Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/1-fj1iQGJFCWFz5z5vYcw5jPg6xg.roa
File: 1-fj1iQGJFCWFz5z5vYcw5jPg6xg.roa (raw, json)
Hash identifier: SgKw2KD1YXdxx7qDYXP4xNm7V70MBu3DosfSmFLQS64=
Subject key identifier: F9:F8:F5:89:01:89:14:25:85:CF:9C:F9:BD:87:30:E6:33:E0:EB:18
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 01888A88F7D850370FD93A9900EAE3122CC4
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/1-fj1iQGJFCWFz5z5vYcw5jPg6xg.roa
Signing time: Mon 05 Jun 2023 07:50:12 +0000
ROA not before: Mon 05 Jun 2023 07:50:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204149
IP address blocks: 185.112.190.0/24 maxlen: 24
185.112.189.0/24 maxlen: 24
185.112.191.0/24 maxlen: 24
185.112.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:88:f7:d8:50:37:0f:d9:3a:99:00:ea:e3:12:2c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Jun 5 07:50:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9f8f5890189142585cf9cf9bd8730e633e0eb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ae:9c:8f:49:fa:1a:75:d5:05:35:fd:6e:de:
9f:49:93:ee:c1:44:9c:e8:f9:b0:5b:0f:8e:b2:b0:
bc:c6:87:4f:27:6f:e4:05:2a:6f:11:19:e1:8f:8f:
6d:24:13:8b:24:06:d0:6e:76:bc:b9:a1:b6:4f:03:
c9:e5:87:df:02:d2:77:8e:17:61:13:a2:19:23:75:
1a:81:98:ae:c3:c1:8b:92:d7:3b:91:f5:0c:31:ce:
d0:88:2b:11:fa:6e:f9:a5:57:49:21:3b:fe:35:09:
83:66:b4:11:05:31:7a:27:7b:8f:fa:f8:61:f4:91:
04:62:da:d1:ef:fe:f1:49:88:f1:67:af:5d:a8:dc:
8f:1a:26:12:f5:3c:04:cb:8a:35:14:28:99:03:09:
fe:61:2e:64:32:a8:b8:ae:0c:7a:71:fe:c6:f0:a7:
21:20:31:cb:d0:ad:e6:f6:bd:1f:9f:67:62:2a:20:
85:c5:cc:28:88:33:d4:be:1b:89:08:83:8c:ad:25:
78:52:41:91:f4:94:86:31:f7:ba:1d:96:d3:5e:08:
c3:f0:a2:9e:57:80:70:eb:b2:8e:59:8d:6d:4d:68:
38:63:f6:d6:3c:26:e9:cc:81:52:66:47:3b:c0:ab:
12:69:4d:c9:d4:39:da:1a:6e:e3:39:06:25:0c:71:
8e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F8:F5:89:01:89:14:25:85:CF:9C:F9:BD:87:30:E6:33:E0:EB:18
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/1-fj1iQGJFCWFz5z5vYcw5jPg6xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.188.0/22
Signature Algorithm: sha256WithRSAEncryption
92:aa:1d:a3:89:f2:43:67:b5:45:61:20:10:eb:19:15:6f:c9:
5b:95:45:90:17:62:8a:ad:60:af:72:28:7d:b0:d1:7b:ce:93:
b4:ff:5e:7e:cf:74:6b:89:95:53:4e:2c:65:c1:04:f1:40:a4:
62:41:85:b9:2b:1d:53:d5:b6:a6:e7:8b:91:74:a6:13:6c:b4:
a2:c6:66:c6:a1:66:e3:1f:1c:1e:0a:53:56:c1:c2:18:d4:8b:
e8:3c:d0:99:9d:8d:e8:73:6d:20:06:96:cb:a0:82:9e:43:16:
b6:4d:a3:4e:29:24:87:0c:b2:4b:a9:54:1e:29:b6:76:a7:86:
df:62:d7:6a:f6:ab:05:7d:88:04:d2:91:cc:4a:aa:27:66:8e:
34:99:0a:fb:f5:dc:37:a4:88:30:60:e6:0f:b1:17:42:72:90:
93:8f:7f:33:b9:bb:9e:0d:8c:70:dd:52:24:16:96:52:48:78:
07:04:8e:34:0d:99:36:f5:5d:08:d0:79:7c:42:d9:38:aa:4a:
9a:1b:55:8a:87:c9:93:5d:a6:06:eb:c7:61:cf:aa:03:3c:ba:
f3:c3:d6:7a:01:8a:d2:d9:a8:a4:8c:7e:65:66:70:02:25:a7:
86:00:5b:a3:fd:d6:cc:93:42:8e:36:d9:73:8b:b3:f0:94:56:
4a:50:f8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:15 2024 by rpki-client on console-ams.rpki-client.org