Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/1ovDjijWaFCSeUgKluadO1jWaQY.roa
File: 1ovDjijWaFCSeUgKluadO1jWaQY.roa (raw, json)
Hash identifier: vFJwvGmLubUmIzi/qKESn+HawTLCFrnRvQk+jgU/dcM=
Subject key identifier: D6:8B:C3:8E:28:D6:68:50:92:79:48:0A:96:E6:9D:3B:58:D6:69:06
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 018572C39921CF34A37CC3AE89928AC9ACAC
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/1ovDjijWaFCSeUgKluadO1jWaQY.roa
Signing time: Mon 02 Jan 2023 13:54:59 +0000
ROA not before: Mon 02 Jan 2023 13:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 185.138.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:99:21:cf:34:a3:7c:c3:ae:89:92:8a:c9:ac:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Jan 2 13:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d68bc38e28d668509279480a96e69d3b58d66906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:38:58:2e:35:4d:05:4d:59:67:83:fd:fe:
a2:c2:a3:1b:99:64:06:7b:d7:40:5c:7e:97:fb:b9:
9e:82:85:77:ae:30:3a:3e:d1:82:2f:d9:5b:5c:69:
71:a4:8a:23:1c:3c:ca:ba:db:f8:63:d9:7e:cf:52:
73:22:33:79:6c:5a:7f:2f:71:61:fc:7b:a9:45:22:
6f:ec:cf:e8:fb:30:59:18:72:16:23:61:56:81:fa:
d8:ed:a2:62:8c:45:be:38:70:eb:73:e2:be:0f:7b:
26:ab:a6:05:49:c1:17:fa:2b:d1:05:1b:3b:b8:d5:
95:6f:03:98:45:66:59:df:5c:ef:cd:8f:85:b1:e8:
a9:01:85:e8:01:f5:57:14:3d:b8:17:18:34:f6:cb:
b2:b6:05:ae:00:84:d5:c0:d2:5f:29:58:02:b0:eb:
2a:ed:3a:59:c8:1e:86:fd:5a:1b:09:1d:80:22:87:
e6:c1:09:33:c3:b4:f8:d9:95:a4:ea:b9:26:40:01:
e2:39:ca:d3:e0:00:6e:aa:4b:0e:20:cc:02:11:72:
a0:e8:c4:16:37:5d:d2:43:44:06:35:7c:54:2b:a1:
13:fe:68:e8:29:24:61:72:88:1f:a5:45:49:1b:ad:
be:fc:20:91:ea:6f:e7:d1:3b:7b:a4:65:d2:28:aa:
6e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8B:C3:8E:28:D6:68:50:92:79:48:0A:96:E6:9D:3B:58:D6:69:06
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/1ovDjijWaFCSeUgKluadO1jWaQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.122.0/24
Signature Algorithm: sha256WithRSAEncryption
56:14:c8:16:9f:dd:8a:c4:d8:28:cd:b9:af:ea:1c:6f:7b:2c:
82:e5:4e:72:db:a5:5e:f3:50:41:7b:c1:d1:7e:cf:a8:e2:82:
4f:a0:4e:2d:25:41:c0:b8:7a:ac:72:66:9f:3c:7d:78:f6:de:
f4:cc:e9:7b:86:9a:83:15:ac:5d:da:0b:46:7a:af:a2:8a:45:
cf:01:71:a0:48:00:b2:86:87:e0:6d:d9:85:f6:aa:3d:38:7e:
ca:d6:d5:4e:d7:8e:64:06:a8:49:d0:5c:34:34:4c:f9:aa:ac:
a5:c5:f9:3c:86:1e:04:7b:c9:fe:5d:e3:8c:51:57:74:74:e4:
59:ff:d2:74:ae:7a:07:5b:3e:ce:00:db:3a:55:68:5b:a4:95:
02:fc:0b:3f:3f:7a:19:72:1b:f0:8c:1b:4f:75:89:63:72:ce:
00:be:9e:a9:58:ae:dd:44:2c:b6:fa:46:e0:68:ce:87:6b:fe:
b3:cb:55:3f:79:35:d2:7b:b8:63:04:a5:e9:40:ef:16:b2:40:
68:7e:f1:09:64:0a:61:14:7c:43:a7:64:ad:0b:ea:84:74:e6:
1f:98:47:0d:e5:4a:85:45:33:61:0f:4a:e9:66:6a:62:92:11:
05:9d:4b:13:db:67:ef:8f:d8:ce:b9:ac:2a:2a:27:79:b3:20:
ba:2c:b4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:04 2024 by rpki-client on console-ams.rpki-client.org