Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/9CinBlgXx50v9sB0-9zM89VqdZ8.roa
File: 9CinBlgXx50v9sB0-9zM89VqdZ8.roa (raw, json)
Hash identifier: dL0uVSSNHg6S/q3Oeqm7my7gxzq4jlWH3dCzu5m+r4E=
Subject key identifier: F4:28:A7:06:58:17:C7:9D:2F:F6:C0:74:FB:DC:CC:F3:D5:6A:75:9F
Certificate issuer: /CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Certificate serial: 0187EBC147503BC00F9A590DD0477BDB605B
Authority key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/9CinBlgXx50v9sB0-9zM89VqdZ8.roa
Signing time: Fri 05 May 2023 11:52:05 +0000
ROA not before: Fri 05 May 2023 11:52:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 185.25.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:eb:c1:47:50:3b:c0:0f:9a:59:0d:d0:47:7b:db:60:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Validity
Not Before: May 5 11:52:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f428a7065817c79d2ff6c074fbdcccf3d56a759f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:e3:cf:c8:e1:28:ef:02:0b:32:b6:35:ec:
84:42:a3:6a:b8:7c:6f:98:a4:e8:e1:e0:b8:af:61:
de:a9:4e:f3:33:22:23:1c:f0:ce:6d:02:23:85:4e:
ba:ce:4b:e4:c2:73:a6:c9:15:11:3c:e4:95:61:f2:
5c:86:c6:df:b5:9e:40:7c:c8:c6:46:e2:b5:ad:c3:
18:1a:ae:f7:43:2b:7d:b3:6b:ac:f7:f7:a9:d7:a9:
c4:8b:93:f2:58:fa:31:da:6c:8c:72:ad:bb:e8:74:
bf:44:e0:0c:e0:9d:9d:7e:32:62:3f:3c:a2:e7:ef:
7f:3e:1d:f3:48:eb:d3:7f:a9:a4:85:29:83:10:8f:
d1:b5:22:36:ed:6a:44:c8:45:c2:b1:c2:6e:0c:23:
27:9b:a8:fa:05:14:4a:1c:eb:fb:d1:e7:21:11:2c:
bf:fb:5b:cf:f7:28:b4:2c:f8:1d:13:99:ce:3c:d1:
5d:4b:f6:39:bb:55:f8:f4:ce:74:0c:2f:2a:22:1f:
f4:3a:38:91:56:9b:e5:f0:4e:9c:91:c5:6d:96:53:
e9:f7:24:79:f3:34:4b:47:ad:5b:21:89:0c:ac:5b:
a7:b7:5b:73:94:93:f3:fa:80:68:61:30:2e:72:cb:
bb:a8:5f:4e:28:00:a0:23:ec:b4:50:be:0b:e2:e9:
87:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:28:A7:06:58:17:C7:9D:2F:F6:C0:74:FB:DC:CC:F3:D5:6A:75:9F
X509v3 Authority Key Identifier:
keyid:21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/9CinBlgXx50v9sB0-9zM89VqdZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.114.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6f:41:25:72:b5:05:ac:2b:df:63:49:40:e8:0d:cb:bd:4f:
bf:8b:91:5a:02:44:0f:3a:d8:af:04:49:8c:e4:86:7b:f7:05:
a4:a0:0c:2d:9b:95:a5:81:e2:8e:58:1c:8d:75:43:57:cd:0f:
73:80:b4:e9:6a:3a:2d:31:e7:c1:85:b9:c0:05:65:55:d0:9e:
58:ba:5d:60:ab:74:c3:75:11:a5:0f:ae:19:a5:08:e3:8d:9d:
43:6e:7b:b8:19:a5:30:43:89:24:06:f0:32:05:a7:d7:09:29:
13:e1:bc:61:ef:5b:aa:8e:71:e6:67:b5:9b:32:d4:d6:a3:1c:
f9:50:31:2f:9f:db:72:04:60:56:59:29:be:54:13:3b:8d:07:
79:cc:e9:4f:4b:2e:9f:20:69:74:7c:19:00:29:c6:1c:32:71:
70:75:4a:b6:4a:1c:74:6a:19:55:24:16:41:ea:3d:dc:01:00:
a2:5e:58:e2:b0:1a:b6:89:18:b6:ec:04:d7:3b:d1:57:43:f1:
2d:aa:27:70:71:ce:e2:ad:69:4d:a6:59:6b:c6:05:16:97:fb:
5e:91:66:c2:23:8f:2f:d0:28:03:5a:00:ed:c6:62:cf:d2:6f:
75:26:81:f1:c2:57:14:c3:5b:02:de:26:34:5d:0b:47:fc:f0:
8f:1a:97:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:23 2024 by rpki-client on console-ams.rpki-client.org