Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/9f9Nnp_Lw7Tw22ek40DY1BA5owo.roa
File: 9f9Nnp_Lw7Tw22ek40DY1BA5owo.roa (raw, json)
Hash identifier: q6CfXw8Lo9B2h5DUXPIgYSxucG/wRa5DIQMEplhOZu0=
Subject key identifier: F5:FF:4D:9E:9F:CB:C3:B4:F0:DB:67:A4:E3:40:D8:D4:10:39:A3:0A
Certificate issuer: /CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Certificate serial: 0185728C8D7634F4A3EC39F95A14852F05D2
Authority key identifier: DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/9f9Nnp_Lw7Tw22ek40DY1BA5owo.roa
Signing time: Mon 02 Jan 2023 12:54:51 +0000
ROA not before: Mon 02 Jan 2023 12:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8538
IP address blocks: 192.162.104.0/22 maxlen: 22
195.8.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:8d:76:34:f4:a3:ec:39:f9:5a:14:85:2f:05:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Validity
Not Before: Jan 2 12:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5ff4d9e9fcbc3b4f0db67a4e340d8d41039a30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:24:2c:46:bc:1a:fb:40:e4:76:cc:46:b5:4c:
0c:a8:95:61:26:1a:eb:38:2c:62:25:6a:da:c8:d3:
6b:6e:ca:14:ad:9b:41:14:b5:18:74:f3:f0:08:4a:
5d:f8:64:eb:b9:42:90:f7:68:78:6c:c8:ec:77:5b:
96:41:1e:87:b7:28:28:3d:7b:17:99:3f:42:8c:cd:
80:1b:93:80:72:98:29:a5:31:09:86:f4:7d:80:46:
2a:28:63:cd:ae:ed:ae:1d:f6:e0:60:12:2e:79:52:
70:5f:4b:2d:5d:8b:d4:c9:a1:6b:d3:b8:7a:66:c1:
d7:ed:57:1e:7d:14:07:bf:6c:56:1b:35:2c:52:c1:
fe:28:8a:9c:96:f5:c7:f6:dd:5c:43:85:0f:c4:91:
fc:65:91:4a:7a:a2:d3:f1:01:33:78:90:d4:3b:10:
31:6b:45:93:2d:47:f2:d1:eb:f0:4a:68:6f:45:3e:
01:bd:17:87:7e:a8:58:6a:d7:f1:f4:5e:5b:b2:0e:
e6:ca:29:df:e8:6d:f3:44:d0:25:32:cb:a5:db:63:
cf:8a:d6:3c:7e:5f:e6:da:d8:27:ac:df:49:a5:d6:
70:76:4d:6b:1b:e5:03:2c:f1:b1:f4:c1:90:68:c5:
cc:3d:4d:0f:2c:94:af:43:37:f6:7c:f9:4f:f4:e8:
94:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FF:4D:9E:9F:CB:C3:B4:F0:DB:67:A4:E3:40:D8:D4:10:39:A3:0A
X509v3 Authority Key Identifier:
keyid:DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/9f9Nnp_Lw7Tw22ek40DY1BA5owo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.104.0/22
195.8.115.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e0:2d:56:82:41:fb:50:49:48:54:1d:be:6d:cd:fd:44:78:
7e:ab:70:1f:de:72:cd:89:7b:93:96:3f:ab:5f:99:3f:3e:22:
9a:58:a4:16:5c:fc:d6:9a:b1:da:f2:8d:c9:30:57:e2:4a:fe:
2a:cb:a5:88:b2:39:8c:4c:f8:3d:5a:6a:29:e7:bb:91:7d:60:
84:a7:8b:ee:cf:43:f9:94:7c:a0:c4:1a:b2:3c:a1:3f:4e:4d:
a2:4d:11:3e:97:94:88:e4:38:18:0f:9f:96:60:e4:01:5d:72:
35:b5:9a:c5:ec:ec:fd:59:5a:82:27:01:81:5a:cc:e4:7e:50:
d8:b4:e6:85:70:f7:55:5c:8a:7f:3d:89:c5:2f:dd:e0:c3:d0:
41:24:67:08:9c:f2:bd:5d:b0:68:1c:9e:c2:c3:06:17:6b:45:
25:89:d7:52:e3:23:9d:6c:6c:af:36:ba:91:8c:d9:ba:f3:f2:
9d:56:c4:8c:1e:29:e0:f0:6c:99:c1:6b:34:a9:49:64:7a:db:
a2:1e:34:51:54:0b:d3:3d:a3:cb:1b:ab:50:52:4d:0d:15:3d:
6d:49:83:ea:72:8f:d9:e7:cb:dc:a0:50:f1:c6:cb:45:f4:51:
97:0d:d4:83:f5:47:a0:25:0c:03:1f:c3:26:f4:d7:66:f4:aa:
25:3d:a5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:21 2024 by rpki-client on console-ams.rpki-client.org