Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/17arU7ASv_NKxxONmSi58X9TfME.roa
File: 17arU7ASv_NKxxONmSi58X9TfME.roa (raw, json)
Hash identifier: j2C0NuXq/GB1FkiLscHq/3Gt7/P5d9Kq9DfckH5rq40=
Subject key identifier: D7:B6:AB:53:B0:12:BF:F3:4A:C7:13:8D:99:28:B9:F1:7F:53:7C:C1
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7AECA514596B2B134CA1DE0DB2801
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/17arU7ASv_NKxxONmSi58X9TfME.roa
Signing time: Mon 02 Jan 2023 08:44:52 +0000
ROA not before: Mon 02 Jan 2023 08:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203019
IP address blocks: 185.147.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:ae:ca:51:45:96:b2:b1:34:ca:1d:e0:db:28:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7b6ab53b012bff34ac7138d9928b9f17f537cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6e:e1:1e:f7:63:62:44:49:30:a3:ff:65:da:
de:b9:d1:7c:e1:54:56:4c:a4:b8:a2:30:82:50:93:
8d:89:05:38:0c:a5:b0:65:12:0b:4c:09:0b:78:a8:
f4:d3:57:f6:7d:49:03:25:90:da:a0:63:09:94:b9:
2b:b8:29:20:e2:73:d6:75:13:75:39:64:bb:17:f2:
5f:39:b4:f7:ef:49:70:3f:85:9a:1b:3a:f2:f6:33:
eb:90:cd:3f:87:5f:af:a6:d3:4d:16:d7:b5:f3:07:
05:cb:7a:d7:10:47:ec:2e:e7:a1:4c:f2:81:11:f3:
ad:d6:e8:33:87:23:5a:4a:fb:cc:dc:f6:ae:0a:8b:
2e:27:bd:a7:79:49:16:3c:36:64:de:b4:d9:89:48:
61:a7:42:9a:2c:d8:b8:75:17:e1:de:31:c7:2b:8e:
1d:2a:d0:03:55:24:98:e0:4c:14:29:d4:46:d1:c1:
f7:c4:bd:5c:cf:44:cd:f3:8b:81:22:32:b7:b8:d5:
4a:99:ea:e4:5b:41:f7:a6:e6:29:6a:90:80:fa:b7:
dd:b5:40:f0:36:9e:22:ab:eb:23:8b:18:4f:f7:46:
ba:f6:a1:99:72:ed:2e:e9:11:97:74:7b:34:cf:c9:
9e:0b:6b:59:7f:ca:e3:f9:29:f9:82:e7:ac:04:ce:
1b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B6:AB:53:B0:12:BF:F3:4A:C7:13:8D:99:28:B9:F1:7F:53:7C:C1
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/17arU7ASv_NKxxONmSi58X9TfME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.48.0/24
Signature Algorithm: sha256WithRSAEncryption
90:65:ad:72:26:3a:31:d7:6a:ae:35:a6:cc:09:0f:11:3b:93:
d2:23:17:00:3e:0e:6a:98:f9:bb:8c:e6:cb:33:3c:23:85:ce:
32:cb:7c:8a:9f:7a:eb:ed:34:08:0f:f4:54:27:6a:18:14:53:
34:cb:9f:80:78:29:82:04:ff:8c:2a:cc:c8:14:c0:d0:be:2e:
c4:55:5d:26:0f:3b:b4:cc:52:7b:f2:1b:80:11:8e:f6:ba:4c:
94:e3:b2:ea:27:bc:84:ab:2e:d1:05:6c:0d:cc:6c:96:56:50:
58:4b:81:ae:8e:38:d1:fb:d7:52:f9:d0:af:f7:06:66:d0:20:
e4:6d:7a:c0:af:a6:4a:2f:ac:0e:9c:a1:c1:67:ed:88:47:8c:
83:d4:48:66:7c:af:df:12:0d:a0:2d:f6:28:1d:07:64:19:fd:
a0:38:dc:95:52:d4:02:d0:4b:92:a5:46:76:5c:76:0c:b6:c3:
a5:76:08:0c:4d:d1:8f:cc:4b:7c:8e:5d:8e:60:e2:ec:f4:7a:
e9:ce:93:b3:de:f0:25:e0:d5:e1:aa:95:25:bc:ba:af:1d:fc:
81:28:e7:26:ab:f6:c2:ce:5a:b2:50:e6:6b:91:f3:7a:ea:7e:
91:3a:f8:cd:07:14:7f:6a:76:08:9c:c6:e3:a8:03:78:52:11:
f9:26:4d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 26 14:36:56 2023 by rpki-client on console-ams.rpki-client.org