Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/8dXMxgWwXgzDKfb2Jj5QznrvvPA.roa
File: 8dXMxgWwXgzDKfb2Jj5QznrvvPA.roa (raw, json)
Hash identifier: 8UkXYUGAS8Ynz4LvKfPOCdxVfwOHMMQ2p4KyR/GXlHs=
Subject key identifier: F1:D5:CC:C6:05:B0:5E:0C:C3:29:F6:F6:26:3E:50:CE:7A:EF:BC:F0
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 0188D4EAE4B18C9E8CF9B2103F106F8A0293
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/8dXMxgWwXgzDKfb2Jj5QznrvvPA.roa
Signing time: Mon 19 Jun 2023 18:29:03 +0000
ROA not before: Mon 19 Jun 2023 18:29:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12637
IP address blocks: 185.228.250.0/24 maxlen: 24
176.56.128.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d4:ea:e4:b1:8c:9e:8c:f9:b2:10:3f:10:6f:8a:02:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Jun 19 18:29:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1d5ccc605b05e0cc329f6f6263e50ce7aefbcf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:09:0d:28:13:f2:e2:eb:e9:eb:39:12:10:
32:b0:50:b3:4c:db:53:7b:e9:d9:50:95:46:f5:6b:
cf:90:7e:fe:2b:12:e7:85:1f:c2:a7:39:19:b5:09:
70:ab:13:e8:bc:2a:5b:5e:fa:a0:de:cc:eb:a4:8e:
5e:c8:29:6f:5c:15:f2:45:85:3e:1a:80:4a:7d:40:
fa:77:de:34:cd:71:a9:76:29:4b:8e:82:f8:22:79:
59:f0:8d:e5:59:49:6d:b0:38:ef:13:8f:d7:5f:7a:
16:b2:39:d2:18:88:ef:b5:57:34:e5:46:38:e1:6e:
f9:38:c9:52:32:f7:b3:69:f3:9f:9d:39:cd:f0:52:
48:47:1b:8d:4f:04:4f:df:18:5f:8b:bd:be:a8:d0:
c6:33:67:a4:b1:b5:2a:40:2d:17:57:40:34:26:cc:
98:d5:11:42:2a:a3:88:d0:02:58:09:d6:ad:5f:08:
dc:c1:67:69:f3:b0:63:16:09:9a:72:e4:19:5b:76:
1c:1a:67:b2:dc:fa:26:6b:f0:b6:dd:cb:43:61:27:
19:ec:7b:78:bb:83:12:1b:b5:92:76:c4:15:f6:52:
58:25:8e:94:d9:42:67:81:2f:70:8f:00:2c:30:c5:
5a:39:62:da:7a:29:a9:9d:78:d4:2a:5a:20:25:5a:
59:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D5:CC:C6:05:B0:5E:0C:C3:29:F6:F6:26:3E:50:CE:7A:EF:BC:F0
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/8dXMxgWwXgzDKfb2Jj5QznrvvPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.128.0/21
185.228.250.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:60:54:5a:c6:d6:e1:97:6d:16:83:75:04:a4:56:23:ae:1f:
6a:df:d2:36:03:28:4a:6d:b7:7f:eb:b4:e9:73:ae:56:0f:14:
21:31:81:12:f7:0f:6d:f9:31:5d:ff:99:66:b1:0d:12:1c:57:
88:b5:58:0c:49:08:7f:4b:22:c6:c3:9c:8b:54:e0:2c:17:c4:
bd:ca:f6:21:a5:78:2c:38:8d:03:04:5f:8c:75:2a:d9:95:77:
6f:d3:f8:14:27:fc:e7:e1:21:30:89:59:2a:4d:1f:bd:72:3c:
54:b0:22:86:60:9e:0d:2e:85:a2:2d:62:4a:43:d2:7a:e3:88:
59:9c:57:5d:8c:2e:12:8e:3a:4c:38:a6:d9:00:ac:d5:c1:a4:
a8:76:d9:5c:a7:1d:0e:e3:41:fa:27:db:09:d7:d7:57:74:24:
f6:dd:7c:a0:51:b0:ee:44:45:9f:8f:ad:26:e3:fe:fa:88:0b:
af:6d:fd:66:cb:96:5d:f4:56:df:9e:bc:83:a8:88:94:10:37:
a6:68:a1:25:c9:c6:19:ee:21:17:76:de:02:d9:c1:fd:5c:aa:
8b:99:82:af:ff:bc:4e:98:74:2d:70:60:ca:8e:ef:85:22:fc:
cc:9c:6c:50:50:c6:8a:63:bf:40:b0:fc:23:ce:ad:5c:9e:c7:
59:9e:74:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:35 2024 by rpki-client on console-ams.rpki-client.org