Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/9KOg3HlfHRtzrvrqWkE8ZaoEfBs.roa
File: 9KOg3HlfHRtzrvrqWkE8ZaoEfBs.roa (raw, json)
Hash identifier: 95VgBS2fGLw5XP6dCIa6u6QkZ6hw6P+s2jQfTZQ5hDQ=
Subject key identifier: F4:A3:A0:DC:79:5F:1D:1B:73:AE:FA:EA:5A:41:3C:65:AA:04:7C:1B
Certificate issuer: /CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Certificate serial: 01856F38F81103120F2E45DCE312FB37CEBE
Authority key identifier: 1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/9KOg3HlfHRtzrvrqWkE8ZaoEfBs.roa
Signing time: Sun 01 Jan 2023 21:24:42 +0000
ROA not before: Sun 01 Jan 2023 21:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206673
IP address blocks: 185.185.148.0/22 maxlen: 24
185.174.128.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:38:f8:11:03:12:0f:2e:45:dc:e3:12:fb:37:ce:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Validity
Not Before: Jan 1 21:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4a3a0dc795f1d1b73aefaea5a413c65aa047c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:b4:eb:33:bd:07:48:c8:25:49:4e:e8:b5:
c2:b9:bb:ad:22:b3:1e:d3:d6:dd:b5:52:46:e2:2d:
0a:9a:14:30:d4:f4:bc:f8:34:d6:10:22:3f:73:40:
f2:ad:ec:12:9a:b4:f6:4b:87:13:81:9c:f3:f7:32:
8f:5c:34:64:0e:7c:75:42:e6:4d:a8:8a:aa:ec:48:
87:41:a7:02:22:e2:db:37:94:87:21:a2:60:0e:7a:
3f:fd:a3:fc:6e:9a:d9:2a:aa:d8:d1:1f:51:ab:02:
2f:9d:15:b8:54:36:72:47:3c:a6:de:b3:e7:4c:39:
ba:90:2f:e6:7e:ee:f2:69:12:1c:85:d9:ba:df:2a:
69:fc:f3:b9:83:8c:5e:a9:d7:80:11:12:80:95:47:
f5:85:cc:be:0e:78:d2:61:c1:c8:69:3a:29:22:9f:
02:9d:1a:6b:86:30:7c:fe:19:4b:e5:23:9e:95:ff:
ed:89:b7:d0:6c:d3:9e:97:1b:80:7a:1a:5e:17:1d:
41:53:1d:cd:b5:3b:ec:87:3d:57:db:6e:12:7b:71:
58:fe:cb:9b:bf:af:35:b6:ae:cd:2d:77:f7:30:38:
b8:52:a0:15:93:a2:90:26:b8:50:e5:03:70:7b:5a:
d7:51:e7:f3:f4:64:62:17:d8:e5:55:44:28:6a:93:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A3:A0:DC:79:5F:1D:1B:73:AE:FA:EA:5A:41:3C:65:AA:04:7C:1B
X509v3 Authority Key Identifier:
keyid:1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/9KOg3HlfHRtzrvrqWkE8ZaoEfBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.128.0/22
185.185.148.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:af:f5:76:a4:e5:5f:86:13:70:c8:04:fa:0d:8b:ac:22:31:
a6:ed:42:a7:7a:2d:53:e5:2f:6c:11:97:5d:4b:50:ba:03:01:
2a:cd:85:8b:e2:b2:7f:39:97:24:bd:c3:b9:cb:5c:a7:2e:94:
e1:37:71:e3:9a:d5:77:77:6d:d6:cb:60:3b:b5:52:de:44:8e:
44:97:0c:ab:7d:fa:4e:6f:f6:c9:61:a0:a1:8f:c7:65:9a:9f:
07:eb:c4:b1:ab:8c:e8:92:96:6b:d8:61:03:19:24:e9:4d:5f:
1a:79:15:91:50:52:c7:50:b1:3b:34:70:a9:80:d2:db:52:c0:
10:fb:f8:09:08:76:df:e5:76:92:21:3e:b4:98:d4:77:0e:4e:
ba:7d:22:cd:c8:2f:f7:62:39:06:5c:9b:6d:8a:d2:55:91:59:
9b:dd:e4:95:cd:e7:a9:ff:36:62:dc:26:44:e8:0b:f1:ad:ce:
26:f2:99:b0:f4:28:e8:32:ac:3c:e3:ed:46:6c:da:95:9d:39:
b3:c6:76:06:cf:98:f6:00:49:34:94:92:d7:fc:0c:41:d1:c7:
f3:03:03:8f:59:d7:15:ab:22:fa:5f:b0:db:c6:7c:71:cd:30:
c3:0a:0b:c7:b7:b5:6c:26:fc:38:99:39:be:18:03:ef:3a:88:
3d:7f:c0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:29 2023 by rpki-client on console-fra.rpki-client.org