Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/4997de-7df7-4c6d-a54a-42b73ee46b9c/1/s9yBoPtn2c0PYXGBmE-20a11szk.roa
File: s9yBoPtn2c0PYXGBmE-20a11szk.roa (raw, json)
Hash identifier: MWmNzi90OOYvmjtZuHK0PS3LMZ+H7NQsKo7dPV+yR50=
Subject key identifier: B3:DC:81:A0:FB:67:D9:CD:0F:61:71:81:98:4F:B6:D1:AD:75:B3:39
Certificate issuer: /CN=c51fdb78308fdf7d6619f54ed21c02e5b50b2905
Certificate serial: 01856F2FFB794B7C29DD9955B70F78E8211F
Authority key identifier: C5:1F:DB:78:30:8F:DF:7D:66:19:F5:4E:D2:1C:02:E5:B5:0B:29:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xR_beDCP331mGfVO0hwC5bULKQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/4997de-7df7-4c6d-a54a-42b73ee46b9c/1/s9yBoPtn2c0PYXGBmE-20a11szk.roa
Signing time: Sun 01 Jan 2023 21:14:53 +0000
ROA not before: Sun 01 Jan 2023 21:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34582
IP address blocks: 185.19.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:fb:79:4b:7c:29:dd:99:55:b7:0f:78:e8:21:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51fdb78308fdf7d6619f54ed21c02e5b50b2905
Validity
Not Before: Jan 1 21:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3dc81a0fb67d9cd0f617181984fb6d1ad75b339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:77:2e:bb:8b:56:39:de:5f:23:58:f8:35:44:
34:4a:c4:51:bd:9c:dd:ff:64:72:7f:e1:6d:08:af:
c8:36:52:9d:af:da:cf:30:ab:a6:88:90:39:78:0f:
2a:21:55:6e:43:c7:4c:fc:03:e3:28:b4:4c:49:b2:
d6:de:a8:a6:88:2a:e7:bb:f4:6d:83:07:52:42:da:
53:58:a6:57:a7:34:af:a0:85:9e:b5:78:5b:4a:a5:
3d:96:7e:91:a8:e4:b2:e6:3f:de:e2:9c:15:fb:50:
4d:52:eb:e6:96:05:fe:6a:c4:19:18:e4:01:92:05:
3c:40:27:ff:c5:dd:2c:53:15:3a:e0:da:94:2a:9f:
ae:29:81:a3:c5:27:f1:eb:7d:0d:4d:b3:e6:d1:02:
8b:c1:97:42:83:81:52:59:58:9c:41:a9:e5:e4:f3:
fd:88:0a:86:2a:19:4e:8b:da:13:b0:3d:67:73:ba:
9d:cd:5f:56:71:91:6f:40:c8:6b:40:b8:6e:21:84:
a5:56:d6:af:bf:6c:3a:a1:2e:75:bb:37:28:c6:35:
14:ea:99:39:e8:58:f7:fd:6f:35:30:89:4c:fd:58:
6b:e5:a9:25:a8:14:de:24:da:a8:85:4a:a0:cd:80:
e1:1a:f7:9c:63:f9:da:38:64:0a:3b:ed:7e:e0:18:
9a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DC:81:A0:FB:67:D9:CD:0F:61:71:81:98:4F:B6:D1:AD:75:B3:39
X509v3 Authority Key Identifier:
keyid:C5:1F:DB:78:30:8F:DF:7D:66:19:F5:4E:D2:1C:02:E5:B5:0B:29:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xR_beDCP331mGfVO0hwC5bULKQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/4997de-7df7-4c6d-a54a-42b73ee46b9c/1/s9yBoPtn2c0PYXGBmE-20a11szk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/4997de-7df7-4c6d-a54a-42b73ee46b9c/1/xR_beDCP331mGfVO0hwC5bULKQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.202.0/24
Signature Algorithm: sha256WithRSAEncryption
48:7c:e2:90:f5:3a:c8:cc:82:f5:a2:29:05:e6:7d:20:53:6c:
72:1c:7a:be:a3:51:12:d2:1c:4b:68:41:09:13:39:39:78:05:
5e:20:71:b5:06:63:6f:8d:3f:1e:fb:89:ff:b5:ac:7f:10:71:
1e:d5:ca:26:02:e7:d2:33:6e:10:e5:3b:ba:7f:bf:24:91:7d:
55:50:aa:0d:db:ee:f7:2a:50:c0:01:53:63:0c:0d:77:fe:ce:
ed:55:20:cd:a7:83:89:a8:50:cf:e0:7e:ea:42:e8:07:28:8d:
24:61:68:19:36:ee:0d:cf:2d:ba:7c:75:ec:4f:40:81:dc:c3:
20:9f:fa:40:29:85:8d:dc:38:aa:77:85:30:fb:cb:90:1b:bc:
88:b1:3d:c4:ba:35:82:4a:7a:ef:d1:cb:c7:30:23:13:c6:57:
07:30:70:d9:c7:f8:2e:17:ae:a4:4b:d3:91:55:d3:b3:28:22:
84:4d:bf:42:55:e1:c1:e0:6e:84:44:b3:cb:bc:3c:58:da:ad:
10:b4:3e:08:00:74:5a:4d:5b:06:2f:9d:78:ee:20:fd:12:db:
53:16:77:2e:1d:57:32:ce:f7:f5:b0:59:a3:8f:41:31:6d:25:
3c:ba:dc:4d:34:67:aa:82:18:4c:58:fe:33:d5:d9:1f:89:ff:
b5:a4:6e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:26 2023 by rpki-client on console-ams.rpki-client.org