Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/oIJAoJg44oesfqD1CY1XF2pkLLI.roa
File: oIJAoJg44oesfqD1CY1XF2pkLLI.roa (raw, json)
Hash identifier: L40yZYC+18QT7S3Fytzd9OD2uEgywkn4SAbfbBgelX4=
Subject key identifier: A0:82:40:A0:98:38:E2:87:AC:7E:A0:F5:09:8D:57:17:6A:64:2C:B2
Certificate issuer: /CN=a1d9b35bc3e9f2493c64d06f5b2d4a99c5f251e9
Certificate serial: 018572034A073F4B24914DCBCA0732464837
Authority key identifier: A1:D9:B3:5B:C3:E9:F2:49:3C:64:D0:6F:5B:2D:4A:99:C5:F2:51:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/oIJAoJg44oesfqD1CY1XF2pkLLI.roa
Signing time: Mon 02 Jan 2023 10:24:56 +0000
ROA not before: Mon 02 Jan 2023 10:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39934
IP address blocks: 185.224.4.0/24 maxlen: 24
185.224.5.0/24 maxlen: 24
185.224.7.0/24 maxlen: 24
185.224.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:4a:07:3f:4b:24:91:4d:cb:ca:07:32:46:48:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d9b35bc3e9f2493c64d06f5b2d4a99c5f251e9
Validity
Not Before: Jan 2 10:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a08240a09838e287ac7ea0f5098d57176a642cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dd:2b:57:80:c4:64:d2:46:c2:b6:de:86:65:
eb:88:1e:9d:d0:3f:de:40:d3:b1:9b:1a:85:35:51:
60:be:01:81:c9:d9:14:a4:73:8b:3d:23:b4:da:1f:
86:66:99:db:bc:b5:d2:ee:b7:7a:9e:83:29:ce:70:
f6:ee:04:cc:c6:82:ff:f5:1d:c3:a9:0a:b5:a5:0d:
39:36:46:ca:b5:be:87:78:80:a5:9f:98:d4:72:8b:
88:49:b5:72:98:83:37:16:90:d3:1d:40:b6:da:db:
07:21:fb:be:7a:90:c2:ff:64:da:46:79:ed:8d:c1:
4b:14:b5:ac:36:e9:25:d3:a3:18:64:bd:c0:39:75:
45:9f:66:63:52:e2:bf:1b:8f:46:9a:b9:59:59:32:
4a:ae:28:cc:be:82:75:33:a2:aa:9e:dd:3b:b3:a8:
c5:31:fe:b2:bd:87:fb:7f:95:79:54:41:d5:f2:fd:
aa:92:34:0d:ad:fa:80:99:dd:cb:19:57:2b:c9:aa:
a1:53:ff:76:a4:4d:cc:a6:ce:9e:04:26:6a:a2:80:
a2:46:e6:72:a8:22:cb:6d:02:88:77:9f:47:92:c4:
de:13:3d:fd:85:be:37:f1:37:87:32:74:db:ce:1a:
e1:7b:96:c1:1e:27:cb:4d:5c:7c:b9:4f:c8:1f:1c:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:82:40:A0:98:38:E2:87:AC:7E:A0:F5:09:8D:57:17:6A:64:2C:B2
X509v3 Authority Key Identifier:
keyid:A1:D9:B3:5B:C3:E9:F2:49:3C:64:D0:6F:5B:2D:4A:99:C5:F2:51:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/oIJAoJg44oesfqD1CY1XF2pkLLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.4.0/22
Signature Algorithm: sha256WithRSAEncryption
d5:77:d2:1e:34:84:06:59:65:6b:53:91:7f:8d:fb:e7:cf:20:
7a:85:36:9f:95:8c:b5:54:97:78:53:01:19:15:05:c1:2c:fc:
23:9c:51:0d:39:df:ea:5a:a6:ff:39:87:8c:3a:14:dc:9f:c9:
b0:e6:8e:cb:6c:31:16:3f:1a:c4:33:2c:ed:f1:ec:0e:84:04:
5e:66:a7:70:0f:83:66:34:98:a6:84:39:25:fe:3c:8b:c8:bd:
28:1d:87:10:f1:81:6f:17:57:b8:74:db:1e:f3:d4:70:dd:5f:
43:06:88:6b:0a:94:8c:be:11:e3:91:ad:e1:ca:98:8e:75:e7:
b7:0c:c2:ec:f3:62:fa:39:e9:5f:4a:5b:ae:34:63:eb:63:3c:
0a:cd:7d:fa:b0:2a:eb:52:94:9d:d7:4f:c9:45:3a:b0:3c:ab:
d8:58:32:44:43:14:76:51:8e:5c:73:3a:ef:f5:53:da:9d:a4:
eb:d6:9d:f1:1b:34:50:4d:3f:88:65:a0:25:ea:1d:15:a6:b9:
e2:a2:fe:ff:ef:04:2c:b7:43:cf:59:e1:0d:c4:41:53:e2:f4:
f6:3f:c2:26:83:94:8b:66:bb:23:99:1e:71:ed:56:24:7d:54:
e3:41:b8:1a:41:e8:0a:33:13:29:d3:44:4c:84:de:d0:90:e6:
96:51:97:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:44 2024 by rpki-client on console-ams.rpki-client.org