Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/K9py-MgeDLJptyiN0YiMEz2CscY.roa
File: K9py-MgeDLJptyiN0YiMEz2CscY.roa (raw, json)
Hash identifier: oZnfnmaw/X/XdVV0yaZ9f+4oLWhNNlY4isapqAvlPa8=
Subject key identifier: 2B:DA:72:F8:C8:1E:0C:B2:69:B7:28:8D:D1:88:8C:13:3D:82:B1:C6
Certificate issuer: /CN=039b01353e51a3a87e835963bd8833ed81853d77
Certificate serial: 01857231157EC50E2C2F1F1353D40C7A8E77
Authority key identifier: 03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/K9py-MgeDLJptyiN0YiMEz2CscY.roa
Signing time: Mon 02 Jan 2023 11:14:57 +0000
ROA not before: Mon 02 Jan 2023 11:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24586
IP address blocks: 185.138.80.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:15:7e:c5:0e:2c:2f:1f:13:53:d4:0c:7a:8e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039b01353e51a3a87e835963bd8833ed81853d77
Validity
Not Before: Jan 2 11:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bda72f8c81e0cb269b7288dd1888c133d82b1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:47:ae:06:3f:25:03:d7:61:55:ea:d2:23:40:
65:01:83:0e:f7:b0:0d:ef:5e:99:ed:66:d4:61:cd:
2f:84:61:ae:84:b4:a4:77:96:45:f5:23:65:89:88:
7a:29:47:77:41:64:48:07:29:52:62:b2:d8:40:d0:
82:d7:e3:80:2b:c7:19:9c:b6:34:a0:1c:f7:a3:dc:
f4:e7:b5:47:0a:f1:dd:dd:1c:89:ad:7d:0e:e4:f6:
3b:54:47:c8:b3:ea:ff:71:fc:8d:8c:76:bb:39:a7:
4a:ea:76:0d:69:d3:2a:d1:67:51:cb:3b:94:0f:8b:
c1:6e:a8:da:33:4e:d9:b6:2e:2f:f3:c3:54:6c:16:
5e:99:1b:32:aa:c5:02:24:28:8c:0a:3f:be:c7:f0:
04:11:eb:62:bd:04:d8:69:b4:d3:df:33:21:a7:65:
d0:38:1b:2e:54:1d:c4:82:c3:09:35:d8:51:45:4c:
01:ca:da:fd:e0:54:4a:37:3a:b1:32:19:62:58:2d:
03:9a:98:c2:f8:58:77:eb:ce:73:33:5c:e6:fb:8b:
64:5c:d9:d1:ef:5d:3e:62:5e:af:77:9f:8a:9c:f5:
13:19:30:20:ee:e7:72:2f:82:39:00:fd:38:cc:05:
ce:47:47:2b:2d:2f:10:65:0a:d9:cd:f8:3a:85:b8:
01:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DA:72:F8:C8:1E:0C:B2:69:B7:28:8D:D1:88:8C:13:3D:82:B1:C6
X509v3 Authority Key Identifier:
keyid:03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/K9py-MgeDLJptyiN0YiMEz2CscY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.80.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:ec:ba:0c:1a:16:0e:ce:aa:51:7e:a7:44:d7:62:9d:99:88:
a1:ab:1e:0b:bf:c7:c6:5a:65:71:82:5d:d0:26:5c:98:67:a6:
3f:7d:1e:46:68:45:35:3a:9b:23:c2:71:0f:68:30:41:c1:e4:
63:bf:5f:8d:7f:a3:8d:14:91:57:c6:de:e2:4b:53:4b:69:fc:
76:24:9b:d0:39:8d:71:f6:76:e2:83:d8:06:69:d0:ae:14:20:
9f:4e:5f:95:7a:74:b2:73:3f:48:c3:0f:87:ff:15:58:c2:a2:
37:42:b0:5e:e0:14:05:7e:47:43:61:58:45:77:c4:ef:5b:43:
cf:d6:c8:48:d1:ea:bb:47:df:d0:76:21:69:82:64:96:d7:cd:
30:00:d2:b1:92:9b:c2:9e:8f:e0:d6:26:46:70:a5:1a:d0:74:
d7:11:e2:57:4c:f0:80:a2:ca:ad:3b:8e:bf:f6:2f:aa:9d:a9:
52:c7:a8:10:f9:56:70:c0:22:75:13:cc:66:6d:19:74:df:35:
07:17:ae:43:f3:db:48:fa:55:32:4e:a2:0b:93:82:31:40:91:
1a:0a:a7:17:44:25:fb:50:30:14:c2:68:d3:18:d9:1b:43:ab:
f9:5f:6a:23:03:51:1e:5d:74:49:99:62:89:dd:b4:ec:be:26:
b9:7d:6d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:57 2024 by rpki-client on console-ams.rpki-client.org