Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/9JlxvAuYI3H7rePJ6TrpdkdCXhI.roa
File: 9JlxvAuYI3H7rePJ6TrpdkdCXhI.roa (raw, json)
Hash identifier: NbtW20g/UK0OSI2jIr05Q/S2uBghdzdlUN7Ssr4f2k8=
Subject key identifier: F4:99:71:BC:0B:98:23:71:FB:AD:E3:C9:E9:3A:E9:76:47:42:5E:12
Certificate issuer: /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial: 018570E7423D5D5A01C8AFE95F8D71F9C227
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/9JlxvAuYI3H7rePJ6TrpdkdCXhI.roa
Signing time: Mon 02 Jan 2023 05:14:42 +0000
ROA not before: Mon 02 Jan 2023 05:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39647
IP address blocks: 193.164.216.0/23 maxlen: 23
185.160.74.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:42:3d:5d:5a:01:c8:af:e9:5f:8d:71:f9:c2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Validity
Not Before: Jan 2 05:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f49971bc0b982371fbade3c9e93ae97647425e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:10:4c:01:23:06:35:81:ac:d9:20:2f:77:
e2:a5:2a:45:19:c8:33:11:06:84:bb:72:80:05:43:
7b:2c:36:9e:cd:6b:02:93:cd:70:95:1e:9f:b9:ed:
cd:4f:bf:81:6b:c9:e1:8f:a8:9e:aa:2b:bc:eb:37:
bf:a8:e2:8e:74:e9:c8:e4:0f:8e:12:65:8b:37:70:
e7:2e:0f:e5:2e:35:bf:08:9f:26:76:4c:a1:87:f9:
60:bb:76:fc:2f:7a:c1:b6:cb:19:8e:63:91:ef:f7:
99:c5:43:0b:e6:1c:4b:c2:d8:96:1e:33:35:dc:59:
12:be:ef:c9:c8:ac:43:29:b5:9f:00:92:f8:9c:af:
80:76:27:0f:69:d8:28:c6:d0:05:70:d7:e0:72:17:
f2:c7:10:1b:51:02:1d:8a:fd:e8:4a:cf:74:9d:17:
67:7b:5d:63:d1:43:bf:19:77:90:02:09:99:57:74:
b0:cb:b0:04:35:42:7e:cd:d0:b4:b7:1b:08:50:86:
ff:39:72:d1:d8:b5:32:bd:b9:1e:b4:59:ac:85:61:
bb:58:7e:76:ca:81:f5:11:5e:2f:aa:0c:74:b5:18:
ce:34:40:42:d6:e9:72:9d:2c:31:00:f8:42:b8:1c:
86:25:1f:81:26:8b:a5:27:49:80:78:e3:2e:ea:68:
f2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:99:71:BC:0B:98:23:71:FB:AD:E3:C9:E9:3A:E9:76:47:42:5E:12
X509v3 Authority Key Identifier:
keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/9JlxvAuYI3H7rePJ6TrpdkdCXhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.74.0/23
193.164.216.0/23
Signature Algorithm: sha256WithRSAEncryption
06:15:48:3b:36:fe:55:2b:7c:f3:a7:0a:5b:be:e4:19:5e:53:
49:91:b6:cf:cd:eb:4e:30:29:ef:8d:11:9f:42:fc:d4:c7:ce:
f7:78:d2:97:34:18:ec:7d:a3:bb:51:8e:f8:86:e5:42:14:98:
00:1c:f6:87:b7:a9:a0:ab:7f:35:9f:99:c8:ec:f0:f6:27:8d:
95:d8:bf:66:cc:b9:a8:86:29:5e:07:aa:3d:ac:97:cb:c1:7b:
9e:35:8f:da:ca:7d:64:15:dd:38:7e:a6:83:61:4e:e2:58:46:
97:3f:a3:1e:24:f4:86:35:03:5f:93:10:be:45:cc:10:9e:c3:
48:a9:e8:65:2e:e2:b3:48:75:23:d8:0d:3f:b3:d5:b4:ab:2e:
7e:07:7c:83:2a:a3:db:7c:16:de:77:69:41:b4:ed:e1:2f:4b:
7e:cd:53:70:6e:25:7a:16:ba:10:70:f3:36:3d:0d:b0:9c:40:
4a:9c:79:52:74:08:e0:98:1c:27:e6:94:9d:fe:a5:be:db:d8:
03:18:75:ab:5f:20:11:1f:56:fa:c8:57:7d:b9:8e:11:cb:33:
75:f5:fd:ab:dc:f6:8f:f2:5a:92:16:f8:1c:1d:ad:60:2c:ea:
60:82:86:81:fc:cb:06:8b:71:9e:e4:9f:00:2c:36:9d:90:74:
d8:7c:fe:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-fra.rpki-client.org