Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/Avsum3QfwMxCeUyV2BuHGIIVeeg.roa
File: Avsum3QfwMxCeUyV2BuHGIIVeeg.roa (raw, json)
Hash identifier: RrMMF+SFbXX+w1SOA4CQoaJ0rnfAit7x54vMSMkJAaE=
Subject key identifier: 02:FB:2E:9B:74:1F:C0:CC:42:79:4C:95:D8:1B:87:18:82:15:79:E8
Certificate issuer: /CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
Certificate serial: 01856E6FB984AEEEDCC6B64DA9E3B6B9B31F
Authority key identifier: EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/Avsum3QfwMxCeUyV2BuHGIIVeeg.roa
Signing time: Sun 01 Jan 2023 17:44:53 +0000
ROA not before: Sun 01 Jan 2023 17:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 65011
IP address blocks: 185.3.30.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:b9:84:ae:ee:dc:c6:b6:4d:a9:e3:b6:b9:b3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
Validity
Not Before: Jan 1 17:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02fb2e9b741fc0cc42794c95d81b8718821579e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cd:21:b9:62:04:6e:cc:f1:c9:92:73:26:63:
7b:11:04:dc:bd:42:09:be:35:80:4c:e7:b9:a5:44:
4a:77:ee:ca:51:a2:00:4b:a3:c9:ce:04:f7:68:e4:
00:42:88:1e:eb:d0:c4:bd:14:87:93:2e:70:3f:4d:
14:25:89:c2:02:3e:5e:8a:2d:26:d2:0f:7f:be:1a:
55:9c:4a:8c:35:48:3d:07:26:26:09:94:7e:04:57:
99:6b:d3:71:89:79:12:0e:e5:54:ff:5e:8d:50:8f:
75:0e:5f:16:7a:00:12:14:29:64:70:17:7b:ae:30:
d8:62:85:24:30:2a:22:31:ad:fa:59:bd:51:ed:88:
d3:33:a2:f6:64:36:85:dc:b8:73:09:eb:b6:f6:bf:
59:1b:d7:80:f1:20:46:94:bd:72:58:c3:56:73:1f:
74:83:d3:d9:89:36:4c:0c:f8:4a:07:47:9e:52:96:
d2:8d:db:4d:1b:bd:31:c8:58:95:70:c7:82:9a:4e:
cc:50:2d:8f:3b:a8:78:7d:8b:71:60:50:4b:10:70:
c0:e6:cb:ce:d6:2c:f0:ac:25:15:ba:17:22:ce:d8:
5b:f2:b5:67:fe:2e:6e:70:a9:86:4f:19:d5:1e:aa:
d2:fe:a0:9c:cc:47:6b:18:30:9f:45:f7:7a:92:73:
00:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FB:2E:9B:74:1F:C0:CC:42:79:4C:95:D8:1B:87:18:82:15:79:E8
X509v3 Authority Key Identifier:
keyid:EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/Avsum3QfwMxCeUyV2BuHGIIVeeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.30.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:5e:2a:6c:50:c4:1e:4d:b6:3e:fa:b4:64:e3:31:60:82:b8:
b3:78:19:57:f1:96:d8:b9:71:92:8a:16:4f:2c:8c:d4:99:b3:
14:68:b2:84:f0:4e:7d:6e:5a:94:88:32:ba:c8:6a:5e:c9:b7:
e3:c4:c4:da:3b:e0:dc:ff:94:b6:d8:cf:2f:08:1d:b7:9a:dd:
a2:35:70:e9:a8:69:19:ee:72:d9:9b:72:17:39:29:d0:aa:1a:
2b:e9:ce:1d:f1:95:ff:52:d4:4c:53:2e:38:ea:72:23:49:b8:
c2:20:be:bd:0f:ee:5d:47:2a:2e:eb:8a:08:22:c0:9e:48:93:
ea:52:ec:84:c4:f8:12:ad:0a:50:e7:b2:2a:5c:db:7d:c4:e7:
3e:c2:3c:16:31:cd:61:a6:95:64:0a:d7:ea:85:86:9f:50:2d:
4f:e5:42:e5:e9:9b:09:39:cb:ec:f3:47:02:34:5d:1f:e9:fc:
93:5a:00:d6:83:45:bf:64:86:96:7b:49:a9:df:f0:e3:6c:d9:
a0:d1:06:f9:0b:39:a8:d0:3f:bb:8c:d3:b5:5c:a0:24:10:e5:
a9:fa:15:9b:37:d1:6f:a1:95:55:b2:6a:2b:6a:61:53:e3:4b:
88:6f:58:8b:1a:6b:23:b7:01:7a:6e:aa:c2:56:04:ac:33:99:
6a:7b:36:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:53 2024 by rpki-client on console-ams.rpki-client.org