Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/n9CIqn0nmifZLbsJBy_gem_fpXQ.roa
File: n9CIqn0nmifZLbsJBy_gem_fpXQ.roa (raw, json)
Hash identifier: IQtlZfvDPgpbTlHMKg3knaJtLoJuNfjoEA6Ja6Fn6uU=
Subject key identifier: 9F:D0:88:AA:7D:27:9A:27:D9:2D:BB:09:07:2F:E0:7A:6F:DF:A5:74
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 01857195368F3A67B02A4D67932BE6FDDCCD
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/n9CIqn0nmifZLbsJBy_gem_fpXQ.roa
Signing time: Mon 02 Jan 2023 08:24:42 +0000
ROA not before: Mon 02 Jan 2023 08:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201679
IP address blocks: 185.64.132.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:36:8f:3a:67:b0:2a:4d:67:93:2b:e6:fd:dc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Jan 2 08:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fd088aa7d279a27d92dbb09072fe07a6fdfa574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2d:77:c9:ec:8a:37:90:9f:88:81:96:5b:f4:
f2:58:78:a6:fd:01:7a:c8:82:e7:93:25:eb:82:35:
3c:8a:f9:be:28:44:8b:25:e6:3e:f6:da:92:94:92:
c0:2b:4b:10:6a:a7:52:85:4c:e8:9d:4a:9d:70:84:
07:2a:df:ff:aa:81:20:fb:19:e2:2d:88:49:8c:f1:
c0:9c:7a:f6:38:fc:fc:3a:fb:25:54:56:ca:b6:85:
9a:47:47:5a:8b:18:2e:7a:95:5d:16:5e:4d:85:01:
91:52:0f:13:b7:6d:ce:47:3c:5b:8b:d7:09:87:b7:
1b:9d:59:97:9c:28:b8:d9:d6:07:8d:8a:cc:10:20:
96:38:7b:cc:e1:4f:8c:b9:6a:6b:f5:cf:2f:dc:d2:
a1:c7:2e:30:ee:4a:e2:5b:e5:84:4a:bf:de:55:ec:
6a:49:14:a2:55:1c:08:b2:26:79:c0:30:20:a7:05:
24:d5:e5:ef:73:58:d9:8b:d3:55:9c:f7:5e:56:25:
00:f9:fe:8d:4d:bd:a6:01:61:29:97:61:60:62:31:
6a:9a:ba:16:64:54:5f:d2:a7:a5:30:20:b6:a2:e1:
97:a9:5f:d3:46:dd:25:98:05:d5:21:cc:d4:1c:89:
f4:97:57:6d:5b:48:a8:c9:9f:4b:31:e2:5b:a2:83:
23:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D0:88:AA:7D:27:9A:27:D9:2D:BB:09:07:2F:E0:7A:6F:DF:A5:74
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/n9CIqn0nmifZLbsJBy_gem_fpXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.132.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:d8:d4:2d:c5:c5:8f:86:fb:8b:11:7a:1d:7d:25:d6:a2:e2:
b6:3b:dd:de:4b:86:46:04:91:76:73:6f:b7:08:a9:c1:f4:03:
33:ee:0a:6f:39:98:2c:bb:3d:c5:18:ae:71:85:34:ea:b9:db:
7d:f5:51:26:53:06:f7:04:67:a3:e1:d1:85:1c:61:6e:d8:84:
cf:42:35:c9:37:27:92:d3:d0:59:39:49:af:30:e7:d5:03:6a:
8e:72:65:78:2c:71:e1:53:cb:a3:cc:6a:9c:bb:98:c4:07:c9:
42:27:17:34:0b:e9:82:d3:26:28:a2:e2:87:7d:fd:91:fe:f9:
19:1e:a0:04:84:ff:01:bc:7f:eb:d5:f7:ff:9b:68:43:05:d8:
83:21:a7:25:dd:99:92:f1:85:bd:0d:0f:89:5c:38:81:e3:2c:
57:6f:68:56:69:e4:90:ce:74:00:41:5b:5f:01:c4:0d:59:b6:
1e:29:90:77:6f:93:ee:18:7b:91:3e:b5:7b:aa:76:9a:66:7e:
d7:9f:9b:d0:08:09:41:1e:17:47:e1:6b:ed:71:b4:0e:08:37:
aa:4c:57:6d:00:ac:02:87:eb:41:35:4f:21:66:a8:c1:7d:08:
3b:02:6e:56:93:67:6e:e3:72:cb:6b:5c:e1:4b:2b:3d:83:b1:
16:fd:af:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:09 2024 by rpki-client on console-ams.rpki-client.org