Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/vP8ljl7RkXRic-YmdmISN4wz7vk.roa
File: vP8ljl7RkXRic-YmdmISN4wz7vk.roa (raw, json)
Hash identifier: C42KO7RFJWuRfra/LbYKvFi+DXfFFS1piSU32TbXyQQ=
Subject key identifier: BC:FF:25:8E:5E:D1:91:74:62:73:E6:26:76:62:12:37:8C:33:EE:F9
Certificate issuer: /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Certificate serial: 01904E131F6AEDDF37597116C568489ED42F
Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/vP8ljl7RkXRic-YmdmISN4wz7vk.roa
Signing time: Tue 25 Jun 2024 06:26:34 +0000
ROA not before: Tue 25 Jun 2024 06:26:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47254
IP address blocks: 185.9.148.0/22 maxlen: 22
2a02:d1c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 25 Jun 2024 08:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:13:1f:6a:ed:df:37:59:71:16:c5:68:48:9e:d4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Validity
Not Before: Jun 25 06:26:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcff258e5ed191746273e626766212378c33eef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7a:85:fe:89:98:7d:18:b2:f8:1f:9b:e6:6e:
2c:99:8d:e1:9b:47:d1:91:3a:67:41:a2:bc:9e:a9:
e0:d6:ac:9e:c3:36:69:0c:1e:8d:12:79:9c:51:01:
87:58:61:96:d2:1e:d3:de:be:4d:9a:01:ae:91:6e:
66:4d:8d:91:93:03:40:1e:00:23:ed:7b:e5:19:ad:
c1:28:ee:51:27:7b:f0:df:e2:ab:68:cf:e5:33:23:
e3:0d:ea:e5:7a:04:a0:a3:1c:91:b2:f4:67:81:b5:
2c:e5:3f:71:d7:23:77:64:2a:28:a5:d6:49:f7:ca:
33:9c:29:5c:88:01:19:4f:76:3f:f4:0c:0d:ab:8a:
9e:8b:0b:6e:3f:18:6f:f6:33:bf:be:f5:a8:55:f6:
e6:80:1a:a7:30:49:15:82:ca:80:db:34:04:f8:c0:
7e:f4:09:59:65:14:ba:2d:53:47:e1:c3:e2:0d:d9:
0f:88:03:dd:59:3c:94:7f:61:29:9b:c5:b2:e5:8d:
bf:4d:c9:2a:12:62:1f:58:98:d1:79:e6:ec:8f:36:
da:9c:c0:39:ab:4c:08:a5:42:20:32:b2:39:29:80:
19:a3:62:5b:b2:cd:4e:96:1c:3c:69:f4:4e:30:20:
db:54:05:44:60:43:97:2d:b1:02:95:7d:03:8f:84:
1e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FF:25:8E:5E:D1:91:74:62:73:E6:26:76:62:12:37:8C:33:EE:F9
X509v3 Authority Key Identifier:
keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/vP8ljl7RkXRic-YmdmISN4wz7vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.148.0/22
IPv6:
2a02:d1c0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:6f:b4:90:78:39:3b:b7:d1:b7:0e:20:38:c8:18:2d:c4:53:
66:3c:ed:09:5e:29:c4:4c:7b:b3:f6:87:6d:3c:87:79:33:94:
7e:28:49:8a:58:b4:df:50:54:14:0e:4c:8f:06:44:a7:5a:01:
8e:d0:f7:44:f0:b0:a4:ba:fc:e8:54:92:da:46:10:e4:de:9f:
bc:89:63:43:6f:95:23:f0:f4:9f:c8:cc:e6:a9:99:98:03:69:
f5:0b:be:b2:97:02:ca:82:65:1d:96:79:eb:3a:59:5a:1e:7e:
17:f0:c7:b2:82:c0:59:29:b4:46:0d:21:1e:94:cd:55:9c:21:
bb:46:62:93:69:c1:ed:05:24:b8:44:48:e6:2b:5e:98:b1:3d:
fb:07:e2:1f:5a:26:ce:be:72:7e:c5:1e:92:ff:e4:5e:4a:bb:
a1:12:11:99:ff:f0:69:3e:4d:fe:67:c9:50:24:d8:f3:fd:88:
fb:45:fe:53:80:c9:0a:20:5c:e6:38:0e:36:0a:76:02:e6:2c:
1f:ec:5b:2a:98:e2:99:1e:26:91:db:72:22:9c:3a:e1:04:16:
d5:b0:da:80:b1:93:b8:34:e8:83:15:6a:e1:1a:a4:7e:ff:47:
17:97:72:5b:ea:6c:e8:b9:06:6e:20:b3:28:88:58:08:9d:64:
64:41:c5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 13:08:01 2024 by rpki-client on console-ams.rpki-client.org