Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/04a7og12PJFYCYSxqcQsVxpgShg.roa
File: 04a7og12PJFYCYSxqcQsVxpgShg.roa (raw, json)
Hash identifier: 6nWW+Rq11AnhoTxgBVb82+v48yLzc8jqfjsmsI9/uBE=
Subject key identifier: D3:86:BB:A2:0D:76:3C:91:58:09:84:B1:A9:C4:2C:57:1A:60:4A:18
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 0185E32789A98512F8C9B18690F8C69BDCEC
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/04a7og12PJFYCYSxqcQsVxpgShg.roa
Signing time: Tue 24 Jan 2023 09:41:37 +0000
ROA not before: Tue 24 Jan 2023 09:41:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209689
IP address blocks: 212.87.210.0/23 maxlen: 24
212.87.208.0/23 maxlen: 24
185.174.149.0/24 maxlen: 24
185.174.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:27:89:a9:85:12:f8:c9:b1:86:90:f8:c6:9b:dc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Jan 24 09:41:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d386bba20d763c91580984b1a9c42c571a604a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:2e:18:65:68:30:f7:31:19:cb:da:18:76:
f6:ca:1e:3f:a5:05:46:54:0d:b4:04:2d:35:3d:4a:
63:07:20:fb:eb:c2:2c:ba:ff:e6:5a:28:c2:ab:63:
49:7c:3f:91:91:82:62:f8:64:ec:73:51:f5:91:28:
e1:55:a5:da:cf:81:02:52:68:d0:17:ad:df:0d:03:
81:4e:6c:5c:39:5d:12:a6:24:b9:8d:3e:48:93:4c:
9e:7a:51:b3:12:20:2a:a4:cd:8c:5f:c1:ea:55:af:
6a:60:24:2c:31:6d:f9:bd:61:83:e3:dc:3c:de:84:
fd:2b:86:99:88:da:4c:58:27:d3:ef:27:80:e2:f7:
2d:c7:c1:58:13:80:96:4b:10:1c:02:eb:4b:45:49:
5f:36:e2:df:e8:d7:43:3b:7f:78:e1:0a:26:4b:70:
7d:3b:86:b6:2f:59:42:fe:0f:0d:76:db:fe:23:53:
bd:ce:e7:75:e4:be:c8:20:85:9d:69:6f:5d:7c:92:
43:70:65:64:88:13:bd:6b:38:cc:2b:b0:94:2f:83:
ff:5d:62:48:8f:c9:88:15:dc:0b:bf:d6:7b:a0:35:
f7:08:e3:9b:40:de:bd:f6:d6:eb:d8:d1:77:0f:db:
0c:1b:78:9c:25:42:dd:67:63:66:17:d5:4f:cb:e6:
4f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:86:BB:A2:0D:76:3C:91:58:09:84:B1:A9:C4:2C:57:1A:60:4A:18
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/04a7og12PJFYCYSxqcQsVxpgShg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.148.0/23
212.87.208.0/22
Signature Algorithm: sha256WithRSAEncryption
63:e5:a1:44:f9:07:da:94:b2:c5:e0:22:b3:4b:07:90:42:c4:
7d:09:59:07:d9:2e:80:17:42:b6:49:37:20:a8:4c:4c:a9:6d:
9e:37:97:ee:64:de:c8:19:42:37:4a:16:73:c2:52:91:a8:b6:
a3:6c:f9:4f:94:ad:4a:a1:a3:23:39:7f:ca:fe:3e:2f:65:cd:
7e:49:bf:31:d0:dc:93:24:57:68:bf:f0:89:f1:68:83:fb:a6:
8a:04:9a:72:d3:cc:0d:06:77:50:cd:5f:d3:70:ed:0d:c3:16:
fe:63:53:25:85:7e:4f:89:b1:72:13:b8:ca:15:58:2e:97:bf:
90:d1:3a:ea:47:11:de:05:01:d2:a7:96:b6:f7:40:b2:ba:36:
79:b9:1f:fb:c5:85:40:5a:c3:ad:06:be:ad:41:c3:0f:5e:f9:
9a:21:6a:72:d4:a8:42:07:21:67:74:a4:b0:e8:c1:23:d2:2b:
04:ba:28:d2:b0:12:ff:20:ee:32:c7:e0:54:b3:45:8d:5f:51:
27:89:73:78:3d:c9:19:7f:50:f0:a4:46:c1:80:83:6f:73:83:
c5:c6:48:b9:48:51:11:57:09:dd:96:48:e7:eb:4f:40:b7:53:
69:7b:43:b6:b8:71:11:70:b5:49:c4:90:91:98:d6:0d:8e:59:
c3:ce:91:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:18 2023 by rpki-client on console-ams.rpki-client.org