Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/SlUscrIKrrQe1-q-n8LG7exSPiQ.roa
File: SlUscrIKrrQe1-q-n8LG7exSPiQ.roa (raw, json)
Hash identifier: m6aslI1yUL7+Uf+AaMHzICRapQTAis0m3h43cWJKBrY=
Subject key identifier: 4A:55:2C:72:B2:0A:AE:B4:1E:D7:EA:BE:9F:C2:C6:ED:EC:52:3E:24
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018B18F5FC26731B157E92B4731116D253C0
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/SlUscrIKrrQe1-q-n8LG7exSPiQ.roa
Signing time: Tue 10 Oct 2023 09:40:55 +0000
ROA not before: Tue 10 Oct 2023 09:40:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 185.230.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:18:f5:fc:26:73:1b:15:7e:92:b4:73:11:16:d2:53:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 10 09:40:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a552c72b20aaeb41ed7eabe9fc2c6edec523e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1f:73:23:c9:43:b5:3e:9d:0e:57:8e:68:1d:
cb:61:7f:70:63:1e:48:d6:a9:1c:e4:b9:aa:08:99:
c8:79:9c:03:eb:eb:bb:26:5a:72:db:44:0f:3d:13:
0b:6f:62:9d:22:a0:25:ee:23:0e:e3:4f:c4:f2:3e:
32:b9:43:f4:37:bb:dc:19:fd:4e:2e:d7:33:6e:21:
d3:a0:66:7a:6d:14:d8:af:ef:ee:bb:fc:24:f5:97:
19:05:e6:c7:ef:3b:72:81:75:6b:e4:c1:f7:ba:2c:
22:cd:9e:d2:ca:36:56:9c:fe:9a:e0:5e:64:33:28:
df:6a:7b:73:71:33:ff:6c:8f:42:b3:d1:36:20:8e:
bf:54:1a:85:97:c9:56:f8:67:76:31:76:35:08:b4:
3a:6e:76:88:c7:c6:e6:23:3e:0d:17:08:1d:7c:b1:
bd:4c:51:c6:80:06:60:aa:7b:a2:79:fa:84:10:e3:
1c:77:a4:76:df:6b:8a:4f:ee:65:65:11:b8:8b:5a:
bf:e5:1f:dc:30:6c:0f:a1:d2:da:76:6d:b8:80:bb:
95:4b:3c:33:e7:50:1f:33:16:62:12:6f:d2:6e:ed:
48:ad:f2:57:ec:ff:37:50:a6:29:65:58:ce:d1:53:
22:fd:74:87:c7:c8:89:cb:cb:20:2a:b0:ab:4f:bc:
67:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:55:2C:72:B2:0A:AE:B4:1E:D7:EA:BE:9F:C2:C6:ED:EC:52:3E:24
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/SlUscrIKrrQe1-q-n8LG7exSPiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:40:77:07:15:e9:40:9e:82:41:4e:2b:e8:15:71:16:13:36:
bb:51:06:ef:de:a9:e6:4a:5b:d9:69:ef:b8:70:4e:30:5b:99:
e5:a7:fc:72:61:77:c2:67:05:09:60:37:b6:83:6e:a1:ef:9e:
52:d6:6c:cf:79:e6:27:27:ca:75:ef:cc:5e:67:ad:9d:84:37:
29:20:f7:3f:b1:66:85:f0:42:e8:20:56:f6:0a:08:b7:6c:a9:
95:e0:35:18:3a:bf:40:b6:46:01:8e:dd:20:47:77:59:db:11:
44:aa:34:e9:07:f7:52:24:76:64:b6:8a:8b:c6:21:3e:2c:87:
7f:92:3f:80:b7:61:f7:65:9f:55:33:1b:59:2c:60:a4:7d:53:
65:5f:9d:21:4c:7f:a6:50:68:90:d6:de:1a:44:56:87:f5:65:
ad:fe:5a:8a:a2:db:e2:e9:aa:77:3e:c5:1b:8f:f4:a9:3d:23:
a4:e6:3a:b7:e0:fd:e2:13:94:41:67:89:aa:60:6a:bd:30:64:
34:92:24:c0:20:e5:c3:00:66:d8:ed:97:f2:c6:25:84:de:52:
96:dd:00:3f:55:7d:cd:66:53:ea:50:10:0a:de:95:32:0f:1d:
7c:95:57:97:53:3f:6b:3e:41:aa:ab:93:f1:2a:e3:03:3c:c8:
35:9f:c2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 11 12:41:17 2023 by rpki-client on console-ams.rpki-client.org