Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/pCanpuLomW_uYROdskBPsQVz-qc.roa
File: pCanpuLomW_uYROdskBPsQVz-qc.roa (raw, json)
Hash identifier: 3C7Z8zZKPM3oZ4Hcqet7ScHP62uJY7o6YdvY0Ijf+Rk=
Subject key identifier: A4:26:A7:A6:E2:E8:99:6F:EE:61:13:9D:B2:40:4F:B1:05:73:FA:A7
Certificate issuer: /CN=c3a55281ef84bb111e33ecc7c0088948fd4a8db2
Certificate serial: 01856ECBA2290F368A07901851710DB98932
Authority key identifier: C3:A5:52:81:EF:84:BB:11:1E:33:EC:C7:C0:08:89:48:FD:4A:8D:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/pCanpuLomW_uYROdskBPsQVz-qc.roa
Signing time: Sun 01 Jan 2023 19:25:17 +0000
ROA not before: Sun 01 Jan 2023 19:25:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42160
IP address blocks: 185.19.180.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:a2:29:0f:36:8a:07:90:18:51:71:0d:b9:89:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a55281ef84bb111e33ecc7c0088948fd4a8db2
Validity
Not Before: Jan 1 19:25:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a426a7a6e2e8996fee61139db2404fb10573faa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:c1:b3:8b:f3:5a:19:a7:12:43:69:eb:2e:
16:e8:be:a0:12:00:06:57:50:10:c9:6d:82:30:7d:
e1:aa:c7:13:94:ee:86:03:cd:08:be:f3:b2:e7:d2:
1c:3b:da:bb:aa:01:aa:f2:d6:6e:37:d3:c2:f9:15:
d0:ff:89:c0:b4:9c:f5:6a:77:ff:a7:3f:80:b8:cf:
3f:ca:fb:bc:e0:c8:5d:5b:56:53:e3:33:53:10:a4:
5d:cc:5c:3f:93:c4:50:09:5a:cf:5b:c9:8a:f8:89:
bb:99:a5:b9:f2:cf:e0:75:b3:7c:7d:1a:ea:c8:b2:
82:8d:e1:b7:3e:13:33:2c:32:c9:bd:7c:bc:e1:6c:
38:d8:c5:de:db:fd:73:72:f4:78:c3:4a:57:cb:d6:
44:31:67:2d:d2:3c:14:91:e0:e7:e3:20:ec:a6:91:
d9:34:88:ad:b4:f9:24:46:db:cd:7b:d3:3a:d0:b1:
f9:86:14:c0:86:3b:a0:ac:18:c0:2e:9c:6b:a3:d9:
72:bb:a7:fc:13:a5:23:48:82:b8:65:6e:96:92:7e:
e3:a0:57:e5:3d:6e:bd:24:73:0d:9e:7f:ed:11:cb:
18:8a:4e:49:40:be:f1:55:72:44:4d:47:7a:27:d6:
7e:72:f0:e7:12:ee:94:e0:8e:ca:90:82:c3:14:02:
1b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:26:A7:A6:E2:E8:99:6F:EE:61:13:9D:B2:40:4F:B1:05:73:FA:A7
X509v3 Authority Key Identifier:
keyid:C3:A5:52:81:EF:84:BB:11:1E:33:EC:C7:C0:08:89:48:FD:4A:8D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/pCanpuLomW_uYROdskBPsQVz-qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.180.0/22
Signature Algorithm: sha256WithRSAEncryption
19:ba:8c:1e:f0:e2:4b:84:33:b6:98:df:4d:4a:72:6d:af:f7:
2d:0e:9c:03:14:b6:cb:f3:92:dc:1c:03:a7:d7:bc:f4:b3:93:
06:5f:21:83:e5:31:1e:2c:8b:22:7c:27:1d:da:d7:13:d5:96:
32:06:d5:c6:7d:04:34:15:20:15:98:a6:dd:2f:2f:bd:bc:65:
7d:a8:da:ae:62:61:2c:a6:eb:a3:4c:ba:70:22:32:62:86:23:
b6:1f:0b:f7:4a:a6:17:0a:92:7e:df:9e:50:6d:63:18:b7:ba:
da:64:ff:f7:a9:e4:da:7e:2e:25:78:cd:48:f3:df:b9:67:88:
b9:bc:aa:ec:ed:94:c2:e1:2b:ec:cf:ea:ff:e1:fb:52:15:b1:
c1:4e:5f:00:9d:58:34:93:93:fb:cc:7a:b8:3f:99:8d:6a:cb:
ba:59:4d:d8:27:36:9d:3d:e4:a4:a3:39:cd:cc:21:ea:99:36:
89:eb:4f:22:02:7c:83:c4:d8:f2:2f:ec:0c:fa:1b:20:0b:3b:
36:a0:4f:91:14:c3:50:1f:76:40:a0:29:0e:ff:31:54:c6:c0:
24:72:e8:62:57:58:72:43:b7:f4:a8:12:90:ec:1a:2f:c0:6d:
51:1c:4f:68:e7:07:3d:28:54:f0:0b:5b:96:fd:3f:38:94:2c:
9a:ae:41:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:44 2024 by rpki-client on console-ams.rpki-client.org