Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/HOJ1FKDFvNo3R-S7reQcYZAecRw.roa
File: HOJ1FKDFvNo3R-S7reQcYZAecRw.roa (raw, json)
Hash identifier: jbkJaLqCCZK/njCSBA6N/DKh5s/7tgQ8f5MpEev7Yis=
Subject key identifier: 1C:E2:75:14:A0:C5:BC:DA:37:47:E4:BB:AD:E4:1C:61:90:1E:71:1C
Certificate issuer: /CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Certificate serial: 018C77545B12EA700BB5A259EE6081F1C5CE
Authority key identifier: 41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/HOJ1FKDFvNo3R-S7reQcYZAecRw.roa
Signing time: Sun 17 Dec 2023 10:31:06 +0000
ROA not before: Sun 17 Dec 2023 10:31:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 185.120.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:77:54:5b:12:ea:70:0b:b5:a2:59:ee:60:81:f1:c5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Validity
Not Before: Dec 17 10:31:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ce27514a0c5bcda3747e4bbade41c61901e711c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b2:21:d9:f3:20:41:da:b0:72:b8:fd:90:b8:
a1:00:71:f7:2b:8b:b6:0f:70:f3:21:6d:05:79:60:
6a:94:44:82:3c:c6:a8:1e:5d:be:a5:4f:17:ec:d7:
13:26:94:d9:90:6b:43:31:8e:04:76:fa:a9:be:b2:
ac:b4:2f:be:48:7f:31:25:32:6f:8b:f9:ce:fb:e1:
c4:56:9f:fe:24:6c:47:54:48:4e:2d:2d:73:09:d7:
52:ee:07:ac:4a:7e:a6:58:2c:6c:49:84:98:00:12:
4e:ad:f1:8f:3d:e7:50:6a:22:7c:9d:43:c0:52:67:
78:91:fd:6f:76:71:d0:eb:82:aa:5c:a8:56:e9:88:
b9:df:4c:da:a3:47:1c:1a:05:58:df:af:1b:cd:89:
b5:6a:e7:95:5e:e4:9a:2b:75:4b:ea:44:17:d1:d4:
45:5d:c4:40:e2:2e:0b:10:2d:71:ac:0e:c5:fb:4a:
ec:60:68:07:56:3d:2b:4c:4d:b2:05:73:5a:16:c3:
21:97:8d:be:c8:6d:23:57:52:3f:af:dd:11:05:bb:
83:10:ca:e1:e0:5e:f4:4d:05:85:55:22:6d:35:6a:
d1:96:0a:9f:5d:c7:77:dd:07:7f:19:c3:e6:b5:df:
47:05:7d:4a:3c:3b:e8:0e:e3:4c:1c:af:94:6b:bb:
d4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E2:75:14:A0:C5:BC:DA:37:47:E4:BB:AD:E4:1C:61:90:1E:71:1C
X509v3 Authority Key Identifier:
keyid:41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/HOJ1FKDFvNo3R-S7reQcYZAecRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.140.0/24
Signature Algorithm: sha256WithRSAEncryption
28:1f:98:26:81:07:31:0a:aa:9a:62:b0:0c:aa:1e:69:c2:0d:
67:c4:fe:3b:9f:b1:ff:87:e4:c5:e7:1e:71:92:49:f0:21:ec:
bb:7c:b0:eb:f6:8c:a0:dc:42:68:fa:cf:9f:01:7d:ca:73:db:
f0:a8:2b:9e:98:89:99:f1:51:03:43:bf:b4:c0:7a:24:e9:dc:
9d:fb:70:6b:4e:d2:71:8f:4b:4a:fc:1b:0d:a4:08:d2:3e:d9:
96:25:9e:9e:53:c9:e5:60:94:3e:2f:f7:59:e6:30:db:74:1d:
95:bf:57:ad:4f:b0:de:ee:6f:36:e2:c3:63:79:5c:5d:64:94:
ac:af:c5:f4:2b:08:42:d2:e7:c9:90:11:94:14:db:27:d1:47:
af:32:0e:24:21:ed:68:98:cb:dd:17:36:00:6f:bb:f9:5c:5a:
2a:10:c5:37:f8:b4:8d:79:76:24:e4:25:98:aa:b9:3e:96:db:
44:68:06:de:02:4b:aa:d1:2c:da:bf:89:78:62:3e:2f:0e:d6:
28:c2:db:e7:81:45:c8:15:01:8e:59:de:c3:3c:d4:44:c7:25:
7e:c4:cc:f3:bc:c7:ab:ba:bb:38:6c:e0:7c:a8:4b:40:a8:87:
75:57:62:32:e4:44:f1:6f:51:ad:b1:09:0b:b3:ea:c4:15:6d:
19:c6:58:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:42 2024 by rpki-client on console-ams.rpki-client.org