Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/9kQJ-9DNJMZRZBFej0i61-_1qdw.roa
File: 9kQJ-9DNJMZRZBFej0i61-_1qdw.roa (raw, json)
Hash identifier: NL9MwuxDihX2NGeb7jKDF5KuyfbDA/Ai/0Ek0BxPo7I=
Subject key identifier: F6:44:09:FB:D0:CD:24:C6:51:64:11:5E:8F:48:BA:D7:EF:F5:A9:DC
Certificate issuer: /CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Certificate serial: 01856E1D26511BF40221E6EE3D8BE7638D09
Authority key identifier: 19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/9kQJ-9DNJMZRZBFej0i61-_1qdw.roa
Signing time: Sun 01 Jan 2023 16:14:42 +0000
ROA not before: Sun 01 Jan 2023 16:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24951
IP address blocks: 185.50.224.0/24 maxlen: 24
185.50.226.0/24 maxlen: 24
185.50.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:1d:26:51:1b:f4:02:21:e6:ee:3d:8b:e7:63:8d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Validity
Not Before: Jan 1 16:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f64409fbd0cd24c65164115e8f48bad7eff5a9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:db:7f:de:74:be:24:eb:ba:8d:d7:09:4c:cf:
8c:68:db:8d:67:3b:21:c3:97:30:0e:13:35:94:d8:
64:bf:06:db:3f:db:27:07:f5:27:6c:4d:cc:df:4d:
50:04:4a:56:dd:12:ef:b9:84:41:6f:97:08:07:df:
53:ec:df:d0:de:ff:8d:59:59:68:b7:57:e4:f5:99:
aa:8e:8f:19:2d:b9:f7:6a:28:70:96:f8:ef:f4:74:
79:07:cb:6a:1e:31:d0:b0:08:94:ef:0e:33:29:dc:
24:5d:36:bd:6e:b4:88:3c:3b:9b:f3:45:96:40:8b:
ba:5f:86:d2:57:a6:d8:5f:f9:54:a5:34:8f:eb:00:
d7:34:13:72:46:2a:1e:03:21:e2:35:06:bd:61:48:
a0:68:4f:f1:8a:80:3a:ff:84:5c:33:fb:76:0f:f6:
7a:f5:ee:be:73:ff:d4:7e:9b:d6:b3:32:49:5f:74:
9e:dc:71:ff:f5:4f:22:c2:6b:a2:8d:07:f8:1b:9c:
05:b0:7b:67:f2:ea:73:92:c1:13:70:49:ef:b7:0f:
06:4a:03:2b:4b:51:cb:12:7b:21:96:0c:c2:b3:e8:
a9:4c:51:94:03:26:6b:1d:bb:40:3c:e5:d0:35:ac:
bd:15:f5:b9:63:fa:09:7d:14:d4:71:8e:c8:70:3c:
32:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:44:09:FB:D0:CD:24:C6:51:64:11:5E:8F:48:BA:D7:EF:F5:A9:DC
X509v3 Authority Key Identifier:
keyid:19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/9kQJ-9DNJMZRZBFej0i61-_1qdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.224.0-185.50.226.255
Signature Algorithm: sha256WithRSAEncryption
24:fd:b2:35:31:ee:7f:6a:5b:9c:dc:97:6e:f9:86:dc:3b:3f:
32:62:60:05:ba:ad:8f:1b:e0:3c:92:b3:a1:e3:79:a4:6b:40:
11:54:4d:25:f3:d3:ea:04:cb:58:45:19:d8:98:4c:84:24:1e:
a1:19:56:5e:b5:6a:1c:f8:7c:fa:e8:b6:96:dd:a7:01:de:2a:
e3:9b:79:97:b7:71:09:10:8c:f9:ee:5d:97:e5:01:95:a3:a4:
11:ed:05:9e:49:2f:04:1a:d0:39:b0:20:12:7b:bc:69:b2:ba:
41:c0:bb:fc:4c:19:c4:8d:eb:f6:79:d8:e9:11:1a:9c:b0:1f:
fc:8e:61:0c:bc:20:4b:21:bf:65:f6:ac:93:58:93:d8:2f:54:
52:0e:68:1d:c7:e2:d0:c6:c7:c6:9f:e6:08:9b:5a:48:8e:a6:
85:62:7d:fe:e7:ae:26:59:67:90:77:0a:6f:d1:87:b7:72:a7:
34:c0:89:63:11:dc:07:c1:7a:ba:6e:8b:dc:f7:4b:85:27:9c:
3f:48:bb:ad:6c:dd:5d:88:0e:31:08:83:91:c3:a6:de:d4:8a:
97:78:ad:09:17:6e:0b:80:14:11:6c:85:f4:aa:eb:ff:6e:e2:
fc:89:55:de:72:d1:64:60:eb:2a:78:d2:ad:c9:cd:f2:14:06:
0f:e9:4e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:25 2024 by rpki-client on console-fra.rpki-client.org