Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/9ihljGb8yx4v-F3k1wLZ8sPDFvY.roa
File: 9ihljGb8yx4v-F3k1wLZ8sPDFvY.roa (raw, json)
Hash identifier: GYWW+OotIsYFVoPRI2lwn1LiwSGUYXzuNifzOoC2/sE=
Subject key identifier: F6:28:65:8C:66:FC:CB:1E:2F:F8:5D:E4:D7:02:D9:F2:C3:C3:16:F6
Certificate issuer: /CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Certificate serial: 01894B03443F258E3A370843E34262B2A8AD
Authority key identifier: 43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/9ihljGb8yx4v-F3k1wLZ8sPDFvY.roa
Signing time: Wed 12 Jul 2023 16:50:52 +0000
ROA not before: Wed 12 Jul 2023 16:50:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201946
IP address blocks: 185.49.8.0/24 maxlen: 24
185.49.9.0/24 maxlen: 24
185.49.8.0/22 maxlen: 22
185.49.10.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4b:03:44:3f:25:8e:3a:37:08:43:e3:42:62:b2:a8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Validity
Not Before: Jul 12 16:50:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f628658c66fccb1e2ff85de4d702d9f2c3c316f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1f:ce:4e:6f:07:d3:32:da:29:21:b1:62:1c:
4d:1b:6e:65:77:ec:2a:89:e6:c5:c3:8c:91:02:e8:
6f:ad:f6:fe:48:97:b3:a0:ea:60:9c:93:ca:f7:19:
95:85:33:a1:20:2d:ef:68:87:29:f8:22:07:e5:ca:
44:de:28:03:d1:3c:09:90:26:86:56:c1:90:54:55:
e8:7c:86:17:b6:5d:9a:4f:ad:81:d9:d1:e7:d3:8d:
3b:07:37:45:b4:b5:63:65:fd:76:06:56:63:d9:f9:
d1:a1:46:a0:24:cc:8e:2e:b7:ee:ea:b6:4d:d8:69:
1f:ca:20:6e:e5:69:1d:b0:b8:70:df:5e:02:6d:62:
59:02:43:7f:d4:d4:96:e0:9d:ff:a2:c8:ab:31:5c:
76:e4:cd:ab:a3:a3:56:e0:0b:05:ca:14:5d:19:8c:
65:f0:ac:a3:66:e3:06:39:b1:db:9e:43:d0:c7:8b:
d4:07:f5:d2:19:b8:b5:b8:34:fb:43:9a:23:7e:d0:
70:ee:e6:fd:c4:c6:1a:e9:c9:2a:ce:29:9c:90:f1:
67:a3:0b:5e:c1:11:d3:50:aa:c8:f1:c8:e4:a0:90:
15:70:29:f5:9f:25:60:bf:3f:08:fc:87:59:7f:b7:
c9:f1:d0:28:74:4c:af:2e:fd:1d:3b:fc:d6:01:3e:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:28:65:8C:66:FC:CB:1E:2F:F8:5D:E4:D7:02:D9:F2:C3:C3:16:F6
X509v3 Authority Key Identifier:
keyid:43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/9ihljGb8yx4v-F3k1wLZ8sPDFvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.8.0/22
Signature Algorithm: sha256WithRSAEncryption
83:be:96:97:00:5a:38:f7:97:9f:c8:e9:a8:5c:23:b6:ee:ea:
72:44:9b:55:22:86:46:93:3a:f5:f2:44:e9:fc:42:9c:ad:d6:
4b:c4:60:56:c5:bd:a0:bb:09:c6:d7:98:70:db:c7:a0:c2:33:
8a:d3:b3:46:44:f8:99:52:f6:f0:00:c9:ab:4f:23:d3:4f:32:
9e:ba:78:aa:9a:c8:06:bf:0e:a5:b1:cc:0a:01:f3:e6:0f:a4:
5a:77:7a:f3:50:68:b8:4b:e7:0a:00:a4:c9:0a:e0:9a:98:3c:
59:e2:cc:71:41:0b:79:00:eb:95:6d:5d:85:3e:ab:69:78:7a:
89:60:28:10:f1:1a:99:9b:8d:25:88:2b:b5:0b:0f:f3:54:09:
be:6a:06:6e:31:e2:b4:cd:0c:58:de:68:58:3f:c0:d4:21:4f:
2b:24:65:38:6f:50:9a:68:90:47:60:fc:fb:7a:75:e1:97:7a:
94:34:ed:52:0f:a2:9b:ad:33:87:c1:9b:1f:17:d7:a6:fe:a5:
8d:da:62:07:30:47:6a:be:d3:19:91:8a:58:e6:11:ef:80:d2:
ce:e0:89:fa:40:18:da:b2:7a:35:94:e9:96:9c:34:7f:f4:c8:
d9:c5:4c:4a:25:72:19:cd:26:8f:61:12:5f:19:39:0d:b5:0e:
35:10:5e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:07 2024 by rpki-client on console-ams.rpki-client.org