Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/OICw_RJesrZQnf3cf5zSWdRmL9o.roa
File: OICw_RJesrZQnf3cf5zSWdRmL9o.roa (raw, json)
Hash identifier: hc/26yGUyDjQ4i6s5BWL524HCkEqPwGAD3SFDcRnPWE=
Subject key identifier: 38:80:B0:FD:12:5E:B2:B6:50:9D:FD:DC:7F:9C:D2:59:D4:66:2F:DA
Certificate issuer: /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Certificate serial: 01856EC21F4117BA28B89F982B6F2FF4923D
Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/OICw_RJesrZQnf3cf5zSWdRmL9o.roa
Signing time: Sun 01 Jan 2023 19:14:53 +0000
ROA not before: Sun 01 Jan 2023 19:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.117.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:1f:41:17:ba:28:b8:9f:98:2b:6f:2f:f4:92:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Validity
Not Before: Jan 1 19:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3880b0fd125eb2b6509dfddc7f9cd259d4662fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:83:7d:5c:a3:af:d6:cc:17:77:17:79:a6:4c:
19:64:10:25:44:0a:af:41:26:3a:5e:81:55:e2:79:
ab:cc:0c:7d:1e:9e:e8:f0:36:f3:23:b2:c9:10:67:
ac:3d:c6:b1:59:f1:f2:16:d6:ca:2c:ec:fe:fa:b0:
8c:1a:2a:b3:ed:4d:18:58:da:0e:30:93:aa:40:06:
ad:a0:94:4a:cf:d2:7e:6e:79:ee:51:bb:39:3f:c2:
08:ad:4c:2d:4d:3c:48:a3:e8:d2:9e:24:17:6a:57:
0d:ff:77:f1:9f:3c:b9:89:63:31:5d:dc:a1:03:e6:
fb:ad:c2:4d:a5:1a:c9:c6:c4:e6:6d:a9:67:3b:b6:
44:4c:f2:52:98:b7:ee:bf:39:90:99:c4:50:a2:ef:
fb:8b:98:d2:b4:c7:b2:b6:df:8e:ba:c7:5e:7d:d2:
77:99:3d:64:bd:55:e8:a6:a6:77:ac:b1:c5:86:d4:
49:48:26:05:2d:a3:aa:b8:3a:01:01:db:85:ba:a0:
de:8f:22:70:7c:3e:8a:82:36:18:cb:09:96:17:a6:
6d:94:24:fc:f4:a4:c3:d0:15:0a:36:cb:70:03:95:
ff:ac:65:8f:b6:c6:9f:38:30:1b:4a:d6:c3:4c:b8:
c7:3b:18:f5:41:f5:a1:15:aa:2d:c0:d9:08:6d:ef:
6c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:80:B0:FD:12:5E:B2:B6:50:9D:FD:DC:7F:9C:D2:59:D4:66:2F:DA
X509v3 Authority Key Identifier:
keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/OICw_RJesrZQnf3cf5zSWdRmL9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.225.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ec:bd:ca:7c:1a:76:25:a3:d4:e9:dd:b2:06:f7:12:68:17:
33:26:16:19:c2:37:62:76:57:38:9f:f6:a7:cd:36:1e:aa:54:
55:22:6f:c6:cb:20:3e:99:99:59:ff:fd:84:31:9c:cf:2d:80:
ad:fd:06:2f:f1:04:aa:c4:0d:ea:35:c9:b8:5e:67:27:5b:e1:
79:2f:41:59:84:d2:93:59:cf:dd:7a:b1:84:13:ba:3b:d2:34:
c4:be:ce:0b:ba:2a:3c:0d:9f:9a:a4:a0:bb:5d:3b:ad:bb:45:
e3:03:2e:d8:8d:5f:01:81:ae:a0:e3:14:6c:3a:e5:bc:29:5e:
7b:a9:8f:b7:ba:d2:a0:de:37:51:f8:a6:91:07:67:f0:59:02:
11:e8:d9:0d:7b:4b:99:4f:02:a0:1c:ea:84:62:21:a1:59:a7:
30:0b:51:18:61:d2:8d:dd:0e:47:d6:8e:59:11:12:4b:d2:ff:
c5:06:47:3c:cb:f4:6d:7d:bd:c4:68:9e:13:ec:ce:51:8d:8a:
d2:85:3d:ad:75:35:1c:e2:eb:f2:c0:46:38:fa:33:63:88:4f:
01:02:68:f7:f2:61:4d:1f:01:ab:58:5b:3f:2f:c2:cd:4b:80:
f8:7b:b1:ff:f1:d7:04:52:7f:09:86:88:d9:65:7f:38:9b:cc:
29:ed:6a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:47 2024 by rpki-client on console-fra.rpki-client.org