Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/pQ-HLQcED2uoEOzDii7QaXrPs5s.roa
File: pQ-HLQcED2uoEOzDii7QaXrPs5s.roa (raw, json)
Hash identifier: x8p6N5HII0bJz8bLR09kX7wZ+bEDljYu/95iKU7HKow=
Subject key identifier: A5:0F:87:2D:07:04:0F:6B:A8:10:EC:C3:8A:2E:D0:69:7A:CF:B3:9B
Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial: 01874D4DC421C4E18DC1A8702220C8F28436
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/pQ-HLQcED2uoEOzDii7QaXrPs5s.roa
Signing time: Tue 04 Apr 2023 17:25:54 +0000
ROA not before: Tue 04 Apr 2023 17:25:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57317
IP address blocks: 185.134.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4d:4d:c4:21:c4:e1:8d:c1:a8:70:22:20:c8:f2:84:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Validity
Not Before: Apr 4 17:25:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a50f872d07040f6ba810ecc38a2ed0697acfb39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:ca:ec:f2:82:77:bf:9d:ca:97:d8:17:ca:
2d:bd:29:0e:19:fb:a0:4f:c6:f3:75:36:89:cd:d6:
62:47:45:55:61:93:72:88:1c:c7:1d:a6:e6:8f:ab:
40:87:24:3a:18:16:57:8e:8f:2a:34:c2:77:4f:dd:
8e:3f:95:0c:3d:1c:8a:82:e5:93:1b:fb:4f:71:35:
ff:6f:8f:27:37:d8:7f:f0:86:ed:61:49:94:5f:22:
8a:41:c6:fe:ff:b6:ea:da:52:7a:24:0f:b3:03:f9:
f3:d2:6e:e4:7c:2e:55:25:01:6e:e9:43:18:21:43:
f3:86:13:ca:27:a1:1c:9d:86:58:19:6e:0a:49:1c:
b6:bd:45:5c:94:5a:82:19:26:f2:88:fa:89:5e:76:
3c:a0:57:e7:a1:3c:0d:be:41:fd:54:32:7f:18:60:
14:63:33:78:e4:55:ef:87:ce:c2:87:8e:dc:c1:44:
d6:a6:a3:b0:69:83:f3:82:31:1e:7b:3e:cf:94:37:
cd:b7:c3:92:bc:9d:9f:4a:59:ae:e1:8a:7f:56:51:
00:7b:c6:5f:3b:23:f7:b1:69:49:cf:a2:2e:ec:cc:
ec:b3:55:88:34:5b:0f:55:e3:f5:d3:ab:0d:49:07:
44:2f:2f:33:3c:a5:cc:b1:be:a5:3c:12:a0:0d:2b:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0F:87:2D:07:04:0F:6B:A8:10:EC:C3:8A:2E:D0:69:7A:CF:B3:9B
X509v3 Authority Key Identifier:
keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/pQ-HLQcED2uoEOzDii7QaXrPs5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.242.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:f1:c1:8b:c1:34:e2:55:5a:b2:4e:22:99:84:0b:f1:bb:b2:
8b:a3:25:a3:98:ba:3b:a4:a9:97:d8:6f:80:b5:3f:74:39:38:
62:8a:fb:3c:dc:3f:2b:ba:ca:d9:45:24:3b:a2:74:1e:6f:78:
10:10:f6:2b:b1:f2:b1:2e:da:bf:b1:a3:9b:b8:56:a7:ae:80:
99:64:e5:e5:17:ef:56:52:5b:f0:4f:6f:18:1e:88:87:d5:8a:
be:b1:9b:65:b0:1f:37:c2:26:a6:47:b0:8d:4a:bc:f3:35:5c:
4d:ea:3e:ca:ee:be:84:9d:1a:72:bc:bf:25:7d:51:48:f2:ab:
b1:16:79:42:bd:af:d3:9c:5b:37:50:a5:ed:bf:3a:c0:22:9f:
3a:42:39:44:a3:1f:32:b7:41:6e:71:45:0a:34:f6:70:54:99:
a8:1b:0d:8b:81:a3:ed:b4:fd:d0:15:aa:8d:0d:d3:d5:12:a1:
88:90:e5:33:68:29:8b:10:8d:f3:16:37:90:5c:26:0e:da:c9:
41:c6:04:30:6d:79:ff:91:e5:af:68:d6:2b:a6:c9:59:0f:46:
f0:b7:64:87:24:1f:bd:e3:87:86:81:67:cc:86:25:25:32:74:
38:48:fd:d2:b5:ca:42:00:86:6f:31:41:6f:01:43:d4:ba:fa:
fd:6c:72:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:03 2024 by rpki-client on console-fra.rpki-client.org