Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/44fC_S8uMaDLVHwaSJyDpGy5xPA.roa
File: 44fC_S8uMaDLVHwaSJyDpGy5xPA.roa (raw, json)
Hash identifier: E9BMlqlvZZa8P3IjUlVpr/IibjCyQ9Zyoy8aqKXwZ4M=
Subject key identifier: E3:87:C2:FD:2F:2E:31:A0:CB:54:7C:1A:48:9C:83:A4:6C:B9:C4:F0
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 01866F02C4086878370BFA2F0F64B6530713
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/44fC_S8uMaDLVHwaSJyDpGy5xPA.roa
Signing time: Mon 20 Feb 2023 13:28:17 +0000
ROA not before: Mon 20 Feb 2023 13:28:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51274
IP address blocks: 185.42.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:02:c4:08:68:78:37:0b:fa:2f:0f:64:b6:53:07:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Feb 20 13:28:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e387c2fd2f2e31a0cb547c1a489c83a46cb9c4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2b:6e:14:11:3d:7b:6c:00:48:fb:62:d0:c8:
59:fa:81:30:a3:73:92:f4:a9:25:d8:b5:d6:65:b2:
96:75:11:7a:43:5c:46:01:dc:57:11:3a:6f:38:c7:
27:8c:42:83:9f:fb:9b:c3:d4:37:1f:20:aa:a9:89:
56:88:b3:e2:77:1a:c7:62:6c:23:03:6b:87:9b:66:
48:f1:c2:4f:df:f1:12:7d:1a:1c:83:b3:03:e4:8d:
be:4f:48:f1:73:41:b3:67:58:aa:aa:a0:21:c4:26:
c1:c9:2d:13:65:8f:76:09:90:c2:82:58:49:ea:4f:
73:13:d2:8c:06:e5:a0:35:01:43:73:ce:5d:48:81:
da:e7:66:a6:46:28:42:5e:35:39:32:77:44:ae:8e:
01:94:ba:ee:40:0d:dd:34:4f:a4:c9:71:76:15:b6:
4c:f3:c1:8f:c4:35:9f:56:b3:7c:3b:b3:65:8b:30:
a2:07:dc:1f:18:3a:23:d0:d5:47:dd:67:51:2c:ea:
a5:00:e7:16:67:8d:f3:05:a9:ca:2b:53:27:1f:d5:
1b:19:41:07:82:ab:bd:4f:2c:5d:f6:3c:6a:61:d5:
b8:94:ea:0b:14:f0:ac:02:9b:35:45:a6:07:48:21:
75:ab:fa:9b:f5:b6:7a:52:7c:e4:03:b7:61:3e:92:
28:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:87:C2:FD:2F:2E:31:A0:CB:54:7C:1A:48:9C:83:A4:6C:B9:C4:F0
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/44fC_S8uMaDLVHwaSJyDpGy5xPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.25.0/24
Signature Algorithm: sha256WithRSAEncryption
03:97:c3:da:77:b1:5b:1c:b5:76:3a:ab:55:48:2e:78:6a:29:
bc:af:90:a0:ac:58:aa:31:c7:02:73:a3:35:15:ac:d5:b7:5c:
35:4f:29:1c:4f:bd:d7:d8:24:81:da:61:72:dd:fe:1c:97:58:
71:67:57:c9:21:b5:ce:07:3a:c5:f2:89:38:e2:e2:eb:b8:ac:
db:d1:0c:cf:81:64:ae:62:ee:48:36:13:ac:71:fc:a5:94:83:
9e:3b:70:80:1d:27:3e:1a:1c:7c:dc:39:76:85:22:ab:ca:e7:
57:58:a1:90:1e:45:7e:71:9b:d1:44:f1:1f:bb:bf:fd:b4:38:
5e:eb:fa:0b:95:14:1e:7c:af:ba:b0:8f:a0:39:fe:f2:c6:13:
93:59:b4:72:2d:06:4e:a0:dc:42:cb:d8:5d:81:1f:e4:a8:bf:
ae:49:40:fe:a1:08:a2:41:da:f4:20:93:12:54:ff:bc:10:30:
b7:e3:c0:38:06:b0:86:d1:91:bb:2b:dc:b6:94:08:5f:59:ea:
24:71:8e:47:85:ba:cc:c9:00:c1:d9:ba:a4:30:bf:4d:b1:c8:
db:ea:ee:00:b2:ab:66:b0:4f:53:1f:71:f3:95:e5:4b:2b:f7:
70:50:b9:f8:ce:3d:ba:1e:59:5b:38:56:f8:a2:2c:eb:11:17:
a2:53:b6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:35 2023 by rpki-client on console-ams.rpki-client.org