Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/1-wNNPwgja-K0o4PWj99grh2mGVs.roa
File: 1-wNNPwgja-K0o4PWj99grh2mGVs.roa (raw, json)
Hash identifier: 8rXFaWGBF3prwamt4tYpzIAfEipyUsLkg0B/2GW7hMw=
Subject key identifier: FB:03:4D:3F:08:23:6B:E2:B4:A3:83:D6:8F:DF:60:AE:1D:A6:19:5B
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 01856F5DC4914434F1EE78DCC44DDBD9F257
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/1-wNNPwgja-K0o4PWj99grh2mGVs.roa
Signing time: Sun 01 Jan 2023 22:04:54 +0000
ROA not before: Sun 01 Jan 2023 22:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203273
IP address blocks: 185.95.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c4:91:44:34:f1:ee:78:dc:c4:4d:db:d9:f2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Jan 1 22:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb034d3f08236be2b4a383d68fdf60ae1da6195b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:da:a9:09:06:93:84:31:11:7f:5f:0c:78:0d:
1a:df:8b:5a:23:12:6d:54:1c:5c:d5:71:d8:01:e3:
04:e4:e2:a1:5e:cd:73:e4:0a:be:59:03:ed:00:89:
cf:18:71:f0:dd:20:9c:9f:f3:67:ad:78:af:95:55:
3e:14:86:18:59:df:9c:ae:fe:37:1b:33:45:19:7a:
f5:b7:5e:7a:a3:fb:8e:a9:9f:9e:74:0c:d3:b3:e2:
28:b0:66:5f:2b:95:6e:8c:08:27:ba:12:41:7e:14:
c7:f7:32:60:b4:ad:83:09:00:2b:c7:e8:77:be:7f:
fc:18:ad:a8:22:5e:29:2a:a2:03:cb:52:c8:fa:3d:
ec:1f:05:68:d8:e6:89:b0:c7:54:79:b2:b4:ff:5a:
4c:38:28:e2:7d:4f:85:30:0e:59:1f:66:a1:00:d5:
97:4e:b1:e6:6f:e0:a5:f9:94:19:77:07:64:52:8a:
ed:43:70:cb:97:92:49:62:7c:66:9e:77:2c:21:b2:
85:ce:df:84:56:20:55:81:14:38:d8:45:44:04:e7:
be:6e:9c:9b:8c:2d:12:67:ae:55:84:4f:0d:05:9e:
4a:a5:19:5d:ff:e1:c4:11:18:98:c6:e0:06:19:f9:
47:a6:b3:92:37:18:8f:55:a7:93:f5:c7:18:20:1a:
df:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:03:4D:3F:08:23:6B:E2:B4:A3:83:D6:8F:DF:60:AE:1D:A6:19:5B
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/1-wNNPwgja-K0o4PWj99grh2mGVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.4.0/24
Signature Algorithm: sha256WithRSAEncryption
86:21:98:f7:ed:bc:fb:4a:72:f2:13:57:e6:fe:1a:83:64:8b:
3c:dc:13:07:28:86:2b:ca:54:82:e5:fb:ff:2a:16:62:63:12:
ea:e3:8e:e5:d4:b9:3b:78:22:0b:00:ee:0b:17:26:0d:99:c9:
ea:65:95:3f:7c:b9:84:79:2e:82:a0:cc:95:22:34:ea:e2:7c:
82:fc:e0:27:6f:28:93:55:1a:c0:e1:4a:f6:a6:19:d2:12:28:
28:f6:28:d0:8f:00:b8:84:b0:a3:d3:70:20:17:f0:d9:89:9c:
b9:c2:20:71:bf:11:3a:76:b1:d8:0a:3b:94:1f:89:33:d4:b0:
a8:3c:db:60:73:5c:f0:55:50:69:73:8c:43:ec:78:cb:b4:73:
ab:38:ae:88:be:d5:18:66:5b:c3:95:ca:d9:ab:62:61:6f:19:
45:41:0a:7f:f5:2f:78:ff:f3:f9:05:c9:a3:32:82:87:49:50:
7c:06:e5:ce:05:bc:ed:3c:c3:c1:02:02:e3:cd:db:75:35:26:
fe:2d:10:22:eb:7a:de:11:06:d2:68:94:91:6e:39:96:f2:c6:
fd:a5:e9:a2:43:17:04:46:37:ca:23:b3:12:77:3d:22:82:d2:
74:77:5f:7a:1c:48:e2:a8:3a:db:ab:d7:a9:f5:0c:c8:0d:96:
73:38:e4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:08 2024 by rpki-client on console-ams.rpki-client.org