Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/nbUWXlbtLq0-xK6D4NsLY5uwJaU.roa
File: nbUWXlbtLq0-xK6D4NsLY5uwJaU.roa (raw, json)
Hash identifier: fhJqK5dE2R/z3GJVcRTXWDQycvvoM3u7oH3uILW9fhY=
Subject key identifier: 9D:B5:16:5E:56:ED:2E:AD:3E:C4:AE:83:E0:DB:0B:63:9B:B0:25:A5
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 0186C5A72D55ECA02452A80D3C4A9C448E5E
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/nbUWXlbtLq0-xK6D4NsLY5uwJaU.roa
Signing time: Thu 09 Mar 2023 09:15:13 +0000
ROA not before: Thu 09 Mar 2023 09:15:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203248
IP address blocks: 185.174.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:a7:2d:55:ec:a0:24:52:a8:0d:3c:4a:9c:44:8e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Mar 9 09:15:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9db5165e56ed2ead3ec4ae83e0db0b639bb025a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2b:dc:b0:b5:3c:19:60:2e:59:ee:ea:84:5d:
f0:07:ef:db:03:5a:f6:ac:9f:fe:e5:01:17:4d:42:
3f:ad:db:af:78:76:f0:11:bb:89:c8:51:77:c9:6f:
3e:f5:41:35:44:bc:e6:fb:cd:7b:6f:8d:89:70:20:
4c:ed:ab:0e:41:f6:42:f5:c9:51:9c:a0:0e:f5:e7:
ab:62:27:9b:f6:bc:c6:0c:7e:87:42:38:46:72:10:
53:3b:f9:03:16:88:eb:34:4e:8d:3a:d1:22:9f:a3:
81:aa:95:b4:bd:15:4f:ee:9e:da:c6:1f:39:79:de:
57:15:96:2d:07:ff:ec:c1:6a:81:ab:db:cb:be:6e:
98:3c:91:73:2d:cd:46:a7:ae:ef:aa:64:6f:83:a0:
de:c8:1e:62:39:d7:a0:27:5d:74:4e:e7:a1:ca:b5:
92:9d:93:aa:d8:fc:9a:e1:12:61:be:72:aa:11:4a:
2e:2e:e5:4d:e4:9e:9f:25:26:e8:fb:7a:b6:3b:33:
99:5a:e7:e7:54:df:f2:a9:9e:d5:5d:8b:b4:b7:d3:
a4:ac:91:2c:33:83:cc:99:e8:5e:62:66:cc:9c:20:
b9:1f:d3:20:5b:db:3f:03:e2:d7:af:a3:c7:33:ff:
f1:58:36:24:3a:53:6c:f0:e1:f7:52:11:9c:8f:30:
d9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B5:16:5E:56:ED:2E:AD:3E:C4:AE:83:E0:DB:0B:63:9B:B0:25:A5
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/nbUWXlbtLq0-xK6D4NsLY5uwJaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.69.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:5c:43:55:01:81:b3:7a:40:0d:0f:ab:67:c6:b9:14:7a:0d:
f4:20:15:64:a7:e7:95:ed:84:9e:eb:c0:f8:2f:af:61:0c:43:
47:2a:9a:99:09:c9:29:01:ab:d2:03:3c:c2:a4:c2:bc:47:d0:
3a:63:1a:b3:c9:75:34:cc:34:3b:2a:87:22:e5:db:ef:e2:a8:
23:42:e6:24:93:c5:bf:ee:90:7f:68:9d:99:fc:94:68:67:6b:
a2:bf:84:c5:db:25:d4:d3:7b:e6:52:e5:0e:77:6c:32:00:94:
ab:da:3c:fe:3f:9d:ce:16:34:d0:4b:e5:30:1b:f3:49:93:d7:
a6:36:e9:03:89:8b:35:9d:b3:b0:53:f7:d2:ca:1c:d7:87:76:
3f:cf:c6:90:2a:67:be:af:4b:de:2c:77:ba:b1:13:51:55:2b:
f5:9c:6a:14:17:3a:ca:61:83:2e:19:1c:33:db:5b:bb:58:4f:
4b:2d:4a:12:0c:d1:14:3f:17:62:94:8d:33:b2:04:10:b7:53:
86:04:4f:f6:54:ea:fb:8f:53:5f:30:41:36:f5:16:84:5e:96:
3d:44:79:83:c5:8f:f0:f1:57:7a:a1:e1:d9:cf:ac:3e:06:5d:
4f:52:0f:3b:2b:32:80:a1:01:2c:14:2d:2e:d7:e2:04:91:65:
32:9c:7e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:55 2024 by rpki-client on console-ams.rpki-client.org