Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/18HWxnFIE5JjKbxNwdiVvBYZk5E.roa
File: 18HWxnFIE5JjKbxNwdiVvBYZk5E.roa (raw, json)
Hash identifier: tC9FWS1Ns4uVwlWAYABQdOHmQ3xhM/NtHnbzSO8rAEE=
Subject key identifier: D7:C1:D6:C6:71:48:13:92:63:29:BC:4D:C1:D8:95:BC:16:19:93:91
Certificate issuer: /CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Certificate serial: 01856ECB5D6F298B021BD8E3E53FE98CD09F
Authority key identifier: D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/18HWxnFIE5JjKbxNwdiVvBYZk5E.roa
Signing time: Sun 01 Jan 2023 19:24:59 +0000
ROA not before: Sun 01 Jan 2023 19:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207519
IP address blocks: 185.99.222.0/24 maxlen: 24
185.99.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:5d:6f:29:8b:02:1b:d8:e3:e5:3f:e9:8c:d0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Validity
Not Before: Jan 1 19:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7c1d6c6714813926329bc4dc1d895bc16199391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:2a:b8:13:b0:fe:35:4b:85:06:c5:a4:49:
dd:fa:7c:bc:3a:b6:b8:96:f3:6e:f8:5e:9f:6f:0d:
e5:d8:c2:f5:30:96:9d:1e:1d:0a:bf:25:84:69:fc:
43:03:87:0e:a1:05:c1:0a:05:21:1f:03:0c:26:a3:
e2:1f:2e:2c:ff:e9:15:a9:40:85:97:39:2d:4e:4e:
5b:14:aa:d8:20:46:66:3a:05:d7:a1:70:29:e6:62:
cc:04:8d:34:36:53:f6:c8:f3:ac:1b:78:48:76:c0:
de:44:9d:98:ba:51:6e:99:b9:94:64:07:ec:4a:f9:
46:a6:c2:53:4a:90:b6:15:4f:27:c5:d3:98:6e:2f:
7f:cf:93:2c:78:49:d2:be:52:06:fb:67:c6:2f:1f:
c0:16:de:46:42:8a:d1:4d:7c:c4:46:87:94:98:b1:
7c:4c:4e:2b:c8:11:80:15:f0:d3:47:73:03:3f:c9:
1b:6d:4f:d8:de:52:fc:28:74:8b:a4:dc:cb:fb:c0:
05:fd:3d:52:5f:ee:2d:78:16:99:48:54:23:c7:ec:
ea:ea:a8:8d:3d:3b:2c:b8:9f:2f:60:be:c5:f4:e5:
a4:da:d2:94:c2:44:ee:b6:0f:44:f5:d8:01:99:ba:
8c:bb:b5:b0:e2:f6:5c:13:5e:3b:da:fe:14:ab:ca:
6c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C1:D6:C6:71:48:13:92:63:29:BC:4D:C1:D8:95:BC:16:19:93:91
X509v3 Authority Key Identifier:
keyid:D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/18HWxnFIE5JjKbxNwdiVvBYZk5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.221.0-185.99.222.255
Signature Algorithm: sha256WithRSAEncryption
4e:d4:4a:ad:58:62:39:29:f3:47:b9:74:8e:e9:08:c5:a5:34:
57:2c:91:58:d1:94:65:cf:44:8e:24:d7:b9:ba:7f:50:a9:60:
9f:77:c6:c5:bb:c4:ab:71:3f:2c:94:cc:9e:47:43:9f:14:23:
f5:6b:d2:dc:00:e1:b2:37:82:87:d8:f1:1c:64:4b:9a:7b:a0:
18:9b:e5:a2:f5:3d:30:11:5f:a6:f9:ef:7f:4f:aa:33:e9:80:
0a:9a:bf:35:7a:2d:fb:75:28:65:ce:7a:35:6c:32:e3:9c:d5:
84:8a:00:90:69:e0:0e:4b:b4:e1:fe:6d:e0:e6:7a:9b:8f:0c:
b1:3f:87:69:61:d5:6b:96:28:7a:42:e3:72:62:fd:9d:0a:63:
a3:61:35:1f:cb:66:f3:02:df:c0:47:c0:6e:30:65:30:06:53:
e2:0f:f3:63:24:c3:d2:68:43:fb:85:b2:f8:0b:ee:7c:77:d8:
ad:ca:76:a4:5c:12:b9:76:49:39:2c:35:45:36:39:13:21:7e:
b9:77:e6:54:c4:65:b2:14:44:ed:68:23:65:5d:ed:e4:28:33:
4b:ff:0d:f7:3c:ee:e8:b6:8c:36:25:aa:43:86:5e:91:ea:dd:
4a:f1:d8:d9:d7:2d:8a:57:80:3b:12:26:75:4a:7c:b1:7e:c8:
bd:11:14:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:05 2024 by rpki-client on console-ams.rpki-client.org