Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/SEDqEvBEBhFInIPq9Vts6xLargI.roa
File: SEDqEvBEBhFInIPq9Vts6xLargI.roa (raw, json)
Hash identifier: XIvJGyyMuzfw37AobYw+yHUiEMt88C00MY+ocKxwvFE=
Subject key identifier: 48:40:EA:12:F0:44:06:11:48:9C:83:EA:F5:5B:6C:EB:12:DA:AE:02
Certificate issuer: /CN=a561ccb03741056715a6be4805321662d88e7e7c
Certificate serial: 0188B97AF6863D4E7C8C7E49ECB07FCCFA0B
Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/SEDqEvBEBhFInIPq9Vts6xLargI.roa
Signing time: Wed 14 Jun 2023 10:37:03 +0000
ROA not before: Wed 14 Jun 2023 10:37:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203184
IP address blocks: 185.142.150.0/24 maxlen: 24
185.142.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:7a:f6:86:3d:4e:7c:8c:7e:49:ec:b0:7f:cc:fa:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c
Validity
Not Before: Jun 14 10:37:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4840ea12f0440611489c83eaf55b6ceb12daae02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:14:5b:e5:94:4c:e7:33:41:2c:43:4c:d9:ef:
23:ed:81:4d:eb:ff:e1:8e:91:3d:ef:98:67:4d:cb:
b6:0f:47:a9:dd:38:ef:3d:6b:d8:c3:ba:e1:d3:d6:
ba:e1:b3:ec:4c:3f:fa:a1:be:e5:56:c4:75:76:e5:
9d:c5:4f:06:8d:f1:cf:29:f7:04:bc:03:6f:d6:39:
d0:a0:30:8e:5f:42:6e:bc:75:fb:80:aa:6e:f0:3e:
c0:a4:7a:49:12:fc:dd:6a:0e:ba:18:8a:ed:a2:22:
e8:30:a2:d4:39:3d:da:e7:f9:3f:8f:b8:89:7e:49:
5f:97:80:0e:72:71:3c:73:c8:ea:c8:89:9f:27:1c:
9c:7e:5f:12:ea:a9:b9:eb:f6:7d:58:08:10:cc:31:
a1:0d:4e:0e:de:ff:f4:e1:fe:c1:ba:df:c2:8e:0e:
c4:93:26:05:c7:33:dd:d7:40:b3:cc:5d:09:a3:94:
57:bb:0a:89:0f:bb:73:2f:e8:96:b5:6f:c7:fc:f3:
6b:cb:ec:eb:e5:15:d8:52:7a:0b:f9:07:61:09:36:
7d:bf:39:72:6d:39:90:4e:56:7f:74:cf:e3:a1:ed:
8a:77:94:45:3d:d6:9a:06:e5:ba:89:85:6c:23:02:
bf:64:5c:0f:a2:0f:57:54:60:37:ce:7b:3f:33:e5:
70:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:40:EA:12:F0:44:06:11:48:9C:83:EA:F5:5B:6C:EB:12:DA:AE:02
X509v3 Authority Key Identifier:
keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/SEDqEvBEBhFInIPq9Vts6xLargI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.150.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:80:76:70:60:15:c9:6b:74:aa:a9:28:c0:86:bb:db:98:f4:
38:87:7b:df:48:d2:f2:be:bc:5f:16:85:e1:49:ef:86:8c:b4:
99:e2:42:3f:b4:ef:ca:6f:2e:df:67:f5:79:55:fd:89:50:77:
f6:26:fd:46:5f:bf:a1:24:27:f2:0b:10:97:f7:15:30:fd:7f:
7b:8d:9e:79:9e:ef:4c:7f:42:9e:8b:94:06:fb:97:1c:0f:48:
0e:cb:53:eb:04:29:cf:35:fa:a3:7b:5e:6d:18:21:b5:54:34:
09:5c:f3:95:35:bd:43:e5:2e:64:71:db:35:7e:82:96:38:a2:
86:51:05:ff:a9:86:dc:71:d7:d6:42:25:aa:26:40:86:a3:ae:
75:b9:e4:f4:cd:c6:67:22:dc:92:f5:7e:36:23:ea:3b:75:c6:
0c:75:bd:e6:2c:72:c8:fe:45:da:6f:19:dd:56:f0:22:48:6f:
74:d1:7a:66:46:64:94:b3:b9:74:e8:e8:13:26:02:43:c6:fe:
f1:60:c5:fc:f2:5c:fb:73:c7:80:66:cd:39:b4:b8:3c:e0:9c:
4c:09:27:fb:5c:91:7e:3e:39:cb:97:3d:2f:1d:3d:93:a1:80:
57:c3:ad:23:59:45:ee:fc:cf:2a:c5:a6:ae:8a:a4:e2:7b:fd:
49:2e:df:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:07 2024 by rpki-client on console-ams.rpki-client.org