Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/1Q54bCxNDEhujvMVCyZSsKoj9Ls.roa
File: 1Q54bCxNDEhujvMVCyZSsKoj9Ls.roa (raw, json)
Hash identifier: lh8zu76vrpXI2CBVEFAvuKjaAo74mGuhYkZJHQ+t6M0=
Subject key identifier: D5:0E:78:6C:2C:4D:0C:48:6E:8E:F3:15:0B:26:52:B0:AA:23:F4:BB
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 01857246EA3277F28174A822378E714EFD8E
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/1Q54bCxNDEhujvMVCyZSsKoj9Ls.roa
Signing time: Mon 02 Jan 2023 11:38:48 +0000
ROA not before: Mon 02 Jan 2023 11:38:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47176
IP address blocks: 185.20.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:ea:32:77:f2:81:74:a8:22:37:8e:71:4e:fd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Jan 2 11:38:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d50e786c2c4d0c486e8ef3150b2652b0aa23f4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:a2:8f:1e:32:03:1b:e0:49:92:98:3b:1d:
00:a0:ab:20:0f:1e:cb:08:95:77:0e:df:c5:55:01:
8a:c5:51:5f:11:b1:ee:d8:d9:cd:2b:5d:68:f3:de:
96:4d:41:41:d1:22:a3:13:5b:47:3b:79:d2:a6:95:
4e:17:c7:d6:7d:dc:08:f3:42:2c:47:fd:65:ae:de:
17:89:59:a9:56:de:cd:ce:2c:57:de:f2:57:e1:ab:
1b:6d:c2:96:f4:24:af:4c:ba:f8:72:66:75:45:df:
b3:17:9e:45:73:18:1d:48:fb:19:9b:de:c9:a7:f4:
f7:a9:cd:8f:77:be:83:f8:2b:55:5f:d5:84:7f:13:
3a:57:da:60:97:d6:17:4f:48:37:11:df:4a:40:c3:
04:b7:12:63:67:08:49:d2:bf:e2:76:d8:4c:a4:40:
81:a8:77:56:fc:46:cb:a9:33:bf:8a:1a:a0:52:1d:
39:ec:bc:f0:8c:a6:c5:ba:07:f3:46:a4:fa:40:6e:
df:6d:ec:79:41:cf:6d:ec:49:b5:b4:8d:8d:1c:4c:
97:63:0b:94:82:b9:bf:71:d4:40:57:9d:c3:01:36:
9f:e7:5e:48:2d:b4:0c:30:f4:69:de:36:93:c3:7c:
f7:f0:37:a1:9b:7a:36:ac:a5:97:39:2e:51:b7:e7:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0E:78:6C:2C:4D:0C:48:6E:8E:F3:15:0B:26:52:B0:AA:23:F4:BB
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/1Q54bCxNDEhujvMVCyZSsKoj9Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.233.0/24
Signature Algorithm: sha256WithRSAEncryption
86:66:be:31:43:d4:59:40:1a:b9:51:0c:98:0d:57:ca:00:23:
80:df:aa:29:40:bc:c8:28:64:25:a2:28:1e:8d:37:bc:8d:ed:
55:e2:1d:f9:21:e7:af:d3:5e:45:03:08:79:35:e1:fd:da:ac:
47:19:6f:af:87:e9:d9:5d:ef:e0:7d:7a:5b:f8:ac:ef:f5:b4:
18:bb:92:71:0a:37:00:6e:8a:0c:b4:05:f9:1e:13:94:82:0e:
b3:ba:b1:53:12:40:a2:1c:1c:dc:b2:f5:d8:1f:08:bc:62:2a:
df:03:35:5c:b8:95:46:a9:3b:38:12:3a:8b:6a:17:2c:17:29:
bf:80:fa:f4:ac:b8:18:d2:2d:fd:44:bb:e4:bf:31:c0:48:90:
44:1f:b4:2a:dd:c0:6d:30:e5:8c:16:7c:9c:72:8b:8e:ae:b7:
4d:fb:64:a7:97:c3:1f:f9:38:1d:2c:19:19:30:41:99:e6:d3:
35:14:c8:66:9e:a1:d7:13:81:af:5e:2e:21:ee:9b:33:a8:05:
c6:e7:c8:8f:94:67:aa:14:8f:ac:f6:3d:f2:5b:12:5a:94:c6:
10:63:31:d9:06:c1:09:28:a4:1d:13:fa:e9:64:09:88:02:e9:
8e:03:87:86:c9:6d:37:d6:fa:fd:f2:49:e9:08:6d:a2:e9:9e:
e4:e4:e4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:43 2024 by rpki-client on console-ams.rpki-client.org