Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uk5lCpzmaNb3jAwJm1I4j4uY-mE.roa
File: uk5lCpzmaNb3jAwJm1I4j4uY-mE.roa (raw, json)
Hash identifier: waCFbdn+wDEV7woSmSpAVQ/aREnq8UVPKvYlU0ah5po=
Subject key identifier: BA:4E:65:0A:9C:E6:68:D6:F7:8C:0C:09:9B:52:38:8F:8B:98:FA:61
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81DBA2C1570C4A18C572F243F0505D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uk5lCpzmaNb3jAwJm1I4j4uY-mE.roa
Signing time: Sun 01 Jan 2023 13:25:05 +0000
ROA not before: Sun 01 Jan 2023 13:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26506
IP address blocks: 185.207.13.0/24 maxlen: 24
2a00:1728:2c::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:db:a2:c1:57:0c:4a:18:c5:72:f2:43:f0:50:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba4e650a9ce668d6f78c0c099b52388f8b98fa61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:9f:7f:44:f4:f1:2c:13:89:92:4a:10:d6:
47:c0:52:32:a6:d5:8a:a5:82:2f:fe:95:b0:d0:1c:
c6:7c:28:bf:12:e8:a6:f3:28:bd:31:0c:c5:56:2f:
9e:ee:33:d5:05:99:b0:c8:5e:3d:40:d7:80:76:f5:
51:c1:6b:87:b8:2f:6f:65:06:bf:85:11:19:19:47:
92:4b:77:29:44:1a:0c:2d:55:b6:ad:7f:79:13:5f:
85:fb:d7:fc:4f:9e:84:51:42:84:9d:69:56:d9:9d:
29:4b:40:35:6b:46:91:af:74:67:f2:e2:c0:e5:4e:
76:e0:d1:0e:f6:56:2d:5f:93:1f:f2:3f:f2:23:07:
90:61:9d:cf:bf:65:cf:69:6a:83:a6:6a:bf:0e:50:
5e:c2:0e:0f:01:e9:23:45:52:1c:0a:73:b3:9a:11:
af:09:fa:94:de:e8:11:9a:d1:31:47:86:42:74:68:
35:3b:fb:f2:7a:36:48:c8:e1:e1:ac:08:dc:15:02:
44:51:cb:83:89:89:35:16:6e:52:f6:57:f3:b4:95:
0e:6e:d2:05:06:a7:30:2d:26:11:41:5c:e8:0d:51:
6d:5f:36:10:3a:be:0c:88:8d:b7:bb:41:f4:f6:0f:
53:32:24:d4:77:2e:96:6e:d5:71:af:6d:6c:d5:64:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4E:65:0A:9C:E6:68:D6:F7:8C:0C:09:9B:52:38:8F:8B:98:FA:61
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uk5lCpzmaNb3jAwJm1I4j4uY-mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.13.0/24
IPv6:
2a00:1728:2c::/48
Signature Algorithm: sha256WithRSAEncryption
a9:4c:cd:2c:be:89:9a:6d:ac:f6:96:af:46:de:14:3a:74:8b:
3e:7e:5c:ff:b2:8e:f4:9b:14:96:2b:6f:bd:26:39:30:bb:70:
23:00:98:de:61:c7:66:e5:62:08:02:6a:c9:09:e7:22:d4:1a:
f2:60:39:c7:20:85:f2:d3:b2:b2:97:19:a2:7f:dc:40:2b:72:
e7:2b:51:21:63:95:1f:d4:e0:22:ce:db:99:3a:7b:ae:c5:a0:
b2:64:10:3f:34:0a:ea:d9:c5:4f:4f:90:46:f7:78:4c:96:e3:
df:48:11:84:20:01:05:c6:84:c6:1c:a7:0c:66:7c:78:91:cc:
37:e6:2e:45:8d:32:7c:ec:b3:72:17:fe:bf:d1:3e:42:38:73:
e6:89:a7:6c:12:dc:3b:37:48:6b:1f:7f:96:7c:f5:f9:7a:a3:
40:6d:e9:c2:d0:a4:5b:f6:0b:bf:db:f9:56:14:8f:36:af:d2:
ff:69:65:db:33:2d:43:15:b6:43:0e:4f:05:a1:5f:76:e9:ee:
3f:4e:72:65:90:a2:56:26:b5:38:b5:5b:3f:e1:b6:73:dc:72:
17:bc:39:66:e9:54:87:9d:2e:00:de:57:c2:09:30:50:29:97:
8d:08:74:0f:44:a9:e9:6d:30:af:18:c8:5f:c9:f6:27:a5:a2:
60:e0:07:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:49 2024 by rpki-client on console-fra.rpki-client.org