Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/U7MuMthsqayD18YclzVkAnj0HVg.roa
File: U7MuMthsqayD18YclzVkAnj0HVg.roa (raw, json)
Hash identifier: G5TTuekZLGgPK8VXH0eVixfBiL5DK+R3aHUHsfOkIUI=
Subject key identifier: 53:B3:2E:32:D8:6C:A9:AC:83:D7:C6:1C:97:35:64:02:78:F4:1D:58
Certificate issuer: /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial: 01856FB1266ECBFEEB84B4395F95660CCF40
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/U7MuMthsqayD18YclzVkAnj0HVg.roa
Signing time: Sun 01 Jan 2023 23:35:58 +0000
ROA not before: Sun 01 Jan 2023 23:35:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 185.189.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:26:6e:cb:fe:eb:84:b4:39:5f:95:66:0c:cf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Validity
Not Before: Jan 1 23:35:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53b32e32d86ca9ac83d7c61c9735640278f41d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4f:13:ad:4d:c1:ef:92:2b:fa:ed:e4:75:b8:
e5:08:c8:23:84:42:6f:0a:b3:e8:35:e1:18:cc:cd:
bd:e2:6d:39:c5:bb:7e:df:65:53:a1:4a:7f:51:51:
e9:69:bc:d0:8b:94:60:4f:c8:45:27:31:b6:ba:43:
49:bf:7f:ae:f8:02:4d:ac:9b:b2:be:07:e8:f7:b5:
d8:63:74:c3:67:dd:58:6e:dd:c2:50:77:fa:51:ad:
dc:4c:1f:6c:57:db:a4:a0:c1:85:ac:50:f7:68:0b:
e0:29:18:4a:ea:15:98:2a:25:39:3f:fa:98:fc:9b:
a4:3e:2a:81:e5:3d:3b:c0:f6:4f:ee:c8:6b:58:aa:
05:8d:5d:16:07:2a:74:ac:4b:02:53:95:ab:13:8a:
b3:c2:80:68:fc:80:3e:1b:55:ef:7b:6a:0a:84:c2:
51:20:09:80:38:1f:e3:7c:6b:9c:75:1b:5c:4e:e0:
b7:85:72:06:f5:f9:b9:db:fb:72:7e:38:a9:ab:a5:
cb:e3:ea:50:81:bb:7b:5c:58:e7:ac:ab:fb:fa:ba:
bd:a4:61:32:b3:05:ed:e7:a7:67:41:08:c0:da:b1:
45:26:2e:58:24:66:38:14:f8:83:c2:2a:4b:e7:73:
27:64:3d:bb:5f:f6:e1:b6:83:03:de:bf:9d:23:80:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B3:2E:32:D8:6C:A9:AC:83:D7:C6:1C:97:35:64:02:78:F4:1D:58
X509v3 Authority Key Identifier:
keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/U7MuMthsqayD18YclzVkAnj0HVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.110.0/24
Signature Algorithm: sha256WithRSAEncryption
87:78:9e:76:d4:fc:48:9b:23:a4:1a:fc:fa:a8:8e:6b:1a:c9:
9c:b7:d7:f0:99:c8:30:01:15:d8:4f:59:ac:f6:ee:32:39:52:
eb:50:46:39:38:bc:6f:2e:d5:10:1e:bd:60:41:37:c9:b5:cf:
63:4d:ae:88:a3:b9:ca:20:b6:14:59:4b:73:b6:57:4c:b1:0f:
40:a9:82:66:eb:3d:44:88:3f:41:24:52:3b:95:09:ce:b9:0c:
e0:f1:0e:36:b8:17:9e:e5:ab:c0:ab:95:75:a6:17:35:e6:dc:
dd:0a:93:a3:8f:b2:30:82:ed:68:b1:5d:1d:00:7c:ca:6c:86:
f9:cc:d1:7f:23:a0:5f:68:2a:67:40:f5:b9:4c:39:a6:87:00:
8a:13:20:b2:dd:18:1e:fd:d3:c5:2d:16:1b:9e:c2:13:48:f5:
8b:77:5b:ca:20:3f:4d:a1:85:29:c7:62:f3:38:f8:48:88:f8:
8d:1c:fb:1b:80:3e:5b:b4:e5:be:58:df:d9:ef:21:1a:07:47:
4e:c7:85:2f:fe:2b:06:16:13:03:a3:e1:1e:40:45:57:95:5b:
16:1b:a3:7c:02:8f:c5:1c:5b:1b:b5:3b:3e:9e:62:1d:a1:8f:
98:7d:c5:5b:90:83:a1:ab:bc:82:60:9f:5e:d0:90:04:96:94:
36:6a:f7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:34 2024 by rpki-client on console-fra.rpki-client.org