Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/9cbDCyrELaM12JcmbMSoAuIvfWc.roa
File: 9cbDCyrELaM12JcmbMSoAuIvfWc.roa (raw, json)
Hash identifier: lMJ0/uC4TuQxED4ujTeWVl28Vw3hGicRyGiNfTFxt/M=
Subject key identifier: F5:C6:C3:0B:2A:C4:2D:A3:35:D8:97:26:6C:C4:A8:02:E2:2F:7D:67
Certificate issuer: /CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Certificate serial: 0187B3A534B4ECEA1247EEBA91669ABF61F1
Authority key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/9cbDCyrELaM12JcmbMSoAuIvfWc.roa
Signing time: Mon 24 Apr 2023 14:22:41 +0000
ROA not before: Mon 24 Apr 2023 14:22:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 286
IP address blocks: 185.135.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b3:a5:34:b4:ec:ea:12:47:ee:ba:91:66:9a:bf:61:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Validity
Not Before: Apr 24 14:22:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5c6c30b2ac42da335d897266cc4a802e22f7d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:59:64:75:ea:f5:1c:18:f9:b5:b8:36:59:78:
60:18:9e:b0:94:b6:a7:3a:cf:00:3a:37:22:af:eb:
31:88:8d:42:57:40:a0:ad:8d:cb:3c:0c:d7:e7:8a:
35:f6:0d:0a:b8:df:23:e2:74:fa:76:05:f2:42:8e:
c4:5c:2b:82:14:0f:b8:fa:3d:8a:cc:a7:7b:d5:e7:
3a:cb:11:2a:47:c6:fa:cb:75:27:c9:65:7d:82:6e:
ce:19:f2:b9:a6:b2:de:59:01:6e:f0:2e:06:11:04:
94:5e:e8:2b:e4:69:8a:32:c3:36:69:c5:33:35:5b:
23:81:b6:37:8b:99:c5:70:e8:c8:a2:dc:fe:c2:69:
11:37:99:af:4d:42:20:9d:6c:29:78:fb:71:52:94:
81:50:e5:41:8d:8f:3d:ea:7c:10:da:83:03:cb:e9:
b3:c9:73:4f:0f:c4:44:4d:ce:a8:d1:9c:4b:52:48:
da:41:13:20:dc:e4:28:7a:3d:82:7a:0e:24:4a:92:
50:df:fe:e3:35:07:3d:00:04:92:f4:50:b9:bb:8b:
49:c1:6a:58:6f:d9:07:14:06:7c:bc:92:80:8b:23:
51:3c:07:df:15:52:4c:65:9d:87:0e:a9:dc:fd:8f:
66:da:98:50:ed:74:c3:05:02:83:61:82:0f:4b:05:
f1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C6:C3:0B:2A:C4:2D:A3:35:D8:97:26:6C:C4:A8:02:E2:2F:7D:67
X509v3 Authority Key Identifier:
keyid:4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/9cbDCyrELaM12JcmbMSoAuIvfWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.190.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d5:c0:e5:7d:8d:bf:33:22:4a:17:c9:0c:73:d7:69:78:eb:
ae:39:22:e8:6a:27:e4:0b:c8:b5:2e:d3:3b:d3:85:53:f0:df:
87:15:62:43:3b:81:21:e9:88:bb:49:c2:f1:57:ad:e5:a6:2f:
9c:04:55:94:7e:5f:0c:30:4d:23:eb:63:ee:11:1f:ad:0f:37:
93:46:ff:00:72:65:11:4d:3c:62:ab:73:e0:b4:ae:9a:1b:95:
39:a4:e4:e0:1c:6c:5a:91:ba:eb:e9:ba:fb:99:9b:a5:f5:58:
3d:61:d6:09:fa:b4:be:58:55:48:e5:74:9a:77:ed:67:34:7d:
0d:81:c0:81:c7:af:76:43:f9:0f:8b:9f:98:be:87:5b:b4:ae:
5d:05:71:21:b4:00:6d:33:0d:a2:57:0e:0b:c8:f5:f0:7b:36:
bc:a0:61:9c:3f:50:d5:08:6c:d1:7b:62:3c:be:47:f4:99:6a:
8b:ac:eb:ef:14:38:82:fd:b0:08:3e:96:6e:1c:05:ee:6b:1c:
1e:f5:d2:66:7e:f2:74:98:e7:a2:f4:bd:97:f9:5d:97:e0:10:
c9:4d:63:72:dd:41:22:1f:74:b9:ce:67:31:a2:53:8b:06:e5:
a5:17:1e:34:01:42:86:cf:48:5e:3c:8e:27:a2:09:07:36:bb:
48:66:6c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:35 2023 by rpki-client on console-fra.rpki-client.org