Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/xlaDV4iaMX-CjGU08v535CO1YrM.roa
File: xlaDV4iaMX-CjGU08v535CO1YrM.roa (raw, json)
Hash identifier: IrCXEQ160BLYfBALMyJbERRc8agkXfNQ9IHcsg9gy8Q=
Subject key identifier: C6:56:83:57:88:9A:31:7F:82:8C:65:34:F2:FE:77:E4:23:B5:62:B3
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0185724701790CADE5CE8A9AD7502B850889
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/xlaDV4iaMX-CjGU08v535CO1YrM.roa
Signing time: Mon 02 Jan 2023 11:38:54 +0000
ROA not before: Mon 02 Jan 2023 11:38:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41112
IP address blocks: 146.185.232.0/24 maxlen: 24
37.9.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:01:79:0c:ad:e5:ce:8a:9a:d7:50:2b:85:08:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6568357889a317f828c6534f2fe77e423b562b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:2f:fb:d7:1a:81:46:15:4e:98:01:9a:65:
54:18:a5:89:43:2f:94:86:45:8a:8f:74:0c:6c:77:
37:d2:9b:f6:92:18:74:89:d1:67:f6:7e:30:b0:0c:
68:d4:75:b8:d7:bd:b4:6b:7d:b3:00:22:3b:9c:6c:
35:11:1b:bc:9e:80:1d:30:ef:1c:f2:20:64:8d:af:
1e:44:3b:42:6d:89:27:d6:fc:98:82:d4:cc:63:bc:
c7:7a:d9:35:51:f5:88:cc:82:ac:82:fd:d2:1e:2a:
ed:59:fe:da:14:5c:21:ca:42:38:33:94:01:2d:f8:
a1:15:96:1a:3e:eb:c9:de:84:10:d5:65:54:8e:75:
b3:a8:da:35:9b:2e:c3:2e:d2:b3:b4:0b:b4:4a:d6:
34:52:93:0e:8b:7b:8c:1f:a2:11:f1:e0:4e:21:55:
d0:29:c0:74:6c:68:fd:96:7a:e1:40:aa:d7:66:b6:
e1:27:82:09:2b:3c:5f:eb:d8:66:15:00:47:9e:a5:
18:66:25:9f:a6:1f:24:50:d1:67:81:24:36:bb:1f:
74:60:82:95:39:b9:99:03:57:3b:92:d6:10:e6:82:
ce:50:d0:67:5e:11:1d:79:c4:98:2d:13:14:2c:38:
d1:12:36:46:6b:f3:87:6d:47:30:35:6f:41:1d:62:
48:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:56:83:57:88:9A:31:7F:82:8C:65:34:F2:FE:77:E4:23:B5:62:B3
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/xlaDV4iaMX-CjGU08v535CO1YrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.51.0/24
146.185.232.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:05:19:ec:ad:8b:9a:fc:6e:b2:a7:5f:aa:30:2d:60:05:fc:
60:ff:28:c2:0d:91:58:7b:9c:9a:ac:b6:5e:ca:b1:bb:de:f5:
d2:58:0a:77:e3:f2:70:35:5b:f4:82:3a:f7:29:b9:49:10:2b:
fb:c0:67:aa:be:9b:8f:79:23:90:c9:c1:32:84:64:53:20:7c:
29:b2:d2:61:32:d5:b5:e8:47:ed:47:03:da:b3:84:ac:04:0e:
62:75:f1:21:aa:96:95:b3:02:51:d5:fa:3e:f2:0e:98:40:5c:
38:d1:f3:72:4e:b9:df:30:f5:43:79:dd:58:26:30:2b:9b:ce:
a6:b6:35:cd:0e:0b:57:67:09:cf:34:48:45:8d:8f:d9:c3:05:
c8:b8:8f:bd:b5:22:e6:e8:9e:98:28:ce:34:c0:32:97:c3:a3:
22:bd:b9:32:6e:27:f0:c5:ba:3d:59:d3:d3:22:9b:b4:b1:68:
3a:2a:82:ea:88:59:66:5e:4f:24:17:9e:c2:26:19:9e:b5:7b:
e3:23:14:df:7d:fe:91:1b:57:25:0d:57:bd:a9:0c:54:ef:59:
16:de:5f:94:ba:a0:8b:19:de:63:76:a0:e7:ad:fa:7c:04:c9:
06:81:08:1b:7f:fe:9d:5c:2e:47:71:8b:21:d0:88:1a:a6:24:
60:52:b4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:25 2024 by rpki-client on console-fra.rpki-client.org