Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/r9wMzNr1mo4x1JiyUwGGFWRj9oo.roa
File: r9wMzNr1mo4x1JiyUwGGFWRj9oo.roa (raw, json)
Hash identifier: BPVJtdXsJRTv/y1Kl6/0c8B7SWCLYyvth00+/dBtnAo=
Subject key identifier: AF:DC:0C:CC:DA:F5:9A:8E:31:D4:98:B2:53:01:86:15:64:63:F6:8A
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 01857DF981F8B26DE05631E92188B47DFB8D
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/r9wMzNr1mo4x1JiyUwGGFWRj9oo.roa
Signing time: Wed 04 Jan 2023 18:09:41 +0000
ROA not before: Wed 04 Jan 2023 18:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 185.42.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7d:f9:81:f8:b2:6d:e0:56:31:e9:21:88:b4:7d:fb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Jan 4 18:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afdc0cccdaf59a8e31d498b2530186156463f68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:87:29:2b:a4:96:56:8b:58:6d:d9:2b:0c:5e:
60:ec:1d:4f:1e:bf:4e:11:91:ec:f7:d2:81:2f:13:
e1:3e:a2:1d:8f:d0:a7:01:66:d2:91:fe:56:a9:a6:
a8:fd:72:c1:41:1c:01:c2:83:4a:0d:eb:8f:c5:09:
d2:32:15:7b:f8:12:b6:48:de:2d:25:b9:d5:b4:f8:
70:ad:ab:1c:44:4f:d8:7b:0d:b4:b4:7b:32:a0:89:
90:3c:97:c5:5b:b1:0f:8f:5e:f5:e9:e3:8f:46:95:
48:09:36:7b:ae:12:86:2e:ff:b1:6b:e0:1a:17:2c:
99:87:f2:50:2a:46:c0:eb:bd:d3:10:b9:16:03:6e:
ba:e9:ad:7a:69:0c:9e:2e:e6:22:6a:4a:da:34:4d:
1c:4e:d5:b0:29:79:ac:3b:3d:40:06:f9:89:47:4c:
7e:38:e4:db:84:d9:16:5b:87:38:41:c7:7c:cd:d1:
58:11:21:6b:4b:af:83:ed:58:c5:c1:1d:9b:81:27:
41:0b:b2:f6:42:36:82:d1:fd:52:a8:23:bf:4e:48:
3a:c8:83:3e:32:cc:58:23:cf:97:12:65:33:7f:e7:
cc:ac:c5:39:ac:88:bf:f0:8c:e1:9e:67:e4:9f:7d:
37:c3:22:05:00:f3:a1:ee:da:7d:2a:53:99:68:62:
9d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DC:0C:CC:DA:F5:9A:8E:31:D4:98:B2:53:01:86:15:64:63:F6:8A
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/r9wMzNr1mo4x1JiyUwGGFWRj9oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.27.0/24
Signature Algorithm: sha256WithRSAEncryption
24:00:d2:56:4d:f0:8f:05:60:86:aa:6d:ba:b2:43:75:77:2a:
01:ff:ae:e1:f5:47:b9:0f:d0:9b:68:eb:dc:03:2a:d7:95:c7:
3f:ba:4a:6b:f0:85:c4:cd:5e:fc:aa:22:b3:ce:db:8d:c6:c0:
e9:20:14:24:00:68:c5:9b:b6:40:2e:a1:80:f7:18:53:e5:54:
03:48:3f:3c:63:fb:85:f5:1a:5d:9b:22:8c:2f:93:c8:a8:13:
bc:71:c2:68:14:ed:f2:63:d2:68:ff:f0:aa:93:be:70:b4:74:
d9:dd:22:53:9c:bb:ef:0c:bb:54:74:89:1b:e6:30:70:6a:19:
a7:2d:4e:d9:38:01:fc:40:3e:11:36:52:9b:36:29:e9:22:de:
8b:ad:e1:a9:00:67:98:31:7d:97:85:fc:c0:0f:cc:2f:43:5c:
cb:ff:6a:9c:c6:8f:00:6d:47:11:13:a2:9b:96:54:55:c9:e6:
6b:4c:a8:9e:be:17:7a:5a:31:cb:de:53:65:ab:23:dd:03:61:
f3:45:9b:b9:9f:0b:0c:80:ad:e8:1e:16:b0:e8:14:53:92:ce:
04:67:7d:54:88:68:52:84:96:81:9c:a9:b4:54:df:c2:dd:06:
b0:58:8c:7a:dd:31:0b:7a:f0:04:04:c5:c4:3b:1f:2b:d9:30:
9e:a2:b3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:35 2023 by rpki-client on console-ams.rpki-client.org