Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/0S8ogaF6STjTZOKETP0uPODzyss.roa
File: 0S8ogaF6STjTZOKETP0uPODzyss.roa (raw, json)
Hash identifier: HVa4QkTdkl2lqVeSpHE9BZy3YqOINdvnw3fchIaZ02U=
Subject key identifier: D1:2F:28:81:A1:7A:49:38:D3:64:E2:84:4C:FD:2E:3C:E0:F3:CA:CB
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7A47447DFB0A19F2E357DF2901F47
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/0S8ogaF6STjTZOKETP0uPODzyss.roa
Signing time: Mon 02 Jan 2023 08:44:50 +0000
ROA not before: Mon 02 Jan 2023 08:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50138
IP address blocks: 185.212.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:a4:74:47:df:b0:a1:9f:2e:35:7d:f2:90:1f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d12f2881a17a4938d364e2844cfd2e3ce0f3cacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:f2:d4:a2:55:19:02:83:95:60:12:dc:1d:
27:95:97:d5:62:44:bb:80:d2:2c:64:05:79:35:b7:
90:40:68:7d:f7:3f:ff:c1:78:2e:f1:ca:fe:8d:ca:
8c:7c:a4:1d:64:02:16:44:e3:5f:4d:d4:20:b2:78:
e6:16:a5:3c:70:d7:96:26:a4:f7:3a:82:29:1f:75:
17:19:7d:65:54:ad:24:c6:fc:de:82:5b:f2:21:9c:
9c:19:dd:59:f7:d2:fc:88:92:66:d3:9d:51:ff:d6:
f1:c2:ed:1a:dd:ee:af:cf:8f:90:d2:54:e8:ef:a9:
3a:85:cd:56:f3:49:86:21:50:f8:cf:0c:5c:78:4e:
09:4c:4e:87:99:74:30:61:2d:16:33:32:ed:68:ac:
5e:1b:67:b3:a5:59:06:c5:28:38:5d:4f:e2:ac:a7:
42:ee:0c:3f:4f:86:eb:7e:d2:f5:0a:09:d9:e4:60:
7a:72:55:41:37:e1:7f:7d:9d:5b:8d:60:4b:8d:8e:
d0:f8:8d:e3:29:9c:20:de:82:d8:e9:6a:57:a9:1d:
9f:67:c6:ed:70:92:b4:10:54:90:db:2e:fc:d7:64:
9e:1d:42:28:f3:da:c5:bb:a2:67:dd:6c:62:f6:7c:
85:04:f3:b1:b7:02:57:92:b9:a3:07:d0:67:ef:62:
05:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2F:28:81:A1:7A:49:38:D3:64:E2:84:4C:FD:2E:3C:E0:F3:CA:CB
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/0S8ogaF6STjTZOKETP0uPODzyss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.9.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:5b:a9:9f:35:e2:46:33:0e:92:8a:b6:90:29:1d:67:67:36:
fa:ca:be:fa:3d:93:36:e3:90:99:ef:70:2f:ea:7a:1a:2a:2b:
9d:8b:dd:98:79:89:de:5e:24:08:2d:d0:4f:b0:a2:1c:e0:d7:
cc:c8:f7:d5:de:6f:e2:5d:6c:07:c7:5d:a2:fa:09:e8:6c:76:
72:7f:3d:ee:f4:bf:32:79:45:52:93:77:2c:a2:8d:67:19:77:
cb:a2:c9:5e:c7:36:32:f5:30:cf:f7:2a:b8:1d:8a:68:85:8a:
09:0a:de:15:f5:09:4f:ca:85:c0:c6:b0:9c:22:ab:90:05:91:
9d:42:11:18:d0:16:33:0f:26:92:66:ff:f4:d0:1c:20:22:73:
ca:94:80:02:06:e7:ce:a2:1f:44:19:c0:aa:50:94:c3:a2:45:
0a:02:e8:7c:e5:38:a4:cf:2d:e3:8b:b1:ac:43:7a:3a:00:e1:
6e:a0:0d:10:34:04:de:02:33:9f:97:00:88:5b:fa:c7:94:3a:
e4:f8:28:4e:f5:29:f9:48:08:47:f2:54:84:66:d2:17:4e:74:
d3:3e:c1:8a:31:7b:1b:0c:06:20:88:7d:bc:81:a2:d8:0b:e0:
36:b8:46:0c:4c:c3:10:dc:e8:d8:18:3c:c1:c2:55:dc:2d:e1:
9d:67:de:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:21 2024 by rpki-client on console-fra.rpki-client.org