Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/9xFpEOJutKtoOUPU1hvqujl8Zzc.roa
File: 9xFpEOJutKtoOUPU1hvqujl8Zzc.roa (raw, json)
Hash identifier: N/0KsNAc+Lw9L9Tn26rG+XDoSXIGo0hkSDhF82NnLKM=
Subject key identifier: F7:11:69:10:E2:6E:B4:AB:68:39:43:D4:D6:1B:EA:BA:39:7C:67:37
Certificate issuer: /CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Certificate serial: 0187B3BB2E1F6D26242B4EC9535366EADA0A
Authority key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/9xFpEOJutKtoOUPU1hvqujl8Zzc.roa
Signing time: Mon 24 Apr 2023 14:46:41 +0000
ROA not before: Mon 24 Apr 2023 14:46:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 185.135.190.0/26 maxlen: 26
185.135.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b3:bb:2e:1f:6d:26:24:2b:4e:c9:53:53:66:ea:da:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Validity
Not Before: Apr 24 14:46:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7116910e26eb4ab683943d4d61beaba397c6737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:97:bf:f7:1f:f8:56:61:75:1f:ea:6d:66:
9e:b7:03:0a:c0:b9:54:b3:9f:43:bb:25:e6:05:73:
d5:96:1d:86:02:43:77:36:39:27:88:b6:68:b0:7d:
98:41:c7:e5:20:46:3f:a0:d0:ef:dc:32:1b:47:ab:
33:49:e4:a0:d2:14:0a:55:2b:94:6c:d6:02:e6:db:
a9:4a:a5:1f:7e:63:78:0f:dd:85:05:8f:46:fc:7f:
4a:72:53:80:71:47:34:2d:79:54:b2:3f:bd:35:71:
29:07:4c:68:68:46:e4:bf:c6:07:91:3a:e2:79:f5:
b1:aa:24:92:c2:44:07:35:69:72:d4:08:2f:cc:5e:
39:2c:cc:6c:58:0e:24:9a:30:ad:34:0f:4a:f5:a1:
d7:48:0b:87:e5:9c:18:02:83:cf:f2:87:ee:b4:3b:
db:c2:ff:c9:03:fa:84:84:d5:b0:60:9d:ac:38:91:
8e:3a:14:90:01:e6:0b:4a:a8:c6:0d:f2:56:e8:0c:
19:c9:b5:ff:5f:83:b5:45:52:c9:33:dd:5e:21:af:
c2:56:3a:a8:03:83:2d:7c:9d:9d:38:5e:c6:03:4a:
f6:bf:a8:e1:bd:ec:04:b3:19:2c:d3:b2:d4:97:f0:
f5:d6:88:d0:97:c9:af:28:7b:25:be:1a:14:e8:ee:
6a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:11:69:10:E2:6E:B4:AB:68:39:43:D4:D6:1B:EA:BA:39:7C:67:37
X509v3 Authority Key Identifier:
keyid:4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/9xFpEOJutKtoOUPU1hvqujl8Zzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.190.0/24
Signature Algorithm: sha256WithRSAEncryption
20:65:71:28:86:a5:7f:f2:53:b3:8a:25:1b:c6:0f:6b:6e:fb:
04:d6:88:cf:fd:2a:ed:8e:8c:01:71:91:29:63:9e:56:8b:43:
28:be:5a:18:46:45:3f:62:10:4e:69:8b:db:9f:3d:68:93:f3:
81:8f:6d:f4:14:34:ff:67:5c:d4:22:8b:1e:59:ac:e9:83:be:
49:61:ce:69:00:7d:6a:47:17:28:53:0f:f3:d3:70:11:6c:3e:
da:ab:3e:20:6f:aa:af:35:33:15:be:1c:01:5d:70:7a:a8:d5:
d5:47:05:7e:6d:5d:91:0e:88:48:d9:4e:cd:90:e0:99:ae:8e:
6e:2b:36:4b:69:7b:af:a2:c2:e4:e7:a6:45:70:a7:d6:40:63:
6b:73:ec:3a:3b:88:60:41:af:da:18:0a:9e:58:25:71:e9:07:
73:3a:6d:2e:1c:af:2d:06:7d:a8:21:42:69:70:63:bc:6e:05:
73:71:88:b4:92:6e:a6:f2:67:9a:a6:b9:fd:22:99:04:e5:e8:
b6:2c:e8:9e:51:e1:1f:71:08:b4:39:8e:ad:28:23:1a:45:a6:
8f:e2:ed:3d:7f:c4:29:71:13:af:f9:b4:23:6d:94:3a:ac:39:
e5:b2:11:da:77:1e:a1:81:cc:96:11:a1:59:7a:f2:21:6e:25:
8d:da:78:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:35 2023 by rpki-client on console-fra.rpki-client.org