Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/Ov3h9qV8GeCmfRWx0Pe-69BvDX4.roa
File: Ov3h9qV8GeCmfRWx0Pe-69BvDX4.roa (raw, json)
Hash identifier: cxhXasAv/HtM7Mn9n0l6I1cXmQDtOCHNhVL48pYv/BU=
Subject key identifier: 3A:FD:E1:F6:A5:7C:19:E0:A6:7D:15:B1:D0:F7:BE:EB:D0:6F:0D:7E
Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90
Certificate serial: 01856FA6EB086AE8BCC00933781B8C025775
Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/Ov3h9qV8GeCmfRWx0Pe-69BvDX4.roa
Signing time: Sun 01 Jan 2023 23:24:48 +0000
ROA not before: Sun 01 Jan 2023 23:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51191
IP address blocks: 185.169.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:eb:08:6a:e8:bc:c0:09:33:78:1b:8c:02:57:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90
Validity
Not Before: Jan 1 23:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3afde1f6a57c19e0a67d15b1d0f7beebd06f0d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:ea:f7:63:c7:a8:3c:dc:96:14:63:b8:ed:
8f:ce:1b:4e:e4:9d:25:57:89:cf:ec:89:a9:69:c1:
03:bd:32:89:57:80:16:d3:92:10:6b:7c:dc:53:41:
1e:ef:02:b8:e5:c9:93:03:99:ec:1a:d7:64:d8:c9:
36:9f:b9:e1:a2:cb:7d:6a:9d:b6:8d:8b:64:c0:4a:
5b:92:27:21:81:9b:c3:ea:70:ee:5b:65:f6:1b:85:
3e:5d:ed:49:08:fc:d3:c1:7c:2b:6e:95:50:30:e2:
79:0d:3d:32:c9:5c:a8:0d:98:d5:b5:c4:03:7b:98:
03:6f:3e:da:bf:a2:eb:2e:a3:91:3e:8b:17:92:93:
19:fc:40:9e:c2:60:c0:c8:38:0f:c5:6b:fb:19:ed:
88:e0:17:68:09:83:2a:d3:3c:29:01:68:f0:00:9f:
8a:c7:df:eb:aa:8d:f1:78:16:3b:4e:e7:8a:bd:f1:
15:a7:fa:8b:56:27:43:57:dc:3e:c3:f0:73:0b:4e:
42:c5:a5:7d:7f:ff:ce:07:a5:5e:4c:df:36:ef:fa:
7d:ec:c5:ae:d2:a9:9e:ea:aa:22:3a:5f:97:ba:ea:
5c:7d:5f:74:4c:b6:69:2b:c6:13:00:7f:52:91:34:
a9:08:99:08:85:60:a8:57:09:0f:26:e2:d1:d5:5a:
6c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FD:E1:F6:A5:7C:19:E0:A6:7D:15:B1:D0:F7:BE:EB:D0:6F:0D:7E
X509v3 Authority Key Identifier:
keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/Ov3h9qV8GeCmfRWx0Pe-69BvDX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.24.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d3:5c:cd:79:95:ba:41:98:33:59:d3:94:9c:35:24:cb:7a:
30:ca:48:44:df:89:e9:26:a2:10:95:b3:83:a0:12:ce:cd:38:
a1:19:fe:9d:ca:3c:ff:70:76:79:c6:e3:be:da:5c:cf:1c:71:
40:c3:92:55:b0:e4:0e:cf:fd:4d:80:b3:78:ff:f9:1c:79:37:
84:ea:53:86:ed:47:c7:36:e4:0f:8c:f0:8f:c3:f8:c2:c8:80:
83:e4:8d:7d:1b:4c:1b:a4:9e:2c:dd:1e:fe:c9:d8:0c:ab:c3:
47:87:ac:f8:06:be:18:d3:0f:bf:29:e1:2f:34:35:71:07:53:
7f:70:6f:5a:c8:8d:85:af:84:be:01:55:12:88:52:d2:7a:25:
e8:35:e1:89:20:f2:8b:cc:70:54:b5:92:89:d9:6e:60:3e:15:
fd:f0:29:6d:f9:88:38:33:20:f3:d4:79:93:2f:ad:84:62:4f:
96:c1:74:f9:6a:99:13:12:36:da:51:d4:b7:8d:8d:be:37:29:
43:6f:0b:8d:d5:bc:a3:7f:3e:54:86:a0:72:14:39:bb:62:3b:
a5:04:6b:04:67:61:40:a6:a1:7b:bc:f0:65:72:aa:3b:6f:af:
8d:95:7c:b6:b1:c7:ea:60:d3:64:98:4c:48:06:c5:a6:d3:1f:
7a:44:41:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 24 06:56:11 2023 by rpki-client on console-ams.rpki-client.org