Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/1-Blqw-J9oE-5-9oF3A-hql7icWE.roa
File: 1-Blqw-J9oE-5-9oF3A-hql7icWE.roa (raw, json)
Hash identifier: QOMpXqT9xsT8E8u5KbQ8WetI27ELHtnDJrhXfgs/wAM=
Subject key identifier: F8:19:6A:C3:E2:7D:A0:4F:B9:FB:DA:05:DC:0F:A1:AA:5E:E2:71:61
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 0185714C2BD1230CB7E58EFC7DFD3F3C251E
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/1-Blqw-J9oE-5-9oF3A-hql7icWE.roa
Signing time: Mon 02 Jan 2023 07:04:55 +0000
ROA not before: Mon 02 Jan 2023 07:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34927
IP address blocks: 185.44.83.0/24 maxlen: 24
2a12:f340::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 Jun 2023 20:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:2b:d1:23:0c:b7:e5:8e:fc:7d:fd:3f:3c:25:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Jan 2 07:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8196ac3e27da04fb9fbda05dc0fa1aa5ee27161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8d:43:b5:b0:22:38:84:9c:4b:c1:c1:17:b0:
8b:cc:10:7e:cc:16:3d:a3:37:14:dd:47:b1:d5:f7:
e8:02:c4:34:2c:d1:34:0d:bb:51:49:b7:1e:90:9d:
36:fd:96:64:17:36:c4:11:7c:3c:c5:23:74:0a:b3:
35:84:e7:10:31:65:f3:52:ab:c4:e7:0e:31:04:b9:
56:6c:80:92:8d:bc:f5:cb:ff:7c:36:b3:a4:d7:ba:
13:75:9d:42:0e:84:6c:43:bd:85:b3:f1:a1:f9:7a:
4c:90:40:bc:da:7f:5f:0f:c2:2d:c4:4d:c6:c5:00:
6f:f3:b3:fb:c3:75:06:b9:01:50:9d:0c:67:f7:c9:
3f:6a:93:f7:ea:00:94:bc:49:73:44:a9:bc:db:7f:
f8:05:60:99:51:4c:7f:0b:36:e5:cf:10:53:b0:ed:
e3:fc:10:90:8f:00:56:10:24:5f:cb:f9:a3:9e:04:
a9:a2:b0:7b:65:b7:94:c7:f3:d0:ea:0c:6e:16:88:
2a:65:fc:70:c4:cb:9c:33:2c:27:8a:60:c0:01:a0:
63:34:58:86:e2:11:b1:77:e2:4b:f0:64:35:e4:ed:
b8:99:a1:49:9f:4b:79:c6:d7:61:11:b6:6e:b8:a5:
5d:3e:21:c9:41:79:26:be:90:1c:2a:46:f8:3d:dd:
45:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:19:6A:C3:E2:7D:A0:4F:B9:FB:DA:05:DC:0F:A1:AA:5E:E2:71:61
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/1-Blqw-J9oE-5-9oF3A-hql7icWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.83.0/24
IPv6:
2a12:f340::/48
Signature Algorithm: sha256WithRSAEncryption
41:f5:7d:23:36:6a:3c:72:57:1f:c7:5e:01:36:f0:f6:17:4e:
a7:bb:b7:b1:25:39:95:97:bb:84:98:fe:d8:68:05:c3:d3:db:
cc:d0:6a:7b:3e:52:f5:a7:8e:76:c3:1d:6d:37:5b:db:dd:46:
db:4d:8e:69:7c:d8:c7:b8:68:cd:41:71:88:88:f8:c7:ab:3a:
4f:8f:6b:42:82:5a:ff:cc:c8:cb:dd:38:9b:21:2a:cc:e1:fb:
55:89:42:74:e5:f0:52:74:b2:be:6c:9c:f3:d5:f9:fd:cc:2b:
51:99:dd:ce:8e:80:30:ec:2d:e4:16:e1:93:5c:63:2d:ed:e5:
4e:9c:91:ef:03:27:92:10:fc:33:8b:08:18:6a:ae:b5:e4:0a:
dc:ee:94:b7:de:40:2a:9c:23:20:30:76:b7:89:b0:0b:39:ee:
10:3f:1f:bd:73:f2:59:ab:d4:3e:5e:84:c2:86:45:b1:5d:5c:
bc:ee:fe:bc:a9:b9:1b:35:49:1d:da:79:95:1e:91:95:e6:03:
db:2d:5d:ed:0e:70:89:ec:c9:38:66:35:02:0d:0a:c3:4b:2b:
32:8d:3c:80:61:e9:91:dc:03:5f:2b:7a:b1:d9:ce:14:02:7e:
1e:c0:7b:40:85:15:24:1b:93:00:47:40:74:f0:c7:3c:d8:b8:
0f:96:b6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:35 2024 by rpki-client on console-ams.rpki-client.org