Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/ANOx8HafNHwXwk5cNBbbYpjQoqg.roa
File: ANOx8HafNHwXwk5cNBbbYpjQoqg.roa (raw, json)
Hash identifier: lPqGucygAy8nIcWON3AMWaRK+NRzdp0kdFybi5/MVIs=
Subject key identifier: 00:D3:B1:F0:76:9F:34:7C:17:C2:4E:5C:34:16:DB:62:98:D0:A2:A8
Certificate issuer: /CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Certificate serial: 018570B07324EEC31BD1E87B5CB8CB611394
Authority key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/ANOx8HafNHwXwk5cNBbbYpjQoqg.roa
Signing time: Mon 02 Jan 2023 04:14:50 +0000
ROA not before: Mon 02 Jan 2023 04:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60056
IP address blocks: 185.57.245.0/24 maxlen: 24
185.57.244.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:73:24:ee:c3:1b:d1:e8:7b:5c:b8:cb:61:13:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Validity
Not Before: Jan 2 04:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00d3b1f0769f347c17c24e5c3416db6298d0a2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e0:54:17:70:1d:bb:34:e0:16:f1:58:ba:5d:
04:c9:b9:cd:06:3d:64:f3:e2:a6:06:55:e5:85:1c:
f7:ff:3b:ea:23:1d:f6:1c:bd:55:85:b9:66:16:81:
52:8b:d8:29:cc:b6:8c:8d:e6:11:b5:2d:68:19:1d:
d8:f5:41:cf:df:22:e6:2c:fd:b1:ce:27:c2:cf:2b:
94:20:f5:b7:70:03:2e:b9:57:be:f9:d7:e9:2e:6d:
8a:89:71:ff:4d:41:c9:77:69:c2:d1:8f:a0:5e:c5:
b0:56:83:da:ac:4a:50:aa:4a:76:48:ea:5e:a8:82:
d4:d3:d3:09:6a:fb:df:b6:98:1d:2e:0e:8c:65:af:
a5:c5:f7:e3:51:d6:94:9a:88:f1:2a:da:72:bd:60:
54:b8:de:ad:60:6b:bd:c3:7d:bc:e7:1a:f6:63:94:
06:ae:d0:75:f6:cf:56:cd:dd:ff:bb:72:9e:51:15:
f7:a5:a9:d1:01:39:ea:1d:12:b4:01:c2:14:74:c8:
41:fa:08:9d:44:39:88:05:86:8d:82:37:20:3d:56:
98:41:ac:34:1e:55:21:c6:7d:8f:73:0b:4e:95:36:
80:cd:64:26:8f:71:f1:f6:13:c7:8b:22:b1:54:d8:
d0:9b:7f:ee:11:19:f7:b0:65:5d:af:74:c1:f4:79:
7b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D3:B1:F0:76:9F:34:7C:17:C2:4E:5C:34:16:DB:62:98:D0:A2:A8
X509v3 Authority Key Identifier:
keyid:E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/ANOx8HafNHwXwk5cNBbbYpjQoqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.244.0/23
Signature Algorithm: sha256WithRSAEncryption
81:a8:d2:96:11:29:ba:23:41:41:8d:cb:32:e6:6b:a8:da:a7:
9f:51:2e:1c:3e:6e:75:1f:d0:54:88:15:a9:3d:ef:a3:14:f6:
8f:ab:b4:30:2b:c8:52:4c:4c:9f:3a:c6:77:4e:6c:7d:02:74:
d9:8a:0f:90:17:f9:46:5a:b7:dc:54:ef:6d:6c:46:60:dd:0b:
ca:3c:87:c9:6b:8f:7a:67:12:70:0f:84:c1:ac:b7:a6:77:7e:
61:81:cd:a9:f8:9e:b8:c6:0a:0a:6a:65:7f:a5:91:d1:9a:41:
fe:60:26:46:60:94:45:c9:ab:63:ba:e8:4c:39:03:d0:7a:1c:
59:14:03:e2:41:f6:87:03:a7:0d:4b:8d:12:82:82:b5:ff:80:
aa:79:8f:06:7d:a9:e8:c6:11:a1:ae:e3:3f:bd:3e:27:b4:b4:
7a:4a:a5:33:f2:bb:02:ac:df:c2:8e:01:1c:69:45:69:bc:4d:
83:85:2f:9a:96:f4:32:17:60:34:9a:0a:21:f5:cb:cd:cc:5e:
9f:78:01:bb:38:99:42:ab:c2:d6:bf:b4:37:bd:90:f8:23:03:
df:4b:7d:7d:d4:d0:81:a1:62:85:57:29:9a:25:04:3b:3c:0a:
11:10:01:22:0d:e2:6c:d7:f9:a9:b0:ce:7f:6f:33:91:71:c0:
6e:56:fd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:09 2024 by rpki-client on console-ams.rpki-client.org