Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/1-4ef1M4Nuv1qEtShGhzJ_9lodVw.roa
File: 1-4ef1M4Nuv1qEtShGhzJ_9lodVw.roa (raw, json)
Hash identifier: mDsXwDIBr85OXEFkFid+zjrMlv9ov5xgcgDoU74zJfM=
Subject key identifier: FB:87:9F:D4:CE:0D:BA:FD:6A:12:D4:A1:1A:1C:C9:FF:D9:68:75:5C
Certificate issuer: /CN=073a6d3de5c125c1fe8b5fbe89584656e5861a2d
Certificate serial: 018C25C6E714D56966BFA31AFD0566622618
Authority key identifier: 07:3A:6D:3D:E5:C1:25:C1:FE:8B:5F:BE:89:58:46:56:E5:86:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzptPeXBJcH-i1--iVhGVuWGGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/1-4ef1M4Nuv1qEtShGhzJ_9lodVw.roa
Signing time: Fri 01 Dec 2023 14:27:21 +0000
ROA not before: Fri 01 Dec 2023 14:27:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35625
IP address blocks: 185.117.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:25:c6:e7:14:d5:69:66:bf:a3:1a:fd:05:66:62:26:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073a6d3de5c125c1fe8b5fbe89584656e5861a2d
Validity
Not Before: Dec 1 14:27:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb879fd4ce0dbafd6a12d4a11a1cc9ffd968755c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:25:59:98:38:1d:a6:de:b7:05:fa:b9:4f:
e5:ab:64:42:d3:c3:fc:d0:89:66:db:cd:8a:5e:4b:
b0:96:f3:6a:a4:71:06:17:b9:63:34:57:1f:11:8b:
03:fa:76:70:a9:04:81:57:c0:30:af:5a:e7:d1:5e:
56:f2:08:68:9e:17:01:34:d8:0f:19:1a:4a:06:91:
c7:00:20:04:4d:cb:5e:04:8b:c5:09:0f:d8:62:75:
ae:20:ee:a2:89:6b:c6:30:6a:a4:bf:b9:90:13:c7:
e1:0e:05:11:f3:1b:d2:46:f9:c2:8f:d3:67:3e:92:
20:f2:01:37:9e:85:97:59:86:8f:ec:26:d8:56:3d:
59:85:b6:dd:d8:02:90:bc:cd:b8:9e:ff:ed:cb:c3:
59:48:92:56:b2:d8:09:b5:89:67:1e:09:ec:14:56:
8f:b3:08:f3:cd:7d:f6:7a:a9:2a:7a:74:21:bb:d8:
3b:fc:66:d8:29:a8:67:38:f0:f1:9d:96:97:51:54:
56:f1:a9:65:c1:92:7c:7d:17:8f:a0:8c:a8:49:44:
1a:7a:ee:5e:e0:e4:04:f6:12:3e:9a:31:9e:f3:a0:
dd:74:1b:7b:24:f3:8a:d6:2e:c3:e2:4d:41:07:63:
f2:7a:2d:9a:35:51:f5:3a:10:e6:53:4c:76:cd:d3:
bf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:87:9F:D4:CE:0D:BA:FD:6A:12:D4:A1:1A:1C:C9:FF:D9:68:75:5C
X509v3 Authority Key Identifier:
keyid:07:3A:6D:3D:E5:C1:25:C1:FE:8B:5F:BE:89:58:46:56:E5:86:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzptPeXBJcH-i1--iVhGVuWGGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/1-4ef1M4Nuv1qEtShGhzJ_9lodVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/BzptPeXBJcH-i1--iVhGVuWGGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.18.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b2:82:d2:ed:b5:94:d3:fb:83:2d:59:dd:f8:00:f9:50:2c:
f0:39:7d:05:9b:a0:4e:7d:12:9c:db:46:4f:a6:15:7f:8b:8d:
00:aa:68:92:7d:eb:3d:21:9c:41:e3:cc:ab:9b:54:f2:cb:d9:
7e:88:fb:7d:8c:49:72:d8:a4:7a:23:b7:e8:c2:64:2b:7f:18:
b0:97:1f:a4:0b:4a:0e:9f:d1:ab:6b:3b:14:03:c7:ca:c4:d6:
c8:61:2c:42:db:e7:45:55:a9:af:84:ad:11:1f:fc:36:ba:23:
70:17:9b:c7:5d:38:ce:ac:0b:98:59:5c:87:14:8c:f0:e8:dd:
12:2d:c8:3e:21:0f:2a:67:a2:bd:39:7b:37:08:12:53:e4:6f:
c2:f8:8a:49:b0:36:78:9d:a9:08:f4:7d:02:7f:01:0e:f1:c5:
67:0d:31:8a:de:c9:16:7c:0f:78:e8:b2:95:3c:7b:ab:0e:c1:
9d:5d:1f:7c:82:05:16:d8:76:21:3e:95:c3:af:57:fb:7e:57:
5c:cc:5d:b4:ed:e6:ac:63:2d:07:b6:c5:41:92:c4:a1:50:3e:
97:d1:d0:24:42:57:18:7c:77:07:ac:97:03:11:1f:5b:ac:43:
ba:95:55:66:c2:98:ee:f1:6c:72:26:5c:05:c6:cf:9c:3a:45:
72:29:97:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 15:31:53 2023 by rpki-client on console-ams.rpki-client.org