Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/dGcwpAR_OE-AR1axAhFntdNyblo.roa
File: dGcwpAR_OE-AR1axAhFntdNyblo.roa (raw, json)
Hash identifier: uv5I2YXwuy9ylgmX6z5Fw5e7P3JO5YXAeyXq3dHQhQ4=
Subject key identifier: 74:67:30:A4:04:7F:38:4F:80:47:56:B1:02:11:67:B5:D3:72:6E:5A
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01856E7905C1A78F4D0691899BE05B137C29
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/dGcwpAR_OE-AR1axAhFntdNyblo.roa
Signing time: Sun 01 Jan 2023 17:55:03 +0000
ROA not before: Sun 01 Jan 2023 17:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23422
IP address blocks: 185.127.95.0/24 maxlen: 24
176.111.220.0/24 maxlen: 24
193.8.195.0/24 maxlen: 24
147.189.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:79:05:c1:a7:8f:4d:06:91:89:9b:e0:5b:13:7c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 1 17:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=746730a4047f384f804756b1021167b5d3726e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:d4:5f:dc:70:ab:f5:34:c0:b0:fa:d3:b8:
09:0a:f5:71:ac:c4:fd:26:4d:94:48:54:c4:41:aa:
d8:6c:a9:41:21:77:e4:d5:df:a3:03:a8:7a:7f:64:
ec:ca:71:41:ba:ea:5e:e9:3e:61:78:0c:54:d9:e0:
e4:ec:38:ee:18:3b:81:cf:cb:92:9e:b8:3d:c7:ad:
5e:b7:61:ef:26:47:67:e5:91:93:ab:e1:de:35:31:
6a:38:d3:36:ee:6d:b8:e7:ba:2c:b1:1b:e2:bb:0d:
ba:5f:10:e5:a4:1c:1e:ec:f6:f2:26:ac:93:bc:f7:
8e:4e:11:d8:81:3c:4d:bc:08:03:13:08:20:3a:47:
fb:13:89:bd:c8:f8:e9:28:7b:30:7f:9d:a4:64:08:
ba:43:d2:9c:87:bf:bc:3b:e3:d3:2a:2c:c1:ed:2d:
c4:13:aa:63:d6:40:d9:a8:43:3e:5a:d7:e9:2e:7c:
f2:af:78:4d:8a:52:67:c1:d9:b9:c0:46:1e:97:d3:
57:c6:1e:6f:af:5c:3c:79:e2:05:d0:e5:49:07:7d:
44:a5:82:75:a4:09:67:6a:23:af:9f:dc:e4:af:d4:
ee:41:8d:39:5b:37:7c:fe:fd:8d:c2:64:49:77:c0:
4c:4c:fc:4f:12:ce:bb:50:82:a4:c7:6d:0b:86:b9:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:67:30:A4:04:7F:38:4F:80:47:56:B1:02:11:67:B5:D3:72:6E:5A
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/dGcwpAR_OE-AR1axAhFntdNyblo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.143.0/24
176.111.220.0/24
185.127.95.0/24
193.8.195.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ee:4b:f8:0e:42:1d:fa:ad:76:b8:81:a6:65:23:98:c0:7d:
fd:d6:05:63:b5:5b:91:9f:53:56:54:f7:09:65:0d:ab:8d:48:
33:86:45:c1:03:70:5a:85:ac:07:61:fb:f9:54:39:de:d3:07:
de:55:e4:83:9e:ac:53:dd:dd:51:a7:66:f6:66:54:e6:8e:7e:
be:04:a8:ce:da:e9:7a:4a:9d:18:85:03:b3:67:5e:ef:1b:a3:
82:bb:a2:dc:d3:80:c8:89:27:7c:c0:f4:4a:73:15:70:2a:f2:
ea:71:45:02:63:b8:1e:4a:4f:4b:39:73:d7:49:b4:4b:ac:93:
55:a7:16:82:0c:84:f4:2d:69:ce:aa:f9:92:5d:41:fa:3b:88:
b2:ec:a2:61:fe:25:df:5e:c3:70:32:8a:9b:a5:e5:46:14:53:
f9:4b:9a:48:b7:53:00:bd:eb:d6:a0:0b:5c:52:36:54:d1:67:
a1:eb:c8:c4:b3:36:03:1e:d3:8b:36:54:37:a5:86:62:d5:6e:
4b:6d:f6:4f:69:c5:dc:7a:b3:c6:67:b9:2e:f9:f2:30:26:5d:
07:9f:e0:8d:ae:f0:19:d2:2f:3a:4f:51:8c:82:b0:83:79:ff:
4f:f9:3d:bb:e1:33:d0:20:88:21:6b:51:b4:bb:bc:a3:b9:e3:
06:c3:46:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:41 2024 by rpki-client on console-ams.rpki-client.org