Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/9jcmh-lwHuM6Vb4mCu_7QqowZFU.roa
File: 9jcmh-lwHuM6Vb4mCu_7QqowZFU.roa (raw, json)
Hash identifier: ruVJf9GovMMtB8KtQZTdYIpbA3ElJsbKNqd7g4/EoME=
Subject key identifier: F6:37:26:87:E9:70:1E:E3:3A:55:BE:26:0A:EF:FB:42:AA:30:64:55
Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial: 0187839BD7ED2B9D2CE966A2D6FC0D3BA15E
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/9jcmh-lwHuM6Vb4mCu_7QqowZFU.roa
Signing time: Sat 15 Apr 2023 06:30:41 +0000
ROA not before: Sat 15 Apr 2023 06:30:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 185.238.12.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:83:9b:d7:ed:2b:9d:2c:e9:66:a2:d6:fc:0d:3b:a1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Validity
Not Before: Apr 15 06:30:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6372687e9701ee33a55be260aeffb42aa306455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a8:b8:3d:8b:f0:bc:54:05:d2:64:41:cf:68:
14:62:09:66:75:aa:60:26:7f:28:ce:e1:30:82:59:
8a:0c:11:62:5f:55:66:26:c2:4a:c2:90:f2:e0:14:
f6:07:13:0d:36:a3:d5:47:de:b7:1d:a1:54:25:12:
ab:e6:87:dc:ff:b8:5b:d3:0d:e3:49:72:f2:41:1e:
97:5e:18:96:d0:5e:6f:5d:8d:7a:45:0b:55:93:eb:
09:91:d9:50:2e:d1:fb:b5:6a:d3:77:ae:1b:64:8a:
1c:dd:40:aa:db:9c:6b:bf:86:f7:23:2f:d6:f3:c2:
12:82:06:19:37:fb:0d:90:e8:47:00:97:61:15:29:
f4:64:0f:74:23:49:45:66:3e:7b:10:e3:3a:c3:a2:
03:ff:72:a3:c5:a7:a5:b8:4a:c7:10:9a:79:e6:35:
ae:7a:e3:14:25:6b:e8:3e:7a:4d:21:72:e8:aa:94:
b7:ef:4f:48:4f:47:49:28:56:09:dd:45:4e:13:51:
d5:35:16:56:38:cb:07:18:2a:e9:9f:06:90:43:42:
ee:91:9e:79:5b:a8:b5:30:b8:64:20:38:96:d9:32:
56:82:25:b9:b2:83:25:ef:48:39:e7:44:5b:7a:c9:
a3:82:f3:5d:4c:af:99:94:df:47:8f:bb:52:43:5b:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:37:26:87:E9:70:1E:E3:3A:55:BE:26:0A:EF:FB:42:AA:30:64:55
X509v3 Authority Key Identifier:
keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/9jcmh-lwHuM6Vb4mCu_7QqowZFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.12.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:ee:1e:83:80:c1:3d:b7:07:c1:c7:c1:25:c6:89:56:2a:0b:
c2:bc:b9:42:b0:b8:6e:52:ca:ca:e3:95:d6:eb:19:b1:91:49:
26:c7:5e:41:93:f9:92:7c:80:9d:dc:ea:7d:ae:95:5d:ea:61:
d9:8b:1b:4d:de:3d:9c:74:ed:9a:1e:02:07:4d:20:8e:78:60:
63:de:20:64:b6:fd:9c:8f:02:bc:ca:a3:39:fb:0a:c2:83:a1:
e1:31:bb:56:3d:70:49:f9:42:4b:80:1c:b5:ee:36:58:49:c8:
0a:50:ec:05:d4:93:aa:b3:78:8f:71:1f:83:fc:45:bb:ee:a5:
49:73:58:25:07:97:35:46:a2:9a:95:e2:34:03:84:2a:9c:f7:
25:07:6d:ec:22:bf:86:01:62:3c:dd:0d:28:96:58:5f:cf:4e:
2d:7c:66:51:4f:eb:60:5f:2b:4d:d0:86:5f:00:16:76:60:97:
9a:2a:79:bf:33:70:41:72:50:ea:93:71:45:fd:cf:e5:f5:03:
c6:27:53:c5:b4:08:2a:c7:e7:41:07:dd:4e:93:4b:9e:52:35:
fe:83:79:06:fd:2a:77:8b:a2:2c:8e:c6:11:95:dd:25:e6:ca:
06:a9:e0:7b:9d:9d:78:2d:62:02:77:ef:85:3b:d1:2c:0a:f8:
89:f3:54:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:25 2024 by rpki-client on console-fra.rpki-client.org