Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/iYZdTmuPckaP-xCr-ZdWpuncmzI.roa
File: iYZdTmuPckaP-xCr-ZdWpuncmzI.roa (raw, json)
Hash identifier: RNOtRmEZQB8C7IvQU/gRTxbn6ZyH4zPHPizWv9r8mXc=
Subject key identifier: 89:86:5D:4E:6B:8F:72:46:8F:FB:10:AB:F9:97:56:A6:E9:DC:9B:32
Certificate issuer: /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial: 01856DC1ABF7FFD970DD10A84920FF456238
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/iYZdTmuPckaP-xCr-ZdWpuncmzI.roa
Signing time: Sun 01 Jan 2023 14:34:46 +0000
ROA not before: Sun 01 Jan 2023 14:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 185.124.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:ab:f7:ff:d9:70:dd:10:a8:49:20:ff:45:62:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
Validity
Not Before: Jan 1 14:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89865d4e6b8f72468ffb10abf99756a6e9dc9b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:1e:fc:45:6f:f3:a8:b2:3b:cb:51:a8:b9:
20:35:c3:57:72:fb:3e:6f:dd:5b:e9:07:c4:2e:6a:
b9:2e:d6:f5:5e:c9:13:7b:f5:b8:83:c2:1d:a6:82:
db:f2:4e:4d:e6:e0:14:5a:a5:ba:03:17:bf:39:24:
c2:d8:e0:4c:77:46:0f:58:86:6b:61:b8:67:5e:f9:
4f:b9:01:d2:35:ab:d8:b7:3e:19:71:e0:e6:b9:5b:
d3:0c:de:e2:8a:c9:93:63:69:47:47:90:34:ac:76:
10:6f:72:6f:47:f9:a3:a5:e6:02:a5:47:1e:e2:ae:
c6:4a:61:d8:84:0e:7a:6c:ce:85:1b:e4:07:ea:d7:
ed:72:80:e4:1e:e3:17:8b:87:5e:fa:80:8f:eb:d4:
b9:3a:e1:a8:bf:40:65:bb:de:d7:bf:92:aa:ef:e7:
6f:17:90:df:08:5a:b7:71:bb:ce:93:f7:d4:52:fe:
23:aa:48:54:70:67:3a:a1:45:69:99:24:69:68:4b:
f8:8e:7f:fa:30:4d:eb:e2:7e:d2:55:bd:fb:3e:78:
ff:0b:20:3d:a4:b9:1a:34:2f:e2:f0:82:d1:5f:16:
85:2a:82:08:41:23:cc:91:91:1d:dc:e0:dc:c0:be:
4d:eb:98:e8:90:a6:31:72:bd:ce:be:91:d7:83:16:
7a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:86:5D:4E:6B:8F:72:46:8F:FB:10:AB:F9:97:56:A6:E9:DC:9B:32
X509v3 Authority Key Identifier:
keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/iYZdTmuPckaP-xCr-ZdWpuncmzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.48.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ec:ca:83:46:93:62:f4:fd:35:4e:dd:75:6f:86:75:fe:3d:
52:de:dc:76:6c:18:38:dc:0a:8a:b1:a8:87:8d:89:23:71:21:
26:94:7a:5e:95:2a:86:e4:33:7e:6a:9a:23:5e:1c:ab:37:28:
88:1d:6e:fa:72:c6:6f:04:41:94:27:41:a3:41:db:8b:9c:37:
5a:64:3b:80:5f:69:52:5a:fc:f5:39:46:c0:76:55:8e:28:b3:
88:5c:9f:4e:66:c3:36:c2:1a:89:11:9a:7c:8c:cc:f6:e1:c1:
26:b9:48:56:ae:49:ae:cf:2f:f1:3b:13:96:4b:a5:13:9f:02:
17:44:84:8b:cb:97:bd:75:69:23:63:cf:b3:6e:1a:50:d5:af:
0d:b5:5d:74:82:e3:38:d8:dc:71:6f:2a:2c:8b:4d:41:b1:11:
db:f4:9b:d2:27:e2:f8:81:77:32:a6:0e:ee:1f:89:64:bf:b9:
24:94:d8:ca:da:9d:c0:6e:b7:e5:d6:08:b9:3e:58:df:c2:46:
8a:70:de:66:cd:98:a3:73:d0:fc:82:8a:3b:3b:92:be:fb:d3:
1e:9e:1d:6c:52:79:c1:86:f6:09:d2:79:31:b6:94:be:a3:00:
b2:1e:01:4d:00:6c:a1:5c:08:12:d5:40:a8:57:e6:49:eb:4b:
5d:ef:88:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:28 2024 by rpki-client on console-ams.rpki-client.org