Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/4QC9ijKfx7vcPosA4pLqPU9wtXc.roa
File: 4QC9ijKfx7vcPosA4pLqPU9wtXc.roa (raw, json)
Hash identifier: bq3uqwN+n5F8Tb/DrHjgZcCHNhcTQaqp2PBdNxqbxUk=
Subject key identifier: E1:00:BD:8A:32:9F:C7:BB:DC:3E:8B:00:E2:92:EA:3D:4F:70:B5:77
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 01880A42CB0B548E7103B95CB47BDC634850
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/4QC9ijKfx7vcPosA4pLqPU9wtXc.roa
Signing time: Thu 11 May 2023 10:02:09 +0000
ROA not before: Thu 11 May 2023 10:02:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 185.143.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:42:cb:0b:54:8e:71:03:b9:5c:b4:7b:dc:63:48:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: May 11 10:02:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e100bd8a329fc7bbdc3e8b00e292ea3d4f70b577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:a5:5c:5b:44:c4:05:f7:df:9e:85:a2:26:
86:a2:79:89:54:6f:bc:36:c4:41:ae:e1:9e:00:3f:
83:5b:64:6c:a5:b9:5d:82:93:a4:53:86:29:f1:42:
4b:d6:0d:ae:0c:b4:cd:7f:62:52:fe:ac:a7:8b:a4:
3f:de:87:8b:d9:76:c2:47:af:7d:17:b4:0b:f4:ee:
fa:c8:ce:17:72:8c:51:c3:4e:a6:1a:bf:80:c4:8e:
04:d8:d3:f4:fa:07:3a:29:5c:80:56:48:74:1b:41:
84:d0:52:2f:60:29:48:8e:06:17:5e:62:3b:49:e2:
e7:6a:6e:78:ae:47:df:d0:1c:33:0d:9a:d4:e0:fe:
ff:35:b4:a6:ee:d7:31:43:25:ca:6a:b4:55:9d:6f:
be:3e:7e:c6:b7:fa:36:4c:8b:69:92:c7:47:48:b2:
ab:53:fb:bc:13:9f:5a:af:b3:77:06:b0:7c:3e:75:
ea:8f:76:23:9e:21:46:fe:33:f7:12:f8:be:a7:a7:
3e:30:e4:22:4e:7b:6e:ce:1c:14:b7:6a:5e:1f:8c:
d2:f2:b9:dd:85:b0:38:f8:8e:2a:06:c1:5b:14:72:
05:60:99:d4:c9:53:72:91:86:6a:1d:77:1c:47:75:
6e:8a:a7:b4:66:61:2a:f2:90:87:3d:ea:16:4a:67:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:00:BD:8A:32:9F:C7:BB:DC:3E:8B:00:E2:92:EA:3D:4F:70:B5:77
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/4QC9ijKfx7vcPosA4pLqPU9wtXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.76.0/24
Signature Algorithm: sha256WithRSAEncryption
05:cb:1a:ec:66:5d:41:58:2c:a3:c7:1b:08:50:e9:76:00:e4:
d2:65:5f:da:5f:1a:9b:98:d8:dc:ab:a5:1b:8d:78:ed:8a:cd:
31:83:20:a8:64:85:c8:08:db:d1:50:28:40:46:02:46:49:df:
b2:3e:ac:ab:70:4f:ea:41:1c:d7:59:45:b0:17:42:9f:4c:e4:
5e:b1:e0:99:35:f8:c6:5f:cd:a7:2b:65:1c:cc:ed:a7:55:e5:
86:22:5c:ca:10:b7:43:fc:8d:7e:16:65:f6:93:fd:81:cb:09:
ec:64:23:9a:31:fb:f0:c3:0e:4c:f8:3b:2b:b4:55:62:cd:cf:
7c:3c:2f:5f:18:e6:de:5e:69:d4:01:de:94:c8:e0:2f:2d:02:
ba:16:7e:db:fb:06:6a:ab:06:e7:57:7f:9e:2a:de:46:35:07:
29:ab:7b:ab:0c:c6:9a:5d:52:a8:f2:b6:39:4d:11:fc:94:fb:
71:dd:0a:ca:57:70:06:70:01:08:3e:93:c9:3d:7d:2a:c3:e7:
d6:4b:ed:7b:4d:bb:cc:f5:62:a3:74:87:55:ea:20:af:a3:ce:
f1:19:7c:83:77:63:90:20:ee:4e:58:c1:b5:26:55:9e:23:1f:
a0:89:48:ba:0f:07:1b:bb:c0:55:ee:1b:5b:01:3b:35:3a:19:
55:2d:be:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:48 2023 by rpki-client on console-ams.rpki-client.org