Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/glZttXc1h7VeVg4KLwhZa4JBQH0.roa
File: glZttXc1h7VeVg4KLwhZa4JBQH0.roa (raw, json)
Hash identifier: 5uvOV+9/hZPkJtuJPY5N8zpa+qCVfMx5B5A2FjGJ0ko=
Subject key identifier: 82:56:6D:B5:77:35:87:B5:5E:56:0E:0A:2F:08:59:6B:82:41:40:7D
Certificate issuer: /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial: 0185A61C82EC1723540647A714313ADED258
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/glZttXc1h7VeVg4KLwhZa4JBQH0.roa
Signing time: Thu 12 Jan 2023 13:12:44 +0000
ROA not before: Thu 12 Jan 2023 13:12:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8648
IP address blocks: 185.105.253.0/24 maxlen: 24
185.105.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a6:1c:82:ec:17:23:54:06:47:a7:14:31:3a:de:d2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
Validity
Not Before: Jan 12 13:12:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82566db5773587b55e560e0a2f08596b8241407d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cf:94:c6:36:bf:b3:fa:3a:12:f6:f5:74:6f:
5c:c9:59:d3:89:73:50:a8:2c:eb:6f:be:47:0f:64:
56:2d:2d:6e:5d:26:e8:ce:93:29:a3:8f:31:ad:9f:
e7:e0:1f:3d:d7:c4:fa:26:9d:32:f8:14:6d:00:36:
a5:10:72:af:d5:a6:2f:22:40:46:83:cd:54:88:60:
bf:a4:5c:5b:57:76:43:89:8c:93:2a:c4:44:5e:87:
56:f9:5a:88:f8:a5:9b:be:67:a7:3d:9b:c5:39:44:
b5:8d:7a:a7:d6:ec:6b:69:bc:05:ca:f7:87:88:d7:
14:ae:a3:25:36:04:6a:3f:44:1b:02:09:e1:28:09:
3d:72:89:8f:1b:79:ab:7b:a3:04:e6:c9:ed:ca:9b:
a9:a2:20:16:5a:45:57:04:81:09:b5:07:af:02:11:
67:4b:47:47:1c:82:6e:5d:08:b0:24:12:3e:2b:98:
32:7f:68:bd:ca:4b:b5:b5:12:90:71:0c:16:b7:30:
95:83:c0:a1:4c:45:58:04:d4:fe:81:8e:d7:9f:34:
5d:ad:97:68:f7:7d:5e:a3:50:c3:68:f7:bd:6f:6c:
96:87:cd:25:93:af:e0:b6:62:03:ba:5d:d5:c9:6d:
53:90:88:0b:ea:f0:c5:45:bc:c5:bc:33:da:7a:3b:
ee:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:56:6D:B5:77:35:87:B5:5E:56:0E:0A:2F:08:59:6B:82:41:40:7D
X509v3 Authority Key Identifier:
keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/glZttXc1h7VeVg4KLwhZa4JBQH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.252.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:2f:a2:62:f2:ed:e2:db:d7:d1:61:84:d6:e4:8d:82:35:ed:
11:1f:0a:e8:71:e6:85:79:b4:29:83:1b:8c:c7:bd:01:54:c4:
3e:d4:5b:76:6c:90:80:ae:33:21:f8:7d:5a:b1:c9:cd:90:c4:
47:bb:87:9a:0a:ca:40:d2:e2:79:d3:d8:a1:14:38:96:23:05:
98:e2:14:b2:f9:3d:ab:b2:b4:20:95:b1:a8:c8:49:2f:6c:5a:
7b:bc:f2:0e:95:09:50:9b:92:3d:6d:1d:52:da:e0:db:35:12:
a2:38:9d:b0:f3:57:f0:15:0f:85:ca:04:a2:63:e4:0f:12:58:
c2:9b:ee:77:b9:87:ff:b0:59:62:57:aa:a8:22:3f:75:7b:12:
d5:da:fc:1d:d0:52:c7:4f:83:a0:67:e1:35:13:3a:a9:21:49:
23:fb:bd:8b:e4:de:43:19:5d:0b:d7:27:4f:ff:ba:ab:66:68:
ac:60:ac:b6:bc:d6:da:2b:75:73:69:f9:4a:64:55:a9:f9:18:
84:6b:2f:4f:c1:dd:1e:41:75:71:3d:92:83:9d:32:59:ae:35:
9f:1b:b9:72:49:62:02:87:6d:2f:db:e6:bc:b3:e6:61:e7:ff:
b3:80:d7:2d:b9:47:6c:d4:f1:5c:1b:f3:f2:7c:5f:6c:68:c8:
84:c2:5f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:22 2024 by rpki-client on console-ams.rpki-client.org