Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UBcf3qqhlfPlBsl9OKtAs0W8sf4.roa
File: UBcf3qqhlfPlBsl9OKtAs0W8sf4.roa (raw, json)
Hash identifier: nshWdf4qXe/PcGuAAHoqZY3WvuhpKDwhQcCYU6acblw=
Subject key identifier: 50:17:1F:DE:AA:A1:95:F3:E5:06:C9:7D:38:AB:40:B3:45:BC:B1:FE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01863AC2C896944746E4531AD8C1B77107CD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UBcf3qqhlfPlBsl9OKtAs0W8sf4.roa
Signing time: Fri 10 Feb 2023 09:58:09 +0000
ROA not before: Fri 10 Feb 2023 09:58:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208882
IP address blocks: 185.222.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:c2:c8:96:94:47:46:e4:53:1a:d8:c1:b7:71:07:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 10 09:58:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50171fdeaaa195f3e506c97d38ab40b345bcb1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:70:f7:a0:43:ac:53:8c:51:dc:86:b6:ce:75:
c3:27:39:da:0f:8c:ec:90:69:4f:7c:1c:14:f2:ee:
ab:b2:d4:77:26:86:93:8c:fc:3a:b3:08:7b:35:cf:
9c:d9:35:de:da:23:c1:d2:06:2b:aa:50:5e:e0:a3:
57:41:60:86:02:96:91:5a:fc:9e:2e:b2:35:55:33:
84:cb:f1:ad:d7:cc:b3:39:68:64:dc:88:3a:c9:92:
99:c7:70:58:a5:6e:d2:b6:5a:c9:e4:8c:5a:56:6a:
d4:c2:6d:7b:fa:85:89:0b:ff:0b:3a:8f:c5:de:07:
2e:8e:af:e9:db:5e:dc:cd:f6:61:2c:23:30:69:dd:
71:aa:ed:93:0b:8b:9d:5b:e5:ab:46:59:5d:b9:30:
8f:91:b8:26:8c:a9:6d:1e:ba:f5:0d:ec:5e:67:59:
a3:3d:03:2a:5a:b9:b9:f2:5a:b4:5d:bb:95:2f:8b:
b1:9c:1d:1a:11:c7:bf:12:2d:7f:e3:83:44:9e:53:
d3:5a:0f:49:27:84:21:81:67:71:02:60:83:7f:73:
4d:1c:68:46:51:b2:0f:bb:d2:28:87:ab:f7:b9:9f:
c1:b6:46:96:40:fa:94:ad:71:cf:09:88:89:d8:a4:
ec:c1:0b:59:eb:03:7b:f7:99:fd:40:f6:b2:df:f0:
af:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:17:1F:DE:AA:A1:95:F3:E5:06:C9:7D:38:AB:40:B3:45:BC:B1:FE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UBcf3qqhlfPlBsl9OKtAs0W8sf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.163.0/24
Signature Algorithm: sha256WithRSAEncryption
65:1b:82:a1:2b:06:fd:81:06:38:87:5f:42:34:0d:e8:a5:4f:
5c:e7:cb:aa:76:a3:3f:8c:2c:9b:e0:fc:fc:39:ae:97:c7:36:
7d:24:1e:5f:1a:c5:3e:fe:00:fb:ca:8a:75:c5:db:8a:30:53:
0e:f8:eb:5a:44:28:58:c0:1a:60:f1:f3:b9:5b:1c:24:09:11:
f9:81:48:2e:8c:49:f9:3b:83:54:e4:fd:e8:8a:d2:4d:76:41:
57:2a:42:ed:04:12:a2:3b:4a:65:89:59:20:11:27:5a:2b:35:
19:37:96:cd:d5:b6:3d:59:1b:73:56:51:ad:f3:5f:1c:8a:0c:
b2:61:d5:fb:d2:3b:87:de:a4:58:ba:a6:38:c5:f6:7d:20:82:
f0:11:e1:02:05:6d:3b:89:81:ee:b4:31:ed:2a:89:2d:38:00:
a0:42:e9:5d:9a:27:7b:28:a8:c2:37:fe:22:17:6c:64:1a:fe:
95:f3:49:10:97:cf:51:23:7a:86:18:9d:ba:48:5d:59:8d:a9:
9a:c8:28:fa:3e:09:e0:0f:1c:29:9b:10:64:ee:6f:03:dd:2f:
29:ea:7b:63:2e:89:86:3c:9c:b8:a2:79:f1:8e:e8:4d:e7:9c:
b4:d9:ea:0e:d9:25:3f:3a:36:82:c1:fb:1e:ef:73:82:a0:27:
84:7e:f3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-ams.rpki-client.org