Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/1-B0_evl0hlfutKZU93vHcJgwS2Q.roa
File: 1-B0_evl0hlfutKZU93vHcJgwS2Q.roa (raw, json)
Hash identifier: wBqgCYsGD7LOAe/PKw92gogjT3HGUgRJ0K1iLno/iw4=
Subject key identifier: F8:1D:3F:7A:F9:74:86:57:EE:B4:A6:54:F7:7B:C7:70:98:30:4B:64
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01856C53D6924894C588E24A23A9713E210D
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/1-B0_evl0hlfutKZU93vHcJgwS2Q.roa
Signing time: Sun 01 Jan 2023 07:55:11 +0000
ROA not before: Sun 01 Jan 2023 07:55:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211327
IP address blocks: 185.254.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Mar 2023 09:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:d6:92:48:94:c5:88:e2:4a:23:a9:71:3e:21:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 07:55:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f81d3f7af9748657eeb4a654f77bc77098304b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2e:52:33:34:62:99:26:f3:16:67:32:d4:3a:
4e:7f:d2:85:de:b8:bc:c0:a6:1b:b6:ff:c8:3c:fb:
63:0b:22:3c:f4:51:96:f9:09:c1:c7:2a:75:b2:03:
91:0a:e7:88:a0:f3:75:f4:d8:6e:6e:84:1f:0f:12:
ca:08:24:db:c9:5c:60:70:72:07:b6:b1:53:60:01:
59:1d:32:da:ea:99:f8:ae:fd:3c:aa:08:55:6d:a9:
9d:a0:ca:b8:6e:f4:ee:35:66:38:b7:db:ce:2b:51:
c7:09:46:e9:7f:64:a4:03:f2:75:d8:4a:a6:01:2d:
98:fc:ac:61:52:af:ad:89:bb:b8:ac:09:8c:51:1d:
d5:79:87:b6:5d:b4:bf:c0:5e:2c:41:13:aa:c5:a3:
cf:6a:2c:02:d5:96:7b:3d:66:12:32:29:d9:7b:e4:
b4:13:74:6a:11:7f:66:11:2b:67:24:35:7c:12:35:
01:53:0f:ab:4e:07:ea:1f:d1:05:1c:76:3c:3f:5f:
88:81:18:3c:e9:30:f1:84:77:63:6a:91:92:16:1f:
3f:2d:9e:f7:41:84:48:5f:30:c5:c9:a0:03:75:4a:
5c:ed:d8:39:3c:ae:c1:46:31:75:57:c4:d7:e9:18:
a8:85:e0:bf:ed:16:cc:46:0e:32:27:f9:70:fd:ed:
d8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1D:3F:7A:F9:74:86:57:EE:B4:A6:54:F7:7B:C7:70:98:30:4B:64
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/1-B0_evl0hlfutKZU93vHcJgwS2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.28.0/24
Signature Algorithm: sha256WithRSAEncryption
41:6a:b2:d7:e9:04:05:5f:97:be:27:18:ac:b7:87:11:f7:94:
8f:e3:a7:94:ca:20:0f:55:9a:06:e5:96:77:09:bc:7f:9d:72:
2f:a7:b1:fa:1d:52:00:c1:6b:4a:19:08:05:98:d7:18:37:e5:
e2:47:e3:2e:0a:2e:77:75:02:32:11:68:4b:29:b1:c8:18:90:
ea:e7:58:0e:15:d3:a0:1b:88:b1:84:29:34:52:db:5d:6a:a5:
fa:60:ce:e2:e5:cf:0a:79:aa:3b:54:72:34:4a:55:9d:4d:8f:
49:9e:7f:b4:a6:c2:38:0e:64:79:a5:86:1a:f5:04:3b:88:02:
c0:5b:96:0f:55:3e:e1:95:bc:a7:f8:25:f6:de:04:ce:59:fd:
31:ff:0f:4f:d1:82:fb:20:69:4c:6d:6c:56:42:96:b6:df:da:
27:d3:46:20:8a:88:d0:7b:69:3e:c3:50:54:ce:a6:2b:3d:0e:
37:80:d3:69:fb:fc:19:d2:06:0e:fb:d6:d4:f2:10:b7:ef:65:
8f:ef:63:73:a8:3f:fb:ca:13:93:98:d5:b1:90:b4:c4:62:a4:
0a:b0:7f:af:2d:9d:4c:dc:a5:6b:50:b1:7d:2a:c4:56:d5:a7:
d3:51:d4:a4:ee:1b:21:60:1b:73:7f:26:5e:f3:e2:0e:7d:1b:
f4:86:dc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:24 2024 by rpki-client on console-ams.rpki-client.org