Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/jVvTGeJ7d5Ol43j0jVm7hwE8TCg.roa
File: jVvTGeJ7d5Ol43j0jVm7hwE8TCg.roa (raw, json)
Hash identifier: fR8aNesFz4rXPsQ4dMkzkzqyvs8WZZhAqkHEGgRJN60=
Subject key identifier: 8D:5B:D3:19:E2:7B:77:93:A5:E3:78:F4:8D:59:BB:87:01:3C:4C:28
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 018571FA36200ADC351C139807BED41187E9
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/jVvTGeJ7d5Ol43j0jVm7hwE8TCg.roa
Signing time: Mon 02 Jan 2023 10:15:01 +0000
ROA not before: Mon 02 Jan 2023 10:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204573
IP address blocks: 185.112.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:36:20:0a:dc:35:1c:13:98:07:be:d4:11:87:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Jan 2 10:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d5bd319e27b7793a5e378f48d59bb87013c4c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:33:ec:83:e9:eb:b2:ba:24:34:ed:2a:09:
2c:22:87:0d:d6:0d:92:9f:69:dc:25:83:93:23:20:
b0:09:fb:a0:c5:80:a4:4d:c3:9f:20:a3:5c:07:e3:
59:43:7a:ac:7f:ad:cc:54:6a:9b:09:9a:14:df:89:
0d:cf:fa:03:05:48:f0:91:99:40:e1:eb:92:ae:b6:
54:89:fd:9d:1f:f8:34:47:fe:19:a2:76:c3:7a:7e:
b1:fd:8e:ae:32:7f:21:6b:1f:61:2a:3e:23:b9:7a:
30:2a:fb:ba:3b:6b:30:e3:d7:34:c1:34:9d:e2:02:
8c:36:20:ed:ac:9e:f3:42:de:16:73:ae:ab:3b:f7:
08:07:8b:cf:d0:9a:a3:d4:ad:cb:84:a8:3b:33:94:
9c:98:8c:d6:fd:3a:b2:ee:6b:97:a1:b0:10:b0:46:
be:11:b8:4f:d1:7f:a5:01:0d:60:d5:8c:09:4a:88:
9a:22:52:f8:0f:a8:13:96:5b:50:98:db:e3:cb:f9:
f9:69:30:a6:9f:3b:aa:4a:2b:27:24:77:e8:87:02:
b4:56:11:24:6a:a0:a8:2f:50:63:02:ec:95:e7:b3:
fc:fc:01:61:a5:c6:81:85:1f:48:60:38:36:69:6b:
25:7a:99:4b:ae:40:52:85:63:5d:94:c4:9c:ca:d0:
49:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5B:D3:19:E2:7B:77:93:A5:E3:78:F4:8D:59:BB:87:01:3C:4C:28
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/jVvTGeJ7d5Ol43j0jVm7hwE8TCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.175.0/24
Signature Algorithm: sha256WithRSAEncryption
78:82:8a:b3:27:cf:fc:72:45:8a:fd:b6:1b:89:24:f9:4b:4a:
87:16:25:44:9a:80:e3:f4:1e:22:b3:aa:b1:78:1f:01:bf:f2:
d7:1c:42:a7:4f:7f:8e:3d:a9:54:0d:06:0a:23:aa:1a:4d:0c:
e0:d5:7d:44:51:0b:6d:29:58:35:8d:06:22:e0:d5:2f:db:96:
60:65:a5:8a:3a:fd:3d:cd:0c:bb:00:a7:c3:47:c2:cf:49:8c:
5d:d2:37:27:94:f0:94:f9:18:67:e8:45:0e:7e:88:cd:85:c8:
70:54:ac:9b:57:f5:86:bd:49:1b:41:f8:34:71:d0:69:85:2e:
f5:b4:3e:6d:45:d1:ba:b5:b7:18:bd:35:c0:7f:41:4e:93:55:
85:5b:e3:6f:2f:bf:19:96:b4:11:6c:73:46:25:e4:69:8f:c3:
69:dd:54:98:6e:0d:82:35:59:14:e8:f1:a7:d6:07:4a:12:67:
99:67:72:29:72:eb:1b:38:1f:2e:53:fe:69:46:ac:6f:23:a3:
25:1c:52:64:a2:d4:c2:2c:fd:7f:02:e5:2c:0d:4d:4d:7b:68:
83:67:b5:b4:21:cd:e0:3b:0f:f8:72:56:2f:fa:dd:b5:73:b6:
59:35:6f:59:96:9a:64:ed:30:09:3c:c4:47:cc:0e:c7:66:86:
20:f5:df:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:58 2024 by rpki-client on console-ams.rpki-client.org