Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/G1i4IbFoGmwmP5E-HYbyhVStOug.roa
File: G1i4IbFoGmwmP5E-HYbyhVStOug.roa (raw, json)
Hash identifier: eh/4AIeKeM6aLf4goDYruYfISNgXdfi8yoLz6rCIgZk=
Subject key identifier: 1B:58:B8:21:B1:68:1A:6C:26:3F:91:3E:1D:86:F2:85:54:AD:3A:E8
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018A83D0BE6A400D64BC6F68734607D96B0B
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/G1i4IbFoGmwmP5E-HYbyhVStOug.roa
Signing time: Mon 11 Sep 2023 10:36:50 +0000
ROA not before: Mon 11 Sep 2023 10:36:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 185.230.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:d0:be:6a:40:0d:64:bc:6f:68:73:46:07:d9:6b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Sep 11 10:36:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b58b821b1681a6c263f913e1d86f28554ad3ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4e:fb:ff:75:81:ff:ab:dc:36:8e:2b:b6:4a:
83:11:1d:20:c1:a9:aa:74:da:81:ed:5c:99:88:37:
46:59:c5:ed:94:86:dc:d7:2e:4f:5f:2e:7b:b6:c8:
a8:67:b5:5f:4e:f1:c9:76:58:52:84:2c:27:38:48:
d3:ad:73:71:15:b6:b9:e1:ee:46:c0:20:be:94:ad:
55:dd:0d:e0:60:fc:23:50:76:04:64:1f:f7:14:42:
7e:b1:19:8e:74:95:c6:aa:a8:52:18:fa:13:0e:ab:
f8:21:f5:8a:25:24:dd:33:8b:d1:3e:c6:5a:ea:48:
53:0f:51:ba:d8:80:fa:54:2e:ad:e1:4f:d3:b9:ef:
50:18:1a:b7:42:82:70:28:e5:eb:62:8c:e3:d1:cb:
89:44:7c:d1:a6:52:a2:da:47:38:40:98:1d:39:b2:
e0:36:ed:c3:34:6e:af:98:71:d1:80:d4:72:1c:88:
77:ff:ee:1f:3c:ff:ce:15:54:43:4b:f0:d2:c3:58:
22:f4:67:58:d2:08:94:66:85:d1:99:f8:c4:62:a4:
6a:4e:10:78:75:20:fe:37:41:b2:ee:f0:ba:18:75:
73:45:e2:e1:42:3e:bb:b9:90:c6:86:d8:6a:69:c1:
3c:83:cb:18:3d:96:53:ec:71:e5:8d:7a:fe:87:35:
ce:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:58:B8:21:B1:68:1A:6C:26:3F:91:3E:1D:86:F2:85:54:AD:3A:E8
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/G1i4IbFoGmwmP5E-HYbyhVStOug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.14.0/24
Signature Algorithm: sha256WithRSAEncryption
08:31:93:95:16:3b:5c:23:5c:a0:64:5d:1b:46:5e:5b:4c:f4:
2c:b1:79:e1:0c:04:ee:e4:1a:2d:91:0a:5a:7d:ce:43:2f:54:
96:dc:85:97:f6:2f:e0:e6:c8:f1:6b:36:b7:e4:70:96:a7:67:
67:6d:3f:58:af:1f:45:80:02:9b:20:15:20:c5:20:43:6e:44:
60:6f:3d:7e:4c:ed:f6:77:c8:17:a2:fc:ac:ad:ec:b1:9a:e5:
dd:a8:70:da:53:6c:31:de:dd:f0:c9:db:1e:cc:ef:de:67:95:
f5:bd:6f:cd:ee:87:26:f4:2e:3d:8e:8d:e3:db:29:ac:43:88:
e7:51:83:e7:18:98:e3:90:e4:ca:d0:6e:5f:d8:13:49:bb:f5:
b0:ce:fa:e5:ea:0e:c8:a6:c6:29:43:12:ce:5a:2c:94:af:b2:
ff:6e:f4:c9:8f:fc:b0:e9:d2:c8:01:69:dc:e2:0c:2a:dd:41:
d4:81:0c:fc:7f:35:86:5c:42:ed:50:dd:d2:1d:d3:5c:94:0e:
92:8b:4d:14:6b:5a:c7:02:4d:fe:37:0a:fa:22:a0:0a:b3:af:
27:90:51:48:1a:b2:c9:83:70:4d:ba:d3:70:da:87:66:a3:0b:
ed:38:2b:92:45:27:0f:c5:f4:21:e4:d4:15:c4:b0:11:4f:89:
78:f0:2d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 15:29:39 2023 by rpki-client on console-fra.rpki-client.org