Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/9T2grLS3faMZhDFX-muz_eEGvlQ.roa
File: 9T2grLS3faMZhDFX-muz_eEGvlQ.roa (raw, json)
Hash identifier: Q5lTUqCRCHRW1Z7CV1bJinsOfBxbvn+V+aJaXYIWB5Y=
Subject key identifier: F5:3D:A0:AC:B4:B7:7D:A3:19:84:31:57:FA:6B:B3:FD:E1:06:BE:54
Certificate issuer: /CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8
Certificate serial: 018BC0B5BACCB2B97A7AD4F736822D055572
Authority key identifier: 27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/9T2grLS3faMZhDFX-muz_eEGvlQ.roa
Signing time: Sat 11 Nov 2023 23:26:57 +0000
ROA not before: Sat 11 Nov 2023 23:26:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60497
IP address blocks: 185.30.172.0/24 maxlen: 24
185.30.175.0/24 maxlen: 24
185.30.173.0/24 maxlen: 24
185.30.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c0:b5:ba:cc:b2:b9:7a:7a:d4:f7:36:82:2d:05:55:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8
Validity
Not Before: Nov 11 23:26:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f53da0acb4b77da319843157fa6bb3fde106be54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:2c:7b:cf:b3:5b:a2:91:2e:45:a8:ee:9e:
2b:fb:7e:79:0c:63:a9:ab:e0:7c:04:b0:52:9b:88:
8f:25:08:cb:ec:82:76:44:18:da:9d:36:a6:3d:22:
91:9a:0d:c1:53:bd:bd:4b:ea:7e:d3:6a:17:27:5f:
99:52:9a:fa:29:43:32:60:0e:3a:5e:a7:d7:8b:f5:
7a:5a:f9:ca:1f:6b:d1:14:45:47:58:06:c7:7c:5b:
85:e8:bc:b1:73:36:45:73:9e:30:7a:5f:70:74:3f:
84:13:56:4d:68:74:c5:62:15:f3:2c:ba:c8:18:dd:
46:77:6e:cb:35:a1:5d:76:b3:f6:31:5b:a9:5b:25:
8c:77:ec:cd:da:87:08:67:25:ef:d7:ba:ed:d5:31:
60:3f:aa:af:69:60:d5:43:f9:41:b3:42:5e:f4:3c:
e8:01:88:e6:40:e9:0a:86:31:f4:86:d9:26:25:a4:
d9:63:ed:6a:1d:4f:f6:37:0f:23:50:6b:ad:a2:a5:
53:bd:dc:c0:dc:cc:e1:fd:46:49:2f:33:3a:3a:6d:
5d:16:40:52:ea:fb:44:33:d3:b5:fc:1a:f5:57:95:
88:6d:14:60:c1:99:3d:55:c8:30:06:02:ed:72:74:
fe:9d:dd:8a:94:e0:d9:52:1a:52:92:b3:5d:f4:92:
9b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3D:A0:AC:B4:B7:7D:A3:19:84:31:57:FA:6B:B3:FD:E1:06:BE:54
X509v3 Authority Key Identifier:
keyid:27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/9T2grLS3faMZhDFX-muz_eEGvlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.172.0/22
Signature Algorithm: sha256WithRSAEncryption
be:f1:41:df:a9:a2:e4:42:26:42:4b:62:3e:8e:d0:11:ee:18:
ee:65:58:a5:3a:91:ca:c7:37:3e:31:a9:5b:7d:e0:fd:70:e2:
f6:12:22:37:7f:8b:24:2d:10:c0:c7:9d:0f:76:af:3b:fe:84:
39:7c:ef:7f:56:15:92:fb:74:4a:8d:67:c6:74:9c:6a:34:de:
52:aa:44:bd:71:1c:60:57:ef:7d:2c:e2:cd:66:37:32:9c:8f:
52:db:fe:c5:34:15:77:b4:37:32:f3:cc:57:f7:1f:b5:85:c2:
2e:18:7c:0b:60:c4:b7:5e:e4:81:46:6f:59:22:c8:85:58:45:
73:86:7d:9e:c7:08:0e:83:a5:ff:4c:e4:08:68:26:8b:7e:84:
59:cc:52:da:a7:60:16:4c:25:7a:b2:13:85:62:8a:9b:a8:35:
c5:23:bf:43:cb:8c:87:5f:fc:05:d4:43:26:0f:60:f0:72:e7:
a5:a5:2f:9d:d8:7e:66:1f:bf:d6:c9:63:27:c8:c2:74:36:7a:
b6:aa:6e:96:15:7d:41:10:4a:f9:42:9c:5c:de:d5:5b:ed:8e:
d8:b9:6a:01:2b:4d:55:c5:5f:01:0f:da:62:6a:be:d4:a9:00:
f6:c4:9e:5f:67:ec:dd:82:dd:75:3b:21:71:0c:0a:ac:51:33:
5c:e8:19:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:21 2024 by rpki-client on console-fra.rpki-client.org