Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/X_-0d3RIaMXylX1h_XJcJssgWVQ.roa
File: X_-0d3RIaMXylX1h_XJcJssgWVQ.roa (raw, json)
Hash identifier: /Lk3HBdv/ZpRBpyCuLBvaV+Dc0YiFO1k7cZiNab+HoA=
Subject key identifier: 5F:FF:B4:77:74:48:68:C5:F2:95:7D:61:FD:72:5C:26:CB:20:59:54
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187987696DD30090D8E799ED27E21B63386
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/X_-0d3RIaMXylX1h_XJcJssgWVQ.roa
Signing time: Wed 19 Apr 2023 07:42:01 +0000
ROA not before: Wed 19 Apr 2023 07:42:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46308
IP address blocks: 185.252.179.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:98:76:96:dd:30:09:0d:8e:79:9e:d2:7e:21:b6:33:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 19 07:42:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fffb477744868c5f2957d61fd725c26cb205954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bd:05:f3:78:49:86:c0:14:63:de:90:82:38:
be:10:37:1d:3e:33:7e:69:2e:1d:30:c6:c2:26:7e:
5a:9d:f1:7a:5e:b4:74:8f:74:1b:9f:69:66:b1:d5:
f7:bf:10:ff:8d:1e:cf:f3:e6:15:f4:25:5a:c4:8d:
46:06:5d:51:09:ab:89:23:d4:01:18:19:46:e9:72:
9e:94:b3:9d:85:e9:07:02:08:f0:c9:56:2d:ed:04:
bf:49:f2:6b:9c:7b:5a:f0:c0:0a:3a:f4:a5:7f:78:
93:7b:f1:e8:a2:70:a7:23:ed:3b:00:f3:b1:9b:ed:
35:15:b2:dc:47:90:ac:52:6c:be:2b:3a:19:f3:7f:
1f:6d:a4:11:1b:b1:55:59:86:1b:3a:ef:52:1a:0e:
9e:ae:12:b1:1e:04:a3:da:c3:08:35:21:eb:eb:db:
67:bb:2e:78:08:45:55:e9:d8:37:2b:2e:2c:c4:be:
64:22:e8:bd:bf:76:7a:28:19:27:38:97:56:11:d0:
87:87:90:99:31:20:7f:db:33:ae:ae:5b:04:e9:81:
da:e5:e7:7e:23:66:c0:a3:96:b9:aa:69:27:44:5b:
1a:0f:be:10:8e:e7:c0:a9:53:2a:c2:98:b9:27:35:
7c:8b:71:55:d4:fe:10:29:d3:6e:3a:35:53:60:6f:
06:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FF:B4:77:74:48:68:C5:F2:95:7D:61:FD:72:5C:26:CB:20:59:54
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/X_-0d3RIaMXylX1h_XJcJssgWVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.179.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:ff:23:d5:06:93:5b:60:4c:65:0e:4b:5c:e8:f4:9c:84:d2:
fe:8c:41:66:f4:2b:cb:d0:ab:3a:0d:60:d0:e9:0e:8f:da:05:
85:26:08:74:8d:ae:d1:d1:37:25:c1:c9:59:ef:e6:6d:25:52:
bc:b4:b7:c1:a0:a1:a7:66:c0:42:61:9e:96:13:80:ea:c6:b0:
48:5d:2e:03:3d:f5:0c:2e:83:f5:2d:33:c4:25:ac:90:35:07:
61:d6:c3:97:10:51:86:4a:cb:65:a4:5b:1b:bd:d2:fc:ee:09:
a2:f2:f9:a9:42:c3:6b:55:e2:d6:1d:e4:9e:97:4f:ab:b6:ed:
d8:a8:9d:64:e0:b3:39:63:d5:95:12:dd:7c:0e:18:06:6f:e5:
05:86:99:7d:66:eb:be:39:dd:66:01:89:fa:61:77:ad:21:35:
77:5f:ab:32:11:d9:a3:07:a5:62:6b:04:fc:d1:ad:74:85:e5:
13:4c:b5:69:b3:9f:a2:8d:8c:c9:b5:1f:eb:1c:2e:9d:84:2d:
35:7f:e9:d2:af:6e:d3:a7:a3:a6:22:bf:50:7b:e3:93:36:a3:
e3:2c:f5:75:e2:93:4b:ef:30:39:ac:2b:56:c0:0b:78:bc:6d:
71:e8:d4:43:f3:df:bc:40:70:8b:32:a8:72:4a:2c:da:ac:b2:
bb:da:c1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org