Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/9tsCVrhRCd4yajn5HPHrczJHG5c.roa
File: 9tsCVrhRCd4yajn5HPHrczJHG5c.roa (raw, json)
Hash identifier: SPeFwzViTwcyrBAZ6NtifYTj3RJzMcWy1oEk7ygL7jI=
Subject key identifier: F6:DB:02:56:B8:51:09:DE:32:6A:39:F9:1C:F1:EB:73:32:47:1B:97
Certificate issuer: /CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Certificate serial: 018708748725FEDF2ADEEAB2E6303BC8A528
Authority key identifier: 38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/9tsCVrhRCd4yajn5HPHrczJHG5c.roa
Signing time: Wed 22 Mar 2023 08:34:26 +0000
ROA not before: Wed 22 Mar 2023 08:34:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7155
IP address blocks: 185.116.248.0/22 maxlen: 22
5.145.184.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 22 Mar 2023 12:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:74:87:25:fe:df:2a:de:ea:b2:e6:30:3b:c8:a5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Validity
Not Before: Mar 22 08:34:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6db0256b85109de326a39f91cf1eb7332471b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f9:bc:14:95:3e:1f:1a:f9:a1:c7:c6:7b:40:
6d:b0:c4:d2:9c:54:e7:4e:59:93:25:ea:ed:36:fe:
a4:73:ce:b2:7c:92:dd:28:c6:18:39:b4:40:0d:46:
de:ee:10:35:56:5a:96:7b:cb:cd:24:2b:c4:0f:17:
3b:02:4a:4a:16:8a:bf:73:d9:37:74:e1:73:73:76:
53:ae:b3:f0:d6:1e:4a:fe:42:b7:fc:05:c9:0c:cb:
fe:f6:9c:39:bc:e3:d2:92:69:17:ff:56:15:6e:d5:
08:a8:3e:9b:4c:95:b0:18:df:b6:14:54:97:08:43:
95:cc:56:6f:a4:c4:64:17:61:3d:e0:5b:13:9d:2f:
7c:f4:63:d5:0c:f8:0f:d8:9b:e3:b0:17:23:ea:26:
2a:b7:f2:a5:3f:c5:18:57:ef:3c:e4:08:c7:c3:d4:
d3:b5:17:06:46:70:63:31:17:b4:75:c8:29:9b:86:
cb:e9:c3:f1:8f:6c:60:8a:6b:9a:ad:65:5c:6f:b7:
4d:24:68:96:1d:89:76:99:07:5d:c3:b7:6d:cb:1a:
d3:0c:7c:17:b2:03:a5:55:09:02:a7:99:43:69:14:
65:c5:96:87:9e:6f:77:ec:a0:22:56:7d:78:71:e3:
29:b8:0c:32:ed:cb:d2:63:cc:47:de:a0:3f:90:ec:
82:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DB:02:56:B8:51:09:DE:32:6A:39:F9:1C:F1:EB:73:32:47:1B:97
X509v3 Authority Key Identifier:
keyid:38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/9tsCVrhRCd4yajn5HPHrczJHG5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.184.0/21
185.116.248.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:4b:45:e9:fb:64:a7:c9:4f:85:6d:82:d2:37:dd:15:60:29:
fe:c4:b6:5d:90:06:96:d9:01:7a:8b:d5:00:3b:fb:1f:f9:f7:
26:24:76:f0:85:36:a1:76:b8:18:e0:c5:6a:ed:b9:9d:3f:be:
a7:5c:2a:16:17:00:e7:49:f6:30:8d:0e:e4:ee:ef:c1:ae:23:
b1:96:aa:34:4c:5c:71:91:e2:77:52:3b:9c:99:d2:51:c3:02:
ce:e7:e3:06:ab:a0:fc:8e:2c:ec:fb:8e:29:ad:77:2a:b9:66:
3f:05:73:9a:fe:26:de:dc:10:de:99:8a:94:6a:29:57:47:ca:
7a:bf:21:d1:21:d1:10:c3:0a:07:ab:c5:a3:09:45:2b:16:81:
77:c0:56:81:8e:38:9a:a8:67:17:10:b4:83:0c:33:13:78:85:
b7:b6:ba:31:67:85:74:79:33:58:5a:cf:7a:32:f3:07:b2:53:
3b:b0:fa:bf:81:11:78:a0:98:af:e2:2e:fa:6d:c6:98:f7:47:
53:cf:d2:92:e7:d1:80:da:4a:f3:59:b2:40:3b:d8:22:9d:9b:
8b:1a:cc:3f:6e:33:e3:57:da:a0:eb:7a:11:1e:ca:42:89:9e:
8b:5f:66:70:a1:9b:2e:fe:f8:e1:bd:26:63:b4:1c:38:88:d2:
bb:31:a6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:51 2024 by rpki-client on console-fra.rpki-client.org