Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/X9etfJKsZOqCh1GdXTC2S4joPBE.roa
File: X9etfJKsZOqCh1GdXTC2S4joPBE.roa (raw, json)
Hash identifier: qThmAyctkicsZWlQ6EtY1dW9yYDt9/aAf3e6GuQbVJg=
Subject key identifier: 5F:D7:AD:7C:92:AC:64:EA:82:87:51:9D:5D:30:B6:4B:88:E8:3C:11
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 01875201AE3375A3A79ADD6458EB209D1366
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/X9etfJKsZOqCh1GdXTC2S4joPBE.roa
Signing time: Wed 05 Apr 2023 15:20:54 +0000
ROA not before: Wed 05 Apr 2023 15:20:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33846
IP address blocks: 185.223.104.0/22 maxlen: 22
141.91.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:01:ae:33:75:a3:a7:9a:dd:64:58:eb:20:9d:13:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Apr 5 15:20:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fd7ad7c92ac64ea8287519d5d30b64b88e83c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:dd:d9:b3:20:69:d4:03:3a:52:ea:fe:b7:03:
fb:b5:5b:e4:ec:99:9b:bc:38:04:ec:62:c4:0d:40:
da:8a:86:98:b4:d2:bb:88:6f:90:51:f1:a8:19:44:
a8:f7:78:15:f0:40:70:b7:d3:10:f3:98:ea:63:18:
75:d4:90:81:99:76:48:c7:6e:55:2d:8b:92:97:5c:
10:93:2c:fb:0e:fb:d4:19:dc:c3:c7:28:1c:f2:90:
47:c3:cf:56:11:bc:41:78:04:1d:d4:4e:96:33:fc:
ab:18:84:78:56:3d:b3:62:d1:50:29:fb:d9:f7:0f:
21:63:d5:3e:96:03:69:fa:1c:65:7f:93:55:2c:06:
1b:9f:0e:de:ca:42:d8:72:eb:78:39:5c:6d:7c:46:
f3:f0:14:d7:55:24:c8:ff:6c:e4:f0:ee:0b:f9:9e:
e5:d1:c1:2c:54:4b:96:fe:5b:dc:a0:f2:42:b9:e5:
bd:4f:2e:2f:06:da:47:b7:92:de:96:30:90:6c:fe:
25:48:0a:e5:d7:0f:54:a8:0e:85:86:2f:59:27:14:
96:b5:27:6a:27:eb:11:8d:c3:d7:29:a8:19:30:75:
6a:f0:ea:49:8b:2a:7d:0d:c9:0a:1a:3f:c2:da:7b:
8b:fd:eb:f2:4a:78:6e:56:3f:0e:4d:9c:53:e8:3a:
5d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D7:AD:7C:92:AC:64:EA:82:87:51:9D:5D:30:B6:4B:88:E8:3C:11
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/X9etfJKsZOqCh1GdXTC2S4joPBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.91.0.0/16
185.223.104.0/22
Signature Algorithm: sha256WithRSAEncryption
38:ef:31:38:c5:21:d5:0f:3f:c3:a7:1b:ee:05:8d:30:54:a4:
4c:c0:2a:6f:0d:7e:94:53:2f:b1:d4:47:69:f1:be:ed:32:14:
5b:44:5c:41:7f:7b:e5:2a:64:78:3b:d8:ac:ab:e0:40:10:42:
08:69:b0:90:61:60:0f:43:1c:ef:bb:67:27:1e:3d:2a:e0:48:
3b:5b:c9:96:4c:85:cb:2b:35:1c:08:49:88:e4:0c:34:fa:24:
99:77:27:1b:e1:a6:4d:a1:ce:8e:88:54:f4:b7:6f:1b:4d:b2:
85:1a:4f:1b:4e:92:ff:ee:09:4d:96:d8:c4:ec:c6:0a:d4:86:
78:a4:5f:ce:b6:74:41:f4:f7:84:5c:da:7e:5b:c7:3b:9c:82:
05:c6:aa:6c:09:25:83:63:41:1b:35:42:ff:69:b7:64:2a:9b:
1e:a7:51:ac:da:d9:59:31:cd:28:84:90:29:11:26:2f:e6:b9:
ab:fc:f0:4d:ad:5a:d5:20:89:e8:0d:eb:bf:c1:82:1b:28:c4:
4e:03:7f:b7:ec:0b:fd:30:71:e4:b5:05:cc:8e:16:1f:3f:17:
37:e4:7f:29:ef:f2:a3:c2:e8:25:4b:8c:98:35:95:00:a6:be:
af:66:77:d9:fc:9f:2b:7c:bf:34:6e:1c:86:af:30:13:ff:41:
ea:c0:4c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:16 2024 by rpki-client on console-ams.rpki-client.org