Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/4TXSwM_YzT1yWlLr1-mOpvYAY40.roa
File: 4TXSwM_YzT1yWlLr1-mOpvYAY40.roa (raw, json)
Hash identifier: InavKGBoZC2sVRqlNkmTj9dw0zzzPu1zxXEjslqHqkw=
Subject key identifier: E1:35:D2:C0:CF:D8:CD:3D:72:5A:52:EB:D7:E9:8E:A6:F6:00:63:8D
Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial: 018907A98449DC74EF7CA5F996C9BA18E967
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/4TXSwM_YzT1yWlLr1-mOpvYAY40.roa
Signing time: Thu 29 Jun 2023 14:58:17 +0000
ROA not before: Thu 29 Jun 2023 14:58:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200034
IP address blocks: 185.198.208.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:07:a9:84:49:dc:74:ef:7c:a5:f9:96:c9:ba:18:e9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Validity
Not Before: Jun 29 14:58:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e135d2c0cfd8cd3d725a52ebd7e98ea6f600638d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:eb:fe:41:83:6e:04:d8:55:b9:f0:59:ca:
47:49:b9:c8:b3:0d:97:c7:e8:91:d2:05:91:c5:70:
91:15:27:f7:50:4f:b1:36:a4:70:21:61:01:f9:25:
7b:95:16:21:ee:5a:5d:06:d0:f1:78:e3:e9:fa:20:
0d:8a:c6:62:f9:3a:f1:c5:bb:72:0a:b3:e4:84:7e:
f0:91:bc:d5:6a:f2:b7:40:17:b3:13:87:49:76:ab:
72:16:45:26:20:b8:5a:84:50:48:ee:5c:11:79:b1:
84:e4:72:8c:66:3f:6a:01:6f:a8:61:3d:af:11:36:
34:b3:1b:fc:b8:0f:1f:cd:5c:ac:31:86:a3:70:55:
89:2b:21:cb:15:20:8f:fb:81:4a:dc:5a:d3:79:95:
28:f5:73:bf:82:aa:8f:81:8f:25:e0:76:4a:b0:51:
c4:11:66:12:c6:3e:bd:7e:0d:c6:ac:55:fa:41:bb:
cc:c5:56:8c:58:aa:5a:b6:fe:e2:cb:df:ad:ed:20:
90:71:f3:ec:6c:99:88:b1:61:a1:70:5a:7c:48:02:
1e:88:26:a6:8d:fb:af:32:3a:a5:ef:ef:50:e4:84:
3a:b6:63:1d:08:56:54:e1:e9:6c:21:f4:39:16:00:
3c:cc:ea:53:c9:d2:11:34:7b:7c:1c:bb:d9:83:d3:
9f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:35:D2:C0:CF:D8:CD:3D:72:5A:52:EB:D7:E9:8E:A6:F6:00:63:8D
X509v3 Authority Key Identifier:
keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/4TXSwM_YzT1yWlLr1-mOpvYAY40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.208.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:f1:96:a2:bb:ab:0c:4d:d2:ab:63:d9:33:77:ae:7c:ee:22:
17:5f:57:71:b0:c0:5d:22:00:38:b4:6f:48:85:ce:9d:00:2d:
7e:c1:a2:71:b5:d2:97:68:e2:ea:c9:5e:fb:44:26:10:97:88:
d1:eb:7f:97:6d:bc:b6:eb:86:90:57:99:ec:a2:fc:be:d4:f3:
72:30:dd:59:c4:ed:89:bb:f6:05:27:ad:fa:f8:48:40:4d:af:
3e:33:81:15:d5:56:e1:82:f7:b7:69:79:6a:79:ae:8b:60:58:
f1:3f:8e:51:15:78:5c:eb:75:9c:61:ac:4c:e1:1e:54:60:f4:
3f:a0:d7:6a:fd:27:22:34:bd:10:2b:72:cf:6d:ae:f5:4c:b8:
27:b1:6d:8c:86:f7:06:68:50:1d:56:32:f2:a6:2d:37:4c:94:
36:a7:62:be:e6:18:fe:bc:da:57:e9:1e:39:5b:1a:51:da:7b:
2d:a5:f0:47:a8:2e:12:f7:ef:1f:8c:55:1b:91:97:20:39:36:
10:f3:e7:dd:13:9c:49:31:8d:e1:40:34:19:12:da:7d:5e:3e:
97:04:1a:3b:85:b1:a3:c4:9a:01:13:5a:2a:3a:30:d6:9d:5a:
46:15:b5:fc:40:c9:e2:0a:57:6c:b4:7e:92:d0:26:38:12:27:
c6:eb:de:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:34 2024 by rpki-client on console-ams.rpki-client.org