Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/4BMUt3qkUKI2JsyEE4Z0db4_ew0.roa
File: 4BMUt3qkUKI2JsyEE4Z0db4_ew0.roa (raw, json)
Hash identifier: Qmx82hqzsOCu9fatuyhi4/tvD8mYV0dRU65ZYJrLSW4=
Subject key identifier: E0:13:14:B7:7A:A4:50:A2:36:26:CC:84:13:86:74:75:BE:3F:7B:0D
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 01857169B2A7EA1AF9ACB7A99D3472D7064C
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/4BMUt3qkUKI2JsyEE4Z0db4_ew0.roa
Signing time: Mon 02 Jan 2023 07:37:10 +0000
ROA not before: Mon 02 Jan 2023 07:37:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25145
IP address blocks: 185.22.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:b2:a7:ea:1a:f9:ac:b7:a9:9d:34:72:d7:06:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Jan 2 07:37:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e01314b77aa450a23626cc8413867475be3f7b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:92:b1:c7:64:26:96:89:f9:6a:fb:2d:bd:
42:38:52:7e:8b:a1:3e:47:36:03:b5:51:2d:f5:42:
db:7a:dd:7e:92:ac:bd:54:cd:0e:2f:3a:9f:7e:fd:
ed:99:87:a8:5c:4b:d8:af:ea:06:53:db:bd:cb:9b:
b0:9c:89:ee:d2:58:64:bb:9d:47:8d:f2:92:bb:43:
7b:bd:93:5f:d9:ee:f1:b2:ef:6e:4e:8c:08:9c:f0:
35:87:66:1d:42:0c:e5:e5:42:88:45:82:78:af:c7:
76:87:65:7b:ba:e9:33:d2:04:6c:61:ef:ba:1a:4b:
54:ac:12:28:0c:bb:5b:f1:1c:50:56:ba:aa:aa:ff:
45:cb:89:1d:08:e3:eb:5d:a5:3d:13:2d:75:50:a0:
f8:8b:eb:45:54:a2:5b:30:d9:1b:09:4b:7e:19:fb:
6c:b1:d7:d7:77:21:ab:8e:24:f3:32:96:40:74:c6:
f3:4d:b3:bc:2c:79:4c:0c:54:24:04:8f:69:dc:4b:
57:c3:84:6b:90:77:1f:2a:14:11:1a:9f:87:35:cc:
10:fb:64:f6:53:26:77:9b:6f:c5:3a:9f:4d:d8:2a:
3d:68:59:0c:87:31:b2:3e:59:cd:ad:5e:c2:69:9f:
43:8f:84:67:fa:f2:d0:7e:24:7b:ab:d9:3e:30:2e:
f3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:13:14:B7:7A:A4:50:A2:36:26:CC:84:13:86:74:75:BE:3F:7B:0D
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/4BMUt3qkUKI2JsyEE4Z0db4_ew0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.230.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:f5:c4:63:c5:68:13:d4:c1:28:c0:1f:73:36:cf:10:71:cf:
16:5a:9d:91:b9:35:83:57:7f:9c:e9:3f:1d:b0:1d:b5:79:d1:
35:30:37:d2:9d:90:98:ee:5d:ac:28:2e:a1:8c:3d:6f:6a:06:
55:3a:86:0b:6b:bc:ec:32:80:4d:5e:98:00:7b:50:1c:ff:f2:
c1:f5:ee:b3:a7:07:c6:f9:6c:fe:ee:2a:e1:1b:1b:58:39:14:
e0:1e:cd:47:57:d0:96:91:d8:24:d8:ea:31:6e:79:67:a4:0e:
6d:8c:04:b4:c6:b4:a1:36:ae:54:8f:4b:5a:81:21:c3:cf:4d:
84:27:5e:6a:16:43:be:2b:60:5e:30:d1:bc:62:ce:3a:a4:7f:
c9:cf:2d:c1:9b:6a:51:17:d3:6a:d0:7b:e0:c7:15:5e:c6:4d:
8e:b1:88:97:c9:8c:12:ed:09:01:47:86:82:86:61:7a:ac:32:
5e:0e:8a:78:50:f2:7c:12:b7:b7:31:d7:20:96:e9:cf:44:cf:
7f:f3:f6:e9:79:b6:46:3a:b6:d0:ae:a8:d9:5e:a3:7a:46:e9:
40:b0:9d:b3:87:c0:8b:37:1f:9d:15:c7:7d:20:f6:b9:ab:9e:
54:e9:ba:44:14:34:84:2e:95:db:cf:5b:ef:5e:1a:5e:bb:4a:
66:9a:24:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:50 2024 by rpki-client on console-fra.rpki-client.org