Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/56siXM6fPXRSVQjnygmARDusmAk.roa
File: 56siXM6fPXRSVQjnygmARDusmAk.roa (raw, json)
Hash identifier: QAggtKdFHPjKQD89FN4hViDaf7cL39XCaxxDj+4ZYdE=
Subject key identifier: E7:AB:22:5C:CE:9F:3D:74:52:55:08:E7:CA:09:80:44:3B:AC:98:09
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0185E8ADCA31B2499595AF64DBC379B303FC
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/56siXM6fPXRSVQjnygmARDusmAk.roa
Signing time: Wed 25 Jan 2023 11:26:21 +0000
ROA not before: Wed 25 Jan 2023 11:26:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5580
IP address blocks: 185.162.112.0/22 maxlen: 22
195.143.68.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:ad:ca:31:b2:49:95:95:af:64:db:c3:79:b3:03:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 25 11:26:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7ab225cce9f3d74525508e7ca0980443bac9809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f5:65:2a:89:20:bf:2d:eb:79:c0:9d:48:cb:
b4:58:da:0f:d0:63:49:0c:22:02:94:a8:b4:98:e2:
f4:61:8f:a8:e2:a2:29:9a:57:11:4c:ca:e5:69:25:
cf:b6:4f:a2:88:c3:8b:46:29:a5:11:fc:2f:b7:95:
c4:3a:a0:58:29:1a:b2:dd:b4:bd:53:fe:dd:4e:8a:
c7:74:15:5c:67:74:f0:9a:ec:8a:aa:0c:7d:7d:d4:
a2:3a:33:10:3e:50:f7:f5:2a:3f:70:ed:49:0e:33:
e1:5c:86:3c:71:f1:0d:0e:cc:8a:2d:59:3f:86:d2:
38:dc:c3:26:79:b6:9e:f0:da:20:ea:bb:ea:8b:ca:
b8:1b:29:7d:db:4c:c1:ff:d2:06:f1:be:b2:69:bc:
d6:4a:cb:16:16:2c:b6:dc:f6:fe:f2:45:78:d8:6e:
f3:7b:2d:db:d0:e9:d4:00:b3:13:04:63:9d:eb:4a:
a9:b0:de:93:6f:fd:04:f0:2a:69:36:e1:1b:4e:6d:
ba:f8:92:73:a9:5d:98:69:4d:f7:ae:56:5b:00:b0:
27:9f:a0:ff:6a:96:d1:82:2e:6d:b6:58:9e:2a:42:
6d:61:cb:92:b1:7a:44:11:c5:65:49:fb:00:17:1b:
b2:d2:43:af:a7:47:c6:5e:cb:3a:20:29:8b:21:4d:
2a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AB:22:5C:CE:9F:3D:74:52:55:08:E7:CA:09:80:44:3B:AC:98:09
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/56siXM6fPXRSVQjnygmARDusmAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.112.0/22
195.143.68.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:04:6a:0f:2d:e1:02:77:dc:94:3c:4a:22:43:e3:d8:dc:f4:
0f:e1:7c:38:13:ae:ad:84:c9:2f:cf:7f:45:92:d1:fb:12:cd:
0b:96:5c:83:41:c0:36:e0:21:df:c8:42:e6:61:ce:01:a9:a1:
63:fb:88:98:a4:85:09:6d:e4:85:6e:b5:27:df:b0:12:c0:dd:
09:25:8b:da:27:18:e8:a0:66:00:f4:e4:42:d1:9f:4f:48:2b:
41:16:4a:1d:68:d2:83:82:6e:ca:79:cc:f4:44:f4:6e:b2:f1:
76:35:ee:00:6c:e9:cb:65:65:be:f8:58:3f:6d:87:8a:8b:c5:
2d:90:f3:d2:f1:c4:1c:ea:22:1a:7c:6a:36:25:67:dc:40:88:
2e:60:2f:d7:71:95:e6:ff:cb:e6:24:bb:96:89:b9:2e:8f:1d:
b1:4e:7e:ce:55:c8:07:d3:58:69:4b:f3:c8:ef:fc:52:ed:92:
71:85:da:96:25:1f:96:2b:e3:27:6e:3c:4d:7a:17:5c:7c:7b:
a0:e1:f0:f1:bd:2e:3c:86:6b:a9:8e:b0:f9:c4:d3:e8:84:57:
7a:14:0f:d3:f0:de:92:03:1d:1e:46:df:f7:26:f5:1f:9a:df:
44:5d:99:4d:0e:8d:0e:32:ec:d9:12:93:f1:82:cb:41:0d:00:
aa:cc:b4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:38 2024 by rpki-client on console-ams.rpki-client.org