Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/uRgaOu9GSpL__G4t4ysQ69JoVkM.roa
File: uRgaOu9GSpL__G4t4ysQ69JoVkM.roa (raw, json)
Hash identifier: Cjdd7E+AuAN3UXO1ewlG98UIb595vA6XsIU7yqkI6/4=
Subject key identifier: B9:18:1A:3A:EF:46:4A:92:FF:FC:6E:2D:E3:2B:10:EB:D2:68:56:43
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 018AEF1C8C5511317F6E1AB05BECAED53887
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/uRgaOu9GSpL__G4t4ysQ69JoVkM.roa
Signing time: Mon 02 Oct 2023 06:39:00 +0000
ROA not before: Mon 02 Oct 2023 06:39:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 185.212.204.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:1c:8c:55:11:31:7f:6e:1a:b0:5b:ec:ae:d5:38:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Oct 2 06:39:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9181a3aef464a92fffc6e2de32b10ebd2685643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4e:b4:ed:69:c1:38:2d:7f:a2:ac:cd:18:b6:
67:95:31:60:5d:a1:dd:27:8f:db:c3:5d:9e:c9:bd:
c2:9b:62:28:f8:a8:02:1f:bf:1e:9a:8b:f3:54:db:
73:40:08:07:81:5c:17:95:24:a7:fe:84:5a:11:b8:
c5:e7:e0:ac:79:07:d0:95:68:53:20:48:33:0a:1d:
d6:73:46:ac:fc:0f:25:f8:c0:85:d9:e7:4a:f9:ba:
b5:96:df:db:c7:7e:c2:2e:51:7b:bf:a2:e4:0b:cd:
3d:6a:88:a7:36:f4:0d:43:6f:73:e7:fb:f6:96:dc:
ee:7d:6d:e6:31:ff:db:1c:fc:6a:39:e2:48:ff:c1:
8b:f0:9d:73:d6:33:1a:d2:b5:2e:79:f7:1b:c8:66:
b2:9e:2b:00:a2:33:ae:50:7a:52:5c:fd:01:e1:aa:
14:b5:7a:fc:3d:49:3e:7b:ab:9f:d9:4f:c4:d3:58:
a0:b5:5e:ac:2c:bd:aa:1b:41:e9:a6:2b:20:13:c9:
23:aa:45:28:4d:df:7a:50:fc:7a:c0:97:68:5c:f3:
bf:60:03:50:47:a3:53:47:b8:38:2e:27:c1:e5:31:
d5:bc:c3:ca:04:e1:8e:5e:58:0b:4a:1d:18:41:ab:
00:b8:82:1b:1f:63:42:cd:32:88:ca:c8:9e:37:c8:
9f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:18:1A:3A:EF:46:4A:92:FF:FC:6E:2D:E3:2B:10:EB:D2:68:56:43
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/uRgaOu9GSpL__G4t4ysQ69JoVkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.204.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:7e:73:94:72:90:64:cb:43:84:81:9b:15:78:ff:be:29:8d:
c5:04:d3:8e:59:be:d9:ff:c1:20:07:e0:3e:6d:14:3c:09:5e:
10:03:6f:a8:80:49:46:d6:56:76:0e:44:a7:d7:bd:90:36:9b:
de:62:41:fd:30:b4:d9:23:9c:a2:cb:61:86:8e:f0:42:49:2c:
3c:98:af:cb:d0:d3:0f:ad:27:a3:53:a9:f0:2d:6f:37:b7:b6:
95:22:43:11:c8:4a:fa:1e:6b:a1:7a:73:eb:ca:00:7e:81:42:
da:34:3b:c4:72:5c:bd:7b:7b:96:59:a3:2d:d4:3e:38:11:d8:
8d:82:1c:06:94:45:01:3b:6d:05:06:d7:60:6b:6d:79:c4:a4:
c0:72:21:5e:c2:86:cd:dc:b0:9b:19:be:a6:3a:23:29:78:fe:
5c:5b:ec:dc:2a:fb:47:ca:bc:79:25:d5:e9:04:6f:4a:17:c0:
82:95:d1:12:21:1c:45:56:04:bd:5c:5e:78:ac:e9:09:d3:57:
f2:0a:10:19:29:2b:27:f4:6d:52:ca:17:31:7a:dc:e7:90:02:
86:ca:4d:1c:39:63:b7:d0:75:fd:b5:b8:36:0f:41:b2:f4:34:
27:15:d3:c0:fa:0a:f8:b2:26:63:22:0e:f4:93:9c:ae:93:31:
1f:31:1b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:58 2024 by rpki-client on console-fra.rpki-client.org