Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/19MeI8MeRAFqGNqoNXvI1XP0eZw.roa
File: 19MeI8MeRAFqGNqoNXvI1XP0eZw.roa (raw, json)
Hash identifier: +E0CaNZNDIdiLUZmmyGwRUZvYgA7BIVVpCcY0Hs/SGE=
Subject key identifier: D7:D3:1E:23:C3:1E:44:01:6A:18:DA:A8:35:7B:C8:D5:73:F4:79:9C
Certificate issuer: /CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Certificate serial: 01856C813F29F900832561D829B0BBEAFCC4
Authority key identifier: 21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/19MeI8MeRAFqGNqoNXvI1XP0eZw.roa
Signing time: Sun 01 Jan 2023 08:44:47 +0000
ROA not before: Sun 01 Jan 2023 08:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40551
IP address blocks: 185.22.83.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:3f:29:f9:00:83:25:61:d8:29:b0:bb:ea:fc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Validity
Not Before: Jan 1 08:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7d31e23c31e44016a18daa8357bc8d573f4799c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2a:03:21:ca:8a:68:a3:5d:9b:55:24:ac:a4:
3d:76:e5:3d:08:bb:0f:0f:1f:74:71:16:a4:2a:99:
60:91:13:fc:fe:dc:52:0e:55:15:3e:23:02:3d:b2:
2e:8a:b7:7a:52:a5:98:73:1f:69:da:a8:bf:39:9e:
7f:16:26:9b:ab:4e:ec:a0:8f:75:c9:9f:ec:a5:cc:
be:11:7d:e2:52:7c:62:a0:84:b5:9e:b2:6a:a0:80:
23:cb:94:5f:b6:59:81:f0:c4:8a:c4:bf:6c:6e:9a:
4c:cb:bf:42:d1:0a:b1:9e:40:54:ea:8a:71:3c:6b:
02:82:df:b1:a5:86:a2:18:e2:a8:c6:a7:97:2d:59:
dc:d1:81:1d:71:a9:50:9a:33:f4:b9:0d:e0:cf:04:
1d:e4:16:a7:f1:15:ac:e9:d7:d3:4a:d2:c7:0e:c6:
2a:19:f3:d4:de:af:68:f7:e2:e7:38:e4:f2:da:32:
7c:73:17:64:79:d2:39:c9:2f:cd:32:05:68:b0:25:
ce:6a:f2:09:45:4a:69:bb:35:8b:cf:0b:a3:0d:5e:
b7:cc:de:49:05:92:f2:d4:76:2c:92:ad:c7:0f:a5:
b0:ad:2a:0e:b4:88:ec:dc:2a:5a:0b:f6:64:95:a4:
21:00:c4:eb:46:11:19:44:85:05:6f:a8:d4:21:ea:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D3:1E:23:C3:1E:44:01:6A:18:DA:A8:35:7B:C8:D5:73:F4:79:9C
X509v3 Authority Key Identifier:
keyid:21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/19MeI8MeRAFqGNqoNXvI1XP0eZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.83.0/24
Signature Algorithm: sha256WithRSAEncryption
07:64:68:0d:82:ab:8c:1f:b9:7c:21:7c:db:63:04:7a:8e:ae:
f2:73:04:a0:f7:e1:77:57:51:d6:84:d4:35:3a:b7:67:ca:1e:
ff:56:f4:1d:68:3a:1a:a9:9e:49:9f:c3:2a:fd:97:d6:be:be:
69:59:41:73:ef:07:fe:55:59:d8:f1:9d:58:72:bd:72:1c:59:
84:1d:5f:cd:29:85:0b:a2:35:7f:b8:7f:ee:8b:c6:3b:7d:a1:
c0:1d:ac:7e:0d:40:1b:73:21:3b:44:2d:73:00:aa:fe:52:ee:
bb:93:89:86:83:39:c2:05:f4:bf:3d:04:48:8f:c7:be:3a:ac:
c9:92:d9:19:9e:14:35:1f:c8:66:22:b8:1a:18:b2:3f:eb:64:
f5:67:65:64:f4:cb:74:dc:78:c5:7a:1f:09:91:25:68:11:e5:
57:ba:c8:46:70:be:e2:50:64:6e:b9:54:f4:48:d2:0a:9c:dc:
cb:4e:06:39:66:28:d3:0c:78:31:05:ae:f3:f1:5b:af:5c:b2:
fd:6b:f5:26:18:34:c6:7c:64:7e:20:d0:32:3a:10:c3:23:c3:
bd:2d:03:be:5e:65:2f:c0:6e:07:53:11:db:cc:ca:26:3f:80:
1f:0c:93:25:af:f1:19:a6:47:2c:85:fa:a8:13:59:4a:fe:3f:
1d:5d:ae:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:14 2024 by rpki-client on console-ams.rpki-client.org