Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/_xJDmQuius9Cod1dGImDvrO4cCk.roa
File: _xJDmQuius9Cod1dGImDvrO4cCk.roa (raw, json)
Hash identifier: c7PvtfQTi3lk5UKU0udPc/+w3fSA2FU9np5Jnoc7k3w=
Subject key identifier: FF:12:43:99:0B:A2:BA:CF:42:A1:DD:5D:18:89:83:BE:B3:B8:70:29
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 01856F14E978DB643FCFADA6064658F9A882
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/_xJDmQuius9Cod1dGImDvrO4cCk.roa
Signing time: Sun 01 Jan 2023 20:45:19 +0000
ROA not before: Sun 01 Jan 2023 20:45:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 185.101.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:e9:78:db:64:3f:cf:ad:a6:06:46:58:f9:a8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Jan 1 20:45:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff1243990ba2bacf42a1dd5d188983beb3b87029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c8:2b:46:48:b4:ae:04:f2:be:f6:91:a3:f7:
24:dd:da:b3:42:95:e0:d5:aa:ea:87:2d:f4:ee:75:
4b:7d:71:5a:bf:39:75:1a:9d:6f:6d:0b:8f:2e:06:
8e:0b:cf:23:1c:0d:f0:7d:68:0f:da:68:80:61:b3:
94:aa:1f:08:3a:64:d1:d6:2e:1b:25:b9:64:b7:67:
89:4f:48:f1:07:ab:b4:79:97:3c:30:87:04:1c:3b:
bc:b5:6d:78:3c:33:35:b9:5a:e6:e3:74:04:96:41:
e5:4c:e1:9c:28:f6:6c:84:10:b8:eb:2e:6f:61:c1:
de:3d:ab:c2:d1:4e:0a:87:92:7a:2a:20:46:6f:fa:
0d:33:02:0a:90:83:0e:b4:58:d4:17:d8:37:7b:06:
47:68:e6:61:e0:4a:fa:5c:2b:62:1d:db:71:a5:96:
7a:a2:71:21:9a:da:5a:fc:6e:41:50:2f:2a:37:37:
37:79:c6:3f:16:13:a1:83:98:f3:95:c8:9f:69:8d:
ed:36:dc:a6:93:2f:cd:3f:5e:93:4c:49:d2:d0:61:
c6:a0:d7:4a:2d:21:99:79:0c:40:13:27:9a:4d:ac:
b4:2d:9c:f3:49:7d:07:af:61:3d:67:ba:84:e2:bb:
43:e6:a6:db:d4:89:e2:66:c9:da:9f:c7:7d:27:06:
7a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:12:43:99:0B:A2:BA:CF:42:A1:DD:5D:18:89:83:BE:B3:B8:70:29
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/_xJDmQuius9Cod1dGImDvrO4cCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.168.0/24
Signature Algorithm: sha256WithRSAEncryption
42:0b:95:28:68:91:d8:69:51:69:ba:c6:01:cc:65:37:6a:70:
6c:d4:34:41:26:2a:49:99:4f:55:8a:b1:e5:17:65:ce:51:4b:
7e:94:a1:c0:a2:1f:60:4f:93:81:22:8e:7c:bd:8e:51:2d:9d:
1a:aa:ae:36:72:c5:be:6e:1a:c4:2a:6a:9f:05:6f:24:c3:d5:
0a:22:3a:a5:f7:38:55:95:98:78:3b:5c:40:89:7d:5d:a2:74:
3c:ac:71:c2:0d:3d:e1:8e:2d:7d:9e:23:b5:eb:dd:0b:be:75:
90:70:f9:f3:4c:16:b2:fe:ec:3c:47:6d:d1:e3:88:f5:39:3c:
34:1d:6f:1e:9c:c9:de:46:03:34:e8:7f:2a:e1:d0:e3:72:45:
9f:ce:d2:5d:0d:f7:2f:0d:b5:5b:0a:5b:c4:a7:68:dd:89:b3:
35:fd:de:0f:a5:15:8b:b9:59:db:e9:1b:a0:e6:50:1f:2b:95:
f5:ca:02:75:ab:43:13:09:d9:f4:2d:56:86:55:e3:02:77:d8:
0f:90:21:7f:5b:1d:7d:e7:72:a9:64:61:2d:a0:fe:80:c4:a6:
67:31:69:f1:ae:33:ea:04:a9:7e:46:df:31:56:94:7b:43:3a:
78:dc:3a:7d:c8:25:b3:e6:9a:50:4f:de:b5:79:05:06:e6:cd:
ef:f1:0d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:57 2023 by rpki-client on console-fra.rpki-client.org