Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/G-0HBa9yrd22UNtf2RlRfn5GA78.roa
File: G-0HBa9yrd22UNtf2RlRfn5GA78.roa (raw, json)
Hash identifier: fg2UgTWh6bcHPGT2BBxnFfSx4wL2NxBxm3CO8PPzW10=
Subject key identifier: 1B:ED:07:05:AF:72:AD:DD:B6:50:DB:5F:D9:19:51:7E:7E:46:03:BF
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 018A5FC7323F51788FB39A1669251EFC445D
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/G-0HBa9yrd22UNtf2RlRfn5GA78.roa
Signing time: Mon 04 Sep 2023 10:40:04 +0000
ROA not before: Mon 04 Sep 2023 10:40:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206776
IP address blocks: 185.196.222.0/24 maxlen: 24
185.165.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:c7:32:3f:51:78:8f:b3:9a:16:69:25:1e:fc:44:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Sep 4 10:40:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bed0705af72adddb650db5fd919517e7e4603bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:78:3e:b9:99:78:0d:f7:ac:cd:94:cc:02:e4:
c7:26:1a:b9:c1:f0:0e:e4:8c:50:a8:4d:1c:a0:25:
75:58:db:6c:d4:a7:3f:6e:aa:81:1c:54:58:40:f4:
50:67:84:c0:4c:e3:9a:10:1b:c1:59:a9:54:55:f7:
2d:e4:40:d2:a4:2e:b7:70:6d:eb:38:6a:6d:e0:bb:
16:df:c6:6f:6b:ed:c8:80:0e:7b:25:5c:ea:ea:1e:
a1:df:c2:d4:51:7b:c7:4d:74:05:e4:30:dd:3f:32:
98:66:ce:21:6d:24:de:3b:a4:5d:dc:dc:5a:99:3a:
ff:7c:2c:91:51:6d:32:a0:f9:a9:ad:b3:50:7a:b3:
23:53:d3:43:58:7a:9a:d7:48:91:97:08:4d:26:d1:
ed:2e:e2:07:e2:e4:77:fa:e5:bc:06:30:1d:f7:79:
4e:41:77:52:a5:50:e0:e4:da:90:24:91:0d:f0:6c:
69:5e:bd:be:da:ee:1e:3c:99:a0:f8:db:70:fd:48:
6c:27:ca:31:b3:0a:59:d5:6c:af:f6:d2:d0:0e:76:
8d:cc:fb:a7:3c:68:96:c9:91:fc:c9:c0:bb:bb:6d:
16:cd:36:b0:17:5e:d0:23:8f:9a:57:a8:7e:46:56:
65:5b:0d:6e:91:ce:58:c7:97:37:2d:a6:8c:8f:47:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:ED:07:05:AF:72:AD:DD:B6:50:DB:5F:D9:19:51:7E:7E:46:03:BF
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/G-0HBa9yrd22UNtf2RlRfn5GA78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.154.0/24
185.196.222.0/24
Signature Algorithm: sha256WithRSAEncryption
12:da:13:68:db:6a:f5:ee:43:25:ab:ab:df:37:77:39:55:c4:
57:01:28:af:aa:f4:38:e4:89:69:26:1d:42:1f:ca:5e:80:c5:
0f:95:12:7b:b4:e0:15:d3:81:4d:8e:5b:03:e0:16:4b:0b:dd:
52:42:7b:bd:57:26:71:c9:d5:86:64:c8:59:94:de:fa:73:74:
1b:ff:17:88:98:76:7d:d5:e3:e2:5c:07:00:0f:20:4f:0d:77:
21:68:b9:1b:24:b1:17:4c:48:86:40:b5:8d:d1:bd:d0:1f:19:
d3:b4:af:78:7d:b6:94:34:14:c8:1d:5a:7d:85:ad:05:6b:7a:
67:74:ce:16:09:d6:78:77:7b:09:1e:2e:c1:b1:14:9e:3b:bd:
fc:d8:6a:4a:ac:7d:c1:fe:13:e2:2b:5c:b4:8e:e0:1f:e9:8c:
1d:c4:ac:04:83:02:09:2f:92:2b:03:00:06:4d:cf:c6:b0:6a:
55:d3:4c:e4:38:44:56:4e:2d:43:e9:5f:44:8b:78:33:c7:fc:
a7:8d:c7:b5:17:66:75:8d:18:a0:67:a5:59:8a:6d:03:a2:c7:
a0:6e:6d:a3:f6:3c:ad:35:cf:fd:ee:a9:c0:1b:0e:b2:3f:a3:
4f:63:24:b1:14:8f:54:95:25:71:a8:22:e2:b9:6f:1d:ef:54:
ad:24:6b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:50 2024 by rpki-client on console-ams.rpki-client.org