Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/Kb2pPR3_sjYotDIn4svYfIIeX_E.roa
File: Kb2pPR3_sjYotDIn4svYfIIeX_E.roa (raw, json)
Hash identifier: +RNuKQ/arnyb/oWV8dQh44EprFPHyCwqQJDsDkZqOJM=
Subject key identifier: 29:BD:A9:3D:1D:FF:B2:36:28:B4:32:27:E2:CB:D8:7C:82:1E:5F:F1
Certificate issuer: /CN=f8e826de1070d9d79daa9e415fc432613cc57e57
Certificate serial: 0185729EB7C5F161A19F16607E342C1631C1
Authority key identifier: F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/Kb2pPR3_sjYotDIn4svYfIIeX_E.roa
Signing time: Mon 02 Jan 2023 13:14:42 +0000
ROA not before: Mon 02 Jan 2023 13:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5580
IP address blocks: 185.47.227.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:b7:c5:f1:61:a1:9f:16:60:7e:34:2c:16:31:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e826de1070d9d79daa9e415fc432613cc57e57
Validity
Not Before: Jan 2 13:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29bda93d1dffb23628b43227e2cbd87c821e5ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ef:e4:f2:1a:79:3d:c3:81:45:be:f7:6c:26:
35:99:b4:97:1b:3b:93:0d:9e:54:7d:7b:cb:ea:02:
1c:8c:94:94:31:8b:ea:1e:a5:1d:1a:9f:1c:2f:d2:
c2:07:30:46:d9:c7:25:0b:e7:75:d0:2f:eb:98:0a:
42:5a:fe:86:fb:dd:50:cc:f1:da:93:b0:2d:c1:2d:
20:76:02:1b:0e:d4:31:60:cf:5a:37:3f:ae:36:63:
c2:e9:29:b0:1a:46:ed:d7:dd:25:ac:59:db:f4:ff:
4e:a8:6b:04:2a:f6:f3:30:ca:ec:d6:3b:04:33:ab:
e8:d9:b8:ed:b0:89:19:17:41:af:63:9a:20:2c:a6:
33:a2:a8:00:03:eb:40:1d:92:8b:19:b6:02:b6:a2:
44:a9:63:88:29:6c:bb:71:01:33:90:b9:53:ae:94:
8f:9d:e7:23:a7:93:52:6c:25:ed:57:fb:f0:33:f9:
75:e9:48:57:cc:8a:87:7e:c0:94:8e:fb:9c:30:37:
54:6b:37:e2:f0:df:89:dc:ab:08:d5:91:b8:ff:a0:
0f:aa:21:61:65:36:a1:71:b3:93:de:2c:c3:6e:b8:
47:8e:5f:bf:4b:a0:8c:b2:34:7e:e4:63:fb:59:ad:
83:5f:bc:e4:01:00:79:64:30:39:05:7a:55:19:a5:
28:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BD:A9:3D:1D:FF:B2:36:28:B4:32:27:E2:CB:D8:7C:82:1E:5F:F1
X509v3 Authority Key Identifier:
keyid:F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/Kb2pPR3_sjYotDIn4svYfIIeX_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.227.0/24
Signature Algorithm: sha256WithRSAEncryption
27:3b:e4:64:81:13:c8:70:52:b6:5f:7f:54:67:bc:ef:29:6d:
a5:ff:1b:76:c4:b8:98:a7:10:39:9a:60:b1:3e:ed:62:00:2e:
88:13:a9:3c:c2:0d:b0:85:f2:e7:02:75:e7:bb:e5:89:9f:7d:
6c:e6:93:ac:cf:f0:49:cc:9a:29:3b:6b:da:8f:32:8b:23:88:
1e:48:7e:57:8c:2e:29:e9:8f:51:c2:44:9c:2e:3f:2a:48:f8:
ed:bc:15:0c:d8:71:a4:79:01:31:99:e5:91:1e:6f:0e:ea:a3:
e6:bd:d8:85:20:76:36:6c:29:ed:a8:68:62:ca:95:6b:c1:fc:
9f:98:92:00:cb:28:f4:b6:8e:93:4b:5b:f1:d5:f4:61:85:23:
6f:c4:6a:f5:a0:e5:b5:20:6a:8a:3c:6c:32:18:2e:ad:70:23:
fc:5c:bd:94:60:34:5e:59:9d:e6:43:32:f8:0a:cf:28:b8:3b:
2b:9d:8b:27:4a:6b:da:47:e2:ba:01:5e:f3:2c:30:0d:54:59:
67:f9:c1:4a:19:85:c6:58:3a:b7:78:0b:f4:7b:de:14:cd:47:
47:fb:7c:f2:93:75:5a:5e:ef:4d:86:3a:28:de:b6:8b:8a:b8:
8d:db:ee:9a:78:98:16:98:cc:59:af:5b:ae:c2:c7:2f:4e:f0:
50:b2:37:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:49 2024 by rpki-client on console-fra.rpki-client.org