Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/iQfqv1Ads-Cb_65AJ4i0YsymDGA.roa
File: iQfqv1Ads-Cb_65AJ4i0YsymDGA.roa (raw, json)
Hash identifier: GZkg2irsm+a18CGqC+2htTzDC/Od3joMrH3lNm/oNSc=
Subject key identifier: 89:07:EA:BF:50:1D:B3:E0:9B:FF:AE:40:27:88:B4:62:CC:A6:0C:60
Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial: 01891F1D714BBB2637F609648F85DC4CDDD6
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/iQfqv1Ads-Cb_65AJ4i0YsymDGA.roa
Signing time: Tue 04 Jul 2023 04:16:10 +0000
ROA not before: Tue 04 Jul 2023 04:16:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60514
IP address blocks: 185.57.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1f:1d:71:4b:bb:26:37:f6:09:64:8f:85:dc:4c:dd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Validity
Not Before: Jul 4 04:16:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8907eabf501db3e09bffae402788b462cca60c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:fd:ae:83:54:ec:87:c1:8f:de:d1:dc:10:
01:e9:1b:61:e2:c7:31:65:6b:f0:f5:36:9b:cb:8e:
44:e4:66:16:c4:fc:cc:78:90:26:a5:33:e6:27:4e:
a1:d3:88:5b:43:8c:80:68:69:bc:2d:23:05:64:6c:
a8:6a:32:5e:02:a7:b4:83:bb:d5:08:08:01:90:68:
f1:ae:88:66:56:43:19:9a:4a:c5:81:e5:1e:5a:70:
3e:ac:f0:a9:f7:1f:f0:5f:69:19:90:46:41:c5:e5:
e9:68:f5:c2:31:64:16:4d:fa:69:b6:9c:e8:34:01:
0a:7a:1f:de:37:17:09:9b:e7:0e:7b:bc:3e:5b:2a:
72:62:5c:78:54:64:8e:95:1b:ef:49:d1:c7:4f:b5:
bc:5a:f9:c6:89:57:17:c2:f3:e8:22:c1:b8:e8:54:
1b:b0:6e:60:a4:72:9b:54:27:0f:b4:08:b0:cb:21:
15:7e:ff:fa:01:73:ac:77:c0:a6:8b:42:d8:cf:8b:
79:85:f4:41:f6:d9:e4:43:3e:c4:5e:c6:bb:fc:4f:
6d:84:2a:d7:3c:60:4a:24:7d:0f:fb:29:a8:59:ed:
b0:ff:22:64:b7:80:4a:13:2f:eb:ab:6c:97:14:26:
7f:e2:2b:2f:35:d4:75:11:14:c0:94:e3:a1:c1:75:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:07:EA:BF:50:1D:B3:E0:9B:FF:AE:40:27:88:B4:62:CC:A6:0C:60
X509v3 Authority Key Identifier:
keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/iQfqv1Ads-Cb_65AJ4i0YsymDGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.47.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:cf:03:41:fd:5b:bd:32:4f:8c:c0:19:e6:03:a2:90:b9:6c:
e3:fd:6b:06:54:2a:38:61:ab:7e:d4:ab:d4:c3:05:7b:75:f0:
37:c1:be:d1:d2:6c:a5:c9:6c:45:52:e4:32:f4:ff:95:c9:e1:
df:6c:16:95:d1:0e:17:a7:7c:18:92:e7:4e:cc:92:76:bc:74:
da:22:72:a2:e7:81:47:40:36:6c:2b:28:1f:f0:ed:24:73:f4:
1d:4e:0b:6c:f5:3d:d4:c6:d6:8b:bd:52:82:a3:f1:e4:aa:5c:
6d:15:82:3c:8b:e1:ac:f4:4f:d2:eb:10:a0:8f:ba:15:ac:0a:
92:e3:b8:ef:bb:d2:3b:6b:3c:c9:4f:86:ce:51:39:cb:7e:6f:
c3:b5:bb:0c:47:4b:fc:ce:0e:83:a6:6e:8a:ef:c7:bb:dc:ff:
07:3d:86:4a:68:6d:90:c2:a3:a6:70:c0:d0:4e:f1:9c:2c:55:
65:f3:f2:f1:a3:e7:33:d2:7a:bb:7d:ed:1b:2a:b9:2c:b0:03:
f7:0b:12:1c:a7:43:5b:74:5d:8c:d8:f7:fa:f8:2e:bc:26:7c:
19:86:9b:51:c2:db:a6:00:45:91:e8:d0:0f:ea:e6:fb:c7:ea:
2c:7c:07:e3:7b:e2:15:f7:79:6e:8c:e0:3a:f9:fb:0e:f1:77:
de:21:92:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:29 2024 by rpki-client on console-ams.rpki-client.org