae:d5:ac:a0:86:36:
ef:6f:23:34:62:2f:1e:b5:99:ff:5c:c1:73:3f:b4:
30:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1E:17:60:EB:5E:B3:58:F9:26:BF:F1:30:F5:78:C1:4D:D2:D6:2E
X509v3 Authority Key Identifier:
keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/nx4XYOtes1j5Jr_xMPV4wU3S1i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.92.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:99:31:5c:98:f3:68:be:77:7f:0e:08:fa:39:bb:13:8e:1a:
31:b9:76:72:e8:ea:ff:fc:93:79:d7:b8:c0:a3:04:3e:97:b1:
fb:fd:ee:ab:35:ce:e9:5c:2d:37:cd:14:b0:f7:bc:1d:4d:c0:
49:34:bc:96:36:00:26:78:92:f9:7f:85:87:33:68:29:7b:75:
19:52:c0:a0:7a:ed:e2:19:e3:0d:13:08:fb:f1:fb:48:37:b4:
37:64:2f:b8:87:96:8b:76:76:66:53:7d:99:35:73:4d:eb:c3:
ce:b8:35:d9:05:7b:3d:bd:3c:6e:0a:c3:02:fd:7f:26:ff:2b:
0d:81:ff:dd:36:a4:60:f2:a7:a3:26:2c:0f:e5:08:8a:2f:e0:
a7:66:94:9f:f3:7b:44:0e:cc:65:a1:32:43:15:85:7c:bd:d0:
9f:09:1b:4e:60:f4:f5:9e:50:94:02:9e:cd:af:63:da:69:7d:
f5:c4:f6:e3:45:05:f8:13:0c:dc:bb:71:3f:24:de:b7:76:a4:
03:01:31:bb:60:5e:69:ab:04:f3:a9:35:e9:ae:e9:0b:b3:a3:
bf:2a:70:94:cc:9f:1f:ab:ce:2f:09:2d:31:8f:58:41:e8:06:
9b:9e:b8:66:16:7e:2a:6a:15:59:16:b9:86:06:2d:90:8e:a3:
f3:fc:6f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:59 2024 by rpki-client on console-ams.rpki-client.org