Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/9T-G_Uwr1Dq-43uGwZ5T25G2YR4.roa
File: 9T-G_Uwr1Dq-43uGwZ5T25G2YR4.roa (raw, json)
Hash identifier: KP7I18jOJKytVxk0w6CTxzUGDsTBs3+9LL+nD8S09b8=
Subject key identifier: F5:3F:86:FD:4C:2B:D4:3A:BE:E3:7B:86:C1:9E:53:DB:91:B6:61:1E
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 018571F0DC869CA07B9B24BED8655FE13CCC
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/9T-G_Uwr1Dq-43uGwZ5T25G2YR4.roa
Signing time: Mon 02 Jan 2023 10:04:48 +0000
ROA not before: Mon 02 Jan 2023 10:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51088
IP address blocks: 185.37.4.0/23 maxlen: 23
185.37.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:dc:86:9c:a0:7b:9b:24:be:d8:65:5f:e1:3c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Jan 2 10:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f53f86fd4c2bd43abee37b86c19e53db91b6611e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:72:d3:fd:5a:b4:fb:a0:0f:41:0a:1b:68:
3a:17:23:be:72:6f:a5:ca:57:09:b2:6a:fe:37:06:
62:74:76:e5:aa:6d:80:8a:cc:99:ed:70:cb:95:f9:
20:a1:1f:2a:a3:5e:16:ca:7a:2b:7c:c4:b0:62:ea:
14:68:2a:84:5b:5d:d0:86:a5:21:37:59:77:c1:64:
f7:c2:74:cf:38:02:31:e3:4d:a7:f9:0f:45:d3:83:
11:05:81:ee:9e:71:95:5e:a4:af:13:70:ba:aa:25:
9a:59:5a:c1:36:48:5c:00:6e:0c:43:10:db:f4:e0:
da:9b:1e:ae:41:55:20:2b:30:1c:17:bd:6f:bb:48:
56:29:cd:e8:cd:71:26:8b:05:89:bb:7a:9b:49:74:
d7:f4:66:25:bc:44:85:3f:f4:93:29:52:54:30:e8:
06:a7:ba:55:be:42:15:6a:dd:69:12:ad:6c:08:88:
bd:09:60:00:57:db:b0:ec:ee:e0:21:1b:a0:75:83:
75:95:a5:86:b5:03:4a:2f:60:b0:0f:f9:25:ea:61:
07:f8:04:a1:a1:57:55:8f:39:fe:35:56:8c:3d:fb:
3c:10:e0:8c:f3:09:4f:74:2a:dc:4e:95:a8:2c:3d:
ed:07:f7:5b:a0:1d:9a:7b:b2:1d:7f:32:cd:b6:d6:
c7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3F:86:FD:4C:2B:D4:3A:BE:E3:7B:86:C1:9E:53:DB:91:B6:61:1E
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/9T-G_Uwr1Dq-43uGwZ5T25G2YR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.4.0-185.37.6.255
Signature Algorithm: sha256WithRSAEncryption
64:0a:f0:1b:bb:be:0d:bb:cc:74:71:5e:d0:5f:39:e6:30:4c:
96:aa:f0:06:c7:e8:12:42:49:ab:29:4d:e4:b3:08:f8:61:10:
f4:a1:8d:44:ef:c2:e4:18:7f:16:6c:67:03:bb:58:48:bd:82:
e3:45:4d:49:83:2f:2b:8c:ae:2b:ba:70:04:9f:1f:fe:d2:df:
2a:d7:ff:6a:2e:2e:18:f1:2b:4f:71:69:3a:12:a8:25:27:05:
f3:79:7a:4a:43:b5:f4:5a:8f:ef:88:65:02:af:72:f7:c1:da:
08:2c:5a:5b:a1:0b:3f:61:a4:5a:67:de:f3:ba:04:0a:0c:50:
85:a0:45:9e:9d:17:86:25:9c:85:b4:68:c9:fc:81:4f:03:d0:
5e:06:59:d4:c1:be:28:67:82:9f:90:fd:47:0e:85:72:c9:af:
54:db:9d:1f:c0:c1:39:08:76:53:6e:5d:00:92:f0:c1:ea:4b:
ce:ff:b3:21:6b:00:1e:62:61:1b:f2:01:08:62:a2:97:14:6f:
0c:e1:60:71:65:8b:1d:22:b5:89:b0:8e:c3:43:42:58:42:d2:
19:e4:93:23:17:a1:29:a1:1a:b9:f9:66:a5:4b:c8:9f:d8:a3:
92:59:17:d1:a2:4f:3b:8f:17:70:40:15:45:b3:9f:80:ab:be:
c5:5d:bf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:57 2024 by rpki-client on console-fra.rpki-client.org