Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/9KDdMIhnYd2Ecql59XfIc9QrVUQ.roa
File: 9KDdMIhnYd2Ecql59XfIc9QrVUQ.roa (raw, json)
Hash identifier: 3HipWtr5+Y+mz4jqPkk272V3g5L1w+ih5QDTY6wczL0=
Subject key identifier: F4:A0:DD:30:88:67:61:DD:84:72:A9:79:F5:77:C8:73:D4:2B:55:44
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0185EB528F68FD971C8DB0723174A607CB4B
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/9KDdMIhnYd2Ecql59XfIc9QrVUQ.roa
Signing time: Wed 25 Jan 2023 23:45:34 +0000
ROA not before: Wed 25 Jan 2023 23:45:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59432
IP address blocks: 188.64.104.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:eb:52:8f:68:fd:97:1c:8d:b0:72:31:74:a6:07:cb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 25 23:45:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4a0dd30886761dd8472a979f577c873d42b5544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:b4:ce:b1:a6:88:24:b1:c3:46:27:33:b6:
32:40:4f:2a:03:de:4e:d5:ae:ee:be:59:e1:d6:62:
cb:b3:a8:d5:c3:2b:a3:84:6b:19:df:60:31:15:d1:
52:b4:bc:d2:2d:f1:ef:78:87:e9:d5:bf:c0:09:0d:
40:2a:ba:96:65:b4:f4:25:d1:09:76:5f:cf:6e:5d:
d0:78:52:22:d5:b5:18:6e:78:7d:9a:f9:87:0a:95:
eb:68:1b:bf:c3:41:d1:17:8c:8e:37:82:b1:b1:a1:
e7:52:72:a7:e4:19:fb:fe:01:b1:d4:62:b9:59:8c:
12:16:04:3d:9f:80:fd:b2:89:f1:2b:a2:15:46:a0:
c7:bd:ef:36:35:22:d0:20:b8:d4:c0:07:88:9d:92:
19:ce:36:e0:3c:b7:88:f4:b6:08:1d:74:7d:9b:73:
8b:3b:14:68:84:55:e5:35:34:de:83:97:6a:6a:be:
79:8d:7d:ab:0d:e6:49:a7:7f:22:35:d8:29:34:b0:
d1:8e:20:40:45:0e:41:9c:b5:8e:57:64:44:e2:f0:
c2:bf:45:a8:af:6a:91:d9:bb:34:72:ad:51:ea:40:
6d:42:b5:50:88:38:47:6c:f5:f2:af:03:8d:1b:f0:
fd:e5:01:31:f1:0f:4f:7a:7e:2f:14:83:42:d7:69:
d1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A0:DD:30:88:67:61:DD:84:72:A9:79:F5:77:C8:73:D4:2B:55:44
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/9KDdMIhnYd2Ecql59XfIc9QrVUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.104.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:36:7d:73:8a:a4:da:24:12:52:1c:0c:a6:d7:89:04:94:4f:
09:77:25:fe:f7:36:e4:b5:f0:7a:f5:7b:0a:5a:f4:99:a6:ce:
02:cc:ed:cb:19:e1:fb:11:76:3c:39:03:bc:29:12:26:31:43:
ab:ac:e2:00:72:62:00:7d:aa:aa:7d:6d:6f:8c:bc:54:72:12:
f0:7c:8f:5e:6e:9e:b2:54:62:3d:e5:d7:f5:1e:12:36:e1:9a:
a9:51:87:ab:99:2d:51:26:83:32:f1:87:01:58:e5:8f:28:d0:
04:a2:1d:a9:70:ed:4a:e0:e9:92:27:56:2a:26:04:ca:b8:5c:
bb:61:9b:cb:19:aa:20:1e:75:8f:8d:ce:56:06:18:15:29:41:
4a:5b:86:41:a1:09:0c:38:c3:7c:dd:ce:a7:8a:22:12:b9:ee:
34:7e:f0:86:ec:a8:80:d7:db:a9:aa:9d:63:ad:80:12:b0:9e:
49:b4:c2:5e:93:45:19:3f:a3:8c:f4:76:8b:f9:10:28:79:55:
99:6b:fe:ac:73:65:17:11:63:b8:5b:25:01:dd:47:cc:10:6f:
f7:b6:7d:c0:39:ed:c6:54:cc:e4:bd:34:6d:3b:cc:30:1e:83:
50:02:91:04:c7:de:48:2d:21:ae:1a:7f:75:41:6f:d3:a3:2d:
31:86:51:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-ams.rpki-client.org