Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/neOdtCZphgTHeMojEcFumYijXjs.roa
File: neOdtCZphgTHeMojEcFumYijXjs.roa (raw, json)
Hash identifier: /W3DLPs6MDuLlo9t7ndYSMf97d+HyjI0+dbjwGQ9YwI=
Subject key identifier: 9D:E3:9D:B4:26:69:86:04:C7:78:CA:23:11:C1:6E:99:88:A3:5E:3B
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0189E4F09133D5262E3848ED4EDC4E73108F
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/neOdtCZphgTHeMojEcFumYijXjs.roa
Signing time: Fri 11 Aug 2023 14:11:58 +0000
ROA not before: Fri 11 Aug 2023 14:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202960
IP address blocks: 185.147.48.0/24 maxlen: 24
185.243.140.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:f0:91:33:d5:26:2e:38:48:ed:4e:dc:4e:73:10:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Aug 11 14:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9de39db426698604c778ca2311c16e9988a35e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b2:03:55:0b:15:53:e4:f2:86:f0:7e:36:23:
f9:02:45:16:ae:79:58:01:2d:aa:b3:e3:a3:a8:45:
33:f7:ac:55:b3:07:7b:c4:7a:e6:5c:f6:3b:32:dc:
e6:d3:d7:ca:65:3d:f1:14:58:6e:df:29:df:17:01:
d3:1a:0e:e7:94:41:fe:dd:4a:c8:54:71:37:97:5e:
a1:84:dc:7f:d0:5c:4c:4f:a7:8d:d6:86:ba:f2:86:
61:37:15:e5:55:ac:f1:a2:03:c8:be:6f:c8:da:21:
df:c0:8f:c5:23:dd:94:af:64:16:e3:5e:77:79:b2:
7d:3a:2e:df:83:a6:fe:8d:40:4c:71:b9:78:af:32:
83:dd:d7:8c:d8:a8:f6:98:0d:85:f5:b5:27:da:8b:
3d:fe:9d:2c:c4:ec:b2:8f:5b:45:b5:59:fd:f5:d5:
d2:dd:49:8e:88:9e:cc:4b:8a:d7:44:3a:e8:99:b1:
00:e7:44:ef:df:e0:9b:f3:ee:e4:59:2e:87:2e:47:
d6:e7:8c:7a:7b:e0:a1:47:85:51:7b:9c:2e:dc:87:
f9:7b:6b:d0:1b:09:85:f4:c7:58:ae:3b:ed:54:fd:
e8:85:61:bb:d9:ca:91:d1:36:9a:6a:fa:d2:34:af:
d4:a2:6a:5b:4d:6d:f2:e9:1e:81:54:b2:be:c3:05:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E3:9D:B4:26:69:86:04:C7:78:CA:23:11:C1:6E:99:88:A3:5E:3B
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/neOdtCZphgTHeMojEcFumYijXjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.48.0/24
185.243.140.0/22
Signature Algorithm: sha256WithRSAEncryption
61:55:22:d9:fe:88:a8:97:3b:27:d7:79:41:37:e8:ac:8b:a8:
30:33:3d:ac:99:e6:a7:07:28:f6:d3:f6:85:bd:f6:82:51:36:
d2:d3:e3:5b:8b:fd:3e:24:cd:2e:16:8e:fb:b6:0d:64:55:6f:
03:f9:a9:a7:53:7b:3d:65:e6:66:54:84:6b:8d:43:08:e2:2a:
89:86:87:9e:44:fa:e5:c2:83:74:6f:93:13:c0:19:77:69:ee:
d8:47:2d:6b:5d:e9:82:06:a4:0e:1d:5a:08:77:d4:8c:8b:cf:
ed:53:a2:c7:f5:a6:ce:c1:7a:08:7f:e2:ea:25:2d:c0:74:9b:
97:9a:ca:4d:2c:90:66:32:a2:b6:52:0e:3f:a4:8b:1e:56:71:
4f:18:b8:ab:ba:ce:38:94:1b:32:ca:0a:ce:e0:e0:a8:6f:85:
d1:3d:3e:12:75:5f:55:da:50:35:e3:44:65:67:2d:0c:8b:91:
51:40:3b:2f:00:e7:a2:40:56:34:4b:6c:12:2a:b8:d9:a2:76:
7b:75:e6:d5:6e:e8:86:41:ad:f9:84:a3:1d:2c:56:6a:81:6f:
d6:0c:b3:28:97:0a:6d:35:e9:e5:e2:5a:04:76:63:df:73:21:
46:06:29:ef:7d:65:e4:10:e1:fa:0b:95:a7:45:9f:59:93:2f:
8c:8e:b5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 19:18:11 2023 by rpki-client on console-ams.rpki-client.org