Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/9Wd-kh4TGe4iIEuxbtbpfedVtGY.roa
File: 9Wd-kh4TGe4iIEuxbtbpfedVtGY.roa (raw, json)
Hash identifier: IfRxW1eFrNF/+DYkcKVf+Wpc/1arutRXbQJJnZdvp1E=
Subject key identifier: F5:67:7E:92:1E:13:19:EE:22:20:4B:B1:6E:D6:E9:7D:E7:55:B4:66
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 0185728C7A82C0753B89C800BB2D4AB96DD4
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/9Wd-kh4TGe4iIEuxbtbpfedVtGY.roa
Signing time: Mon 02 Jan 2023 12:54:47 +0000
ROA not before: Mon 02 Jan 2023 12:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203066
IP address blocks: 94.124.1.0/24 maxlen: 24
80.82.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:7a:82:c0:75:3b:89:c8:00:bb:2d:4a:b9:6d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Jan 2 12:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5677e921e1319ee22204bb16ed6e97de755b466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:60:a4:fc:58:28:30:48:ab:a2:89:cc:5d:a9:
1a:44:c7:55:55:8d:b6:13:db:78:07:86:ba:83:e0:
c5:fc:c5:d8:2f:7c:a2:f9:7c:04:23:27:da:6f:88:
c6:30:0f:dc:57:18:76:41:6a:ff:f3:7b:6b:8d:54:
33:e3:5c:d2:2a:f5:b1:3e:45:58:86:8e:b9:8e:92:
6d:25:e1:2c:c9:95:c7:db:11:69:d7:10:5a:a1:be:
fb:79:b2:f4:1d:f5:dd:db:a6:b0:9e:90:5f:b6:6b:
f7:88:33:05:1c:b9:03:08:f8:47:2c:09:e6:9a:60:
41:79:f9:7e:e3:ba:5d:13:c0:42:02:88:a6:05:b4:
95:51:5b:6a:63:9e:5a:95:c7:60:bd:c8:3b:6f:21:
0f:ac:3c:04:f5:6b:56:35:fa:f3:1b:3f:9f:36:0d:
13:63:6e:64:9d:3e:b3:04:52:02:da:e9:ca:a6:0b:
1f:e2:b3:20:cf:df:cb:d0:1d:b7:f4:18:b4:2a:35:
90:ca:cf:5e:e7:38:08:32:76:3d:ef:b2:1c:14:15:
75:e4:dd:d9:3f:d9:8b:0a:90:cf:63:82:1e:e8:c6:
c1:ad:b3:f7:d0:6f:bc:6f:43:d0:85:db:b1:7f:06:
4d:d6:e2:f5:41:4e:47:17:db:6b:ef:30:56:ad:a4:
82:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:67:7E:92:1E:13:19:EE:22:20:4B:B1:6E:D6:E9:7D:E7:55:B4:66
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/9Wd-kh4TGe4iIEuxbtbpfedVtGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.82.26.0/24
94.124.1.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f6:08:bc:a1:89:f4:a6:68:8e:08:91:3f:ac:90:7b:ac:84:
21:0a:e0:65:b6:cb:35:43:e0:9f:df:54:07:2f:e8:52:91:3e:
38:2c:bf:60:35:d9:b1:6e:9d:ad:33:f8:14:66:bd:3a:50:d0:
e4:2a:5d:c1:60:1f:be:2d:c3:f1:0c:fe:f8:cc:2f:3c:ff:60:
76:41:92:d7:88:26:ab:1b:17:26:ec:3a:ee:3b:ec:4d:a2:56:
7b:16:1a:0f:73:99:bd:76:d1:b6:e5:6f:9d:b5:e1:b9:c1:df:
fb:13:2b:73:61:78:ae:52:cd:54:c7:bf:05:e3:98:95:1b:b0:
f3:47:6b:ac:2d:f7:3b:6e:96:a9:95:a4:c8:19:4b:06:5b:13:
f1:03:68:c7:0c:52:52:40:31:31:c4:ad:92:ed:5b:a9:02:c5:
cb:e9:cb:e9:71:f7:72:7b:3c:5d:4b:93:3a:a7:37:16:c6:ae:
58:14:c4:c6:c4:c2:d8:81:78:5b:b5:8c:ef:02:ba:dd:71:c2:
c1:30:3a:9d:3f:eb:4e:a8:d9:e3:b2:c1:57:48:d9:fb:db:5e:
11:33:b0:a5:b3:f7:39:7b:91:5d:01:17:70:4e:84:4c:c6:c5:
8e:bb:10:e6:b6:88:4f:49:f4:aa:7d:da:9d:61:4b:ed:17:bd:
f6:13:bd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:10 2024 by rpki-client on console-fra.rpki-client.org