Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/m1pUgX2SSrouCXuaO4PR9ot3pSY.roa
File: m1pUgX2SSrouCXuaO4PR9ot3pSY.roa (raw, json)
Hash identifier: cLAfEBf06myBiquO1C9ifAVYIDFOzbnGOcE+vN0EYrc=
Subject key identifier: 9B:5A:54:81:7D:92:4A:BA:2E:09:7B:9A:3B:83:D1:F6:8B:77:A5:26
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 01856F429A7C62BA87866B64B6C34B8DB32B
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/m1pUgX2SSrouCXuaO4PR9ot3pSY.roa
Signing time: Sun 01 Jan 2023 21:35:13 +0000
ROA not before: Sun 01 Jan 2023 21:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50839
IP address blocks: 185.1.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:9a:7c:62:ba:87:86:6b:64:b6:c3:4b:8d:b3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 21:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b5a54817d924aba2e097b9a3b83d1f68b77a526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:76:a1:ee:b6:20:d3:40:aa:aa:49:18:95:8b:
0d:12:1a:4a:56:b3:bc:66:45:14:37:ef:79:3b:2b:
d7:cd:fa:92:23:b4:06:7f:cf:ba:42:ae:d8:a9:0e:
0d:3b:2f:5a:f8:fd:46:ac:ab:08:37:14:12:db:19:
21:23:c6:6a:9c:06:4d:18:1f:36:0d:d0:41:a5:6f:
c0:51:f3:af:cc:e7:93:bb:91:ea:21:1f:ee:53:6c:
7e:ce:38:c0:e9:b9:6c:86:25:d1:fc:6c:97:02:7b:
7e:e6:07:27:6a:f4:48:a3:45:f9:dc:4c:7e:ea:79:
e3:fe:c4:be:97:c6:0d:c1:88:5f:d3:aa:7c:48:f4:
03:c9:8f:4c:0f:a7:c3:14:16:9b:7b:81:30:38:a6:
47:7a:c5:6e:82:07:6d:22:3d:ad:32:54:b3:6e:4a:
f1:97:1f:34:47:50:81:bf:e7:57:7c:43:fd:c2:17:
a0:eb:aa:5a:6e:0a:a3:9d:f5:15:07:65:ca:5c:30:
72:11:42:4c:1b:63:f4:38:89:5a:2b:48:bb:61:04:
6c:c9:7f:32:cb:ca:22:28:e2:5a:84:2c:cb:90:04:
09:cc:b6:99:4b:79:bb:02:3b:15:f9:2c:70:be:83:
92:53:e2:47:85:be:34:44:8e:92:ba:aa:b8:1e:97:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5A:54:81:7D:92:4A:BA:2E:09:7B:9A:3B:83:D1:F6:8B:77:A5:26
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/m1pUgX2SSrouCXuaO4PR9ot3pSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.206.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:a7:42:1b:1b:15:d6:e3:3f:0f:39:03:2f:1e:7a:3b:b5:4d:
bf:63:cb:f8:bd:7e:2a:1d:bc:6d:45:c6:bb:c4:79:64:89:b5:
27:3c:11:78:52:17:e9:a0:c5:2a:e8:25:fd:d0:eb:ff:7a:95:
9d:cc:de:c6:43:48:8b:e7:42:3b:ac:74:64:6a:aa:25:b7:39:
67:53:86:d0:72:cd:7b:e7:ef:a4:d4:ea:32:5b:50:54:0b:4c:
1c:e6:a9:28:c8:3f:4a:43:32:41:a0:51:03:5e:5d:8b:80:43:
0c:16:eb:17:60:c9:87:95:ba:32:96:36:1c:37:96:03:96:1a:
37:2b:44:92:17:7a:c2:31:57:ef:95:5b:63:6f:2f:0c:a2:ec:
86:26:34:9f:f7:72:82:95:fd:7a:bb:16:23:4f:a1:3f:72:09:
49:af:81:d5:06:42:f4:2c:30:a4:db:e3:21:40:e2:f0:78:d3:
d9:4a:ca:54:0a:19:90:f7:85:5e:99:aa:41:43:42:7e:00:37:
a9:d3:0b:69:35:36:cf:69:a9:f0:6d:a9:16:c2:59:3f:f5:76:
49:e5:10:d7:ad:44:63:49:43:f2:7f:11:b4:e8:83:23:7d:4f:
5a:f0:89:7d:89:17:14:4f:b3:b8:fa:70:4d:dd:64:51:77:2d:
1c:6f:fe:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:06 2024 by rpki-client on console-ams.rpki-client.org