Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/RVDqKpCOuIMr8yYsxcn3igld8cA.roa
File: RVDqKpCOuIMr8yYsxcn3igld8cA.roa (raw, json)
Hash identifier: ldSc6hwjrpTlEJpSN0uLrYHcod4VJG8RjsMA0hbSGPY=
Subject key identifier: 45:50:EA:2A:90:8E:B8:83:2B:F3:26:2C:C5:C9:F7:8A:09:5D:F1:C0
Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90
Certificate serial: 01856FA6EA95DCC97E469F225B0577C8F137
Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/RVDqKpCOuIMr8yYsxcn3igld8cA.roa
Signing time: Sun 01 Jan 2023 23:24:47 +0000
ROA not before: Sun 01 Jan 2023 23:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.169.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:ea:95:dc:c9:7e:46:9f:22:5b:05:77:c8:f1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90
Validity
Not Before: Jan 1 23:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4550ea2a908eb8832bf3262cc5c9f78a095df1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:a7:2d:7c:02:8b:23:d5:c0:ee:bf:47:6c:
75:6b:28:19:e3:0b:ad:ff:97:c2:26:7a:3a:2e:75:
42:d6:e2:e4:58:ae:7e:5d:b2:b7:c9:fb:1f:91:80:
44:06:45:99:86:de:7b:91:ba:b1:ab:e0:93:41:12:
30:b2:0c:85:99:de:3d:82:e6:42:5a:cf:bb:d0:9f:
b6:5f:4d:2a:c1:42:12:fa:44:66:8c:05:40:a9:56:
dd:d0:b3:44:3b:cf:cd:ea:2c:79:40:3f:6c:23:0b:
d1:e0:5f:db:49:0d:0f:f3:8a:ea:d2:64:53:94:d9:
84:6a:5c:ba:14:15:c0:d3:15:65:b5:46:8f:08:69:
7e:e6:57:f1:91:00:af:f4:55:8e:06:a6:97:df:69:
2b:94:0d:7f:a7:57:8e:f4:e5:42:b4:a9:7f:37:b8:
c9:5f:c7:aa:56:22:38:d6:56:e2:05:64:24:6a:57:
8c:d3:ca:9d:ea:54:e2:06:de:ca:9d:de:78:f6:88:
50:ed:0b:9c:3a:07:4b:8f:28:24:92:50:2b:6b:10:
2c:8d:89:77:f6:be:4f:af:7b:b1:b2:be:d5:d1:66:
0d:86:a0:1f:73:99:21:35:e0:ae:0f:2d:27:43:c8:
58:a8:95:75:b0:94:16:8d:03:db:a4:71:70:89:b8:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:50:EA:2A:90:8E:B8:83:2B:F3:26:2C:C5:C9:F7:8A:09:5D:F1:C0
X509v3 Authority Key Identifier:
keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/RVDqKpCOuIMr8yYsxcn3igld8cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.27.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:36:fb:a4:e1:29:20:73:a8:e6:cf:12:f4:9c:fe:e6:47:7b:
1d:af:45:30:26:58:c9:62:7c:42:8c:67:3d:ab:42:30:80:96:
02:62:81:27:a6:26:09:51:0f:ae:38:3b:be:73:16:e7:16:73:
68:a1:35:d8:9a:5f:b0:57:24:0e:b9:4e:ac:9f:de:f5:47:69:
42:ca:80:f3:6e:2d:0a:1a:df:25:79:30:0c:fe:79:97:71:c8:
96:74:bb:6e:55:90:2f:3e:3c:76:07:07:82:77:62:e3:4f:ae:
42:74:cc:5b:88:db:43:65:cd:a1:8f:24:21:c9:6b:bb:34:73:
28:c2:9c:e5:ce:e7:80:e2:1b:5e:12:56:24:15:47:c0:5d:d3:
a6:59:3f:a5:89:5f:ad:33:bb:06:19:d7:ec:c3:eb:42:98:3c:
f5:29:b3:ee:e5:4b:82:7c:0c:a7:b1:84:5e:dc:96:f6:b6:47:
4a:c2:92:31:37:fc:b8:60:bc:6e:c2:dc:93:24:0b:41:6c:9d:
56:b6:c9:67:08:1e:bb:cc:2e:71:fa:88:0b:0d:e9:a2:38:b6:
de:b4:59:8f:5e:1a:26:86:65:64:04:ad:f3:fa:d4:ca:48:f5:
c0:e3:6b:c0:0c:88:f7:bd:72:b8:c7:dd:ba:b7:79:85:92:9c:
ee:5d:06:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:35 2023 by rpki-client on console-ams.rpki-client.org