Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/4KvTAJiXPOu68A8iiC3m4gw4wOA.roa
File: 4KvTAJiXPOu68A8iiC3m4gw4wOA.roa (raw, json)
Hash identifier: iIl9LhaKK88jv/WRSs45kCZy/CDVbAmvWFWkk4aKFSk=
Subject key identifier: E0:AB:D3:00:98:97:3C:EB:BA:F0:0F:22:88:2D:E6:E2:0C:38:C0:E0
Certificate issuer: /CN=5f1a427072b31d44784c375dfae42278e71fa836
Certificate serial: 01892ACBC266D88B728AF340D0F042E472D2
Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/4KvTAJiXPOu68A8iiC3m4gw4wOA.roa
Signing time: Thu 06 Jul 2023 10:42:23 +0000
ROA not before: Thu 06 Jul 2023 10:42:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 270164
IP address blocks: 185.236.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:cb:c2:66:d8:8b:72:8a:f3:40:d0:f0:42:e4:72:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836
Validity
Not Before: Jul 6 10:42:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0abd30098973cebbaf00f22882de6e20c38c0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ca:77:03:e5:ae:c2:00:34:82:bf:7f:39:8f:
79:9d:23:ed:0c:81:c6:d7:91:d3:7e:49:33:1f:4d:
8a:c1:ea:6a:15:3a:46:ab:24:85:2d:ff:cb:60:79:
cb:ec:c9:13:95:a2:43:8b:15:34:c6:03:7c:3d:c1:
6c:db:05:2e:0d:05:bf:e0:ff:d2:36:92:4c:1d:b0:
74:dd:63:fc:d5:5f:85:92:15:41:49:ab:8a:c6:2e:
88:8c:99:89:8c:b8:9d:80:2d:15:50:49:48:04:3b:
41:d0:79:50:f5:02:f4:15:bd:e8:51:57:d3:ed:e5:
2c:a4:9f:e1:f3:1a:f3:9b:90:45:3c:23:80:5c:af:
1d:4e:5e:e4:ea:12:8a:27:ce:4a:b9:d0:84:24:b0:
78:70:bb:3a:54:8d:70:4b:8c:e9:b1:ee:3b:5f:d2:
94:b8:ee:ad:a3:28:f6:9c:07:63:6f:da:33:2b:85:
38:c7:ea:22:46:87:5f:1d:b6:ea:47:45:38:8e:55:
d7:23:97:29:3e:8c:30:09:15:47:b8:44:06:05:5b:
f4:a1:31:5d:0c:ba:0f:3f:6d:13:86:65:b5:b9:b5:
a4:3a:f9:0d:bb:ef:2d:75:db:87:3b:dd:30:5f:a2:
06:f8:6c:e9:9b:91:3e:80:56:e5:84:bf:04:b4:b9:
76:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AB:D3:00:98:97:3C:EB:BA:F0:0F:22:88:2D:E6:E2:0C:38:C0:E0
X509v3 Authority Key Identifier:
keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/4KvTAJiXPOu68A8iiC3m4gw4wOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.181.0/24
Signature Algorithm: sha256WithRSAEncryption
09:24:c8:5d:b4:b8:73:ca:93:ed:55:0b:88:f7:7d:53:c8:38:
64:ae:5e:e5:12:8d:10:41:f6:86:5a:10:ae:a0:0b:52:1b:f8:
17:5c:21:38:e4:65:e7:d9:e9:5f:39:11:ee:6a:72:da:ef:ca:
00:10:82:ca:a9:41:3c:6a:98:93:ee:60:00:6b:32:9e:98:08:
71:08:fd:2f:bf:02:2f:8e:86:92:db:a6:51:0c:bf:2a:fd:7f:
c6:23:0a:e9:03:fe:b0:8c:b0:00:93:48:bd:20:90:67:a6:e1:
2b:bd:2f:48:5f:15:c1:16:fd:b8:78:ff:eb:c8:29:2a:2b:30:
3b:2e:71:35:ff:71:24:b2:c1:9d:bc:11:1c:09:e1:53:3a:87:
2f:c0:92:20:50:97:7b:f9:6a:97:66:08:8f:fc:92:1a:aa:54:
87:55:25:ac:ef:c0:19:f1:7f:ee:fe:12:9f:24:67:d5:df:19:
1f:c5:05:d5:36:09:17:e9:ad:8e:e3:c0:df:43:2e:fc:1c:66:
f4:e0:c5:e3:75:a6:f1:40:0a:4f:fd:22:ff:d9:1c:ea:15:45:
fd:3e:75:93:97:0c:b6:2c:9f:b8:84:5b:df:a0:ca:56:17:ba:
0d:49:ff:12:5a:d8:52:47:66:fd:f4:8f:46:f4:e2:fb:a4:3c:
c9:43:45:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:08 2024 by rpki-client on console-ams.rpki-client.org