Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/s5gUGE8bUoows1MelFjYY-zuxQk.roa
File: s5gUGE8bUoows1MelFjYY-zuxQk.roa (raw, json)
Hash identifier: U8PEAiuR7j0kaXgyFuCkDwpvXB/w1WrrdDJOBWA8V1U=
Subject key identifier: B3:98:14:18:4F:1B:52:8A:30:B3:53:1E:94:58:D8:63:EC:EE:C5:09
Certificate issuer: /CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Certificate serial: 01856C78380F84B3D826B44AE4A6C36F0A5D
Authority key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/s5gUGE8bUoows1MelFjYY-zuxQk.roa
Signing time: Sun 01 Jan 2023 08:34:56 +0000
ROA not before: Sun 01 Jan 2023 08:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64482
IP address blocks: 185.189.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:38:0f:84:b3:d8:26:b4:4a:e4:a6:c3:6f:0a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Validity
Not Before: Jan 1 08:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b39814184f1b528a30b3531e9458d863eceec509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:b5:8c:ba:95:56:95:fc:5f:f2:4a:ec:9d:
fb:71:e6:b9:e7:7f:c8:06:f4:7b:fd:9d:d8:d4:2e:
54:4b:c2:3e:5a:71:dd:f2:b5:ff:46:f8:44:9c:d7:
df:75:69:db:d1:07:3d:ec:e7:8b:7f:d8:ba:b0:86:
9d:72:63:7c:50:3f:49:10:e8:77:79:90:dd:9a:54:
8f:fe:b5:01:79:83:8f:55:ae:9a:c3:30:18:08:06:
d7:1d:71:4c:6b:89:53:45:51:dc:25:25:42:68:f1:
96:ae:39:89:30:1c:73:13:c2:53:15:74:b4:7b:90:
36:32:49:d6:9f:1b:6c:5f:ff:7e:fa:0e:84:f0:8a:
9f:9f:b5:3c:a1:07:40:e5:3e:a1:95:32:46:15:03:
38:22:a4:62:a6:5f:98:84:88:bd:47:a1:62:0b:ad:
65:10:31:42:5f:c2:f0:33:c7:ed:79:82:70:1a:f0:
56:38:c3:e2:e6:56:38:7f:a8:21:26:5a:d1:db:1d:
4a:0a:7c:35:fc:97:3f:2b:f7:e2:3b:cf:c9:b5:46:
28:85:63:f9:70:fe:72:91:96:94:d3:45:1d:6d:e9:
c8:44:73:4c:79:e6:f2:d9:ba:ba:08:32:22:f8:77:
c0:31:70:d2:be:19:7d:1b:9c:1f:14:e4:aa:4d:26:
5e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:98:14:18:4F:1B:52:8A:30:B3:53:1E:94:58:D8:63:EC:EE:C5:09
X509v3 Authority Key Identifier:
keyid:6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/s5gUGE8bUoows1MelFjYY-zuxQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.74.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:22:f2:56:2e:4d:a4:9e:dc:16:6c:40:2b:f7:5f:45:8d:05:
a7:bf:25:2a:db:ee:20:f6:c5:8b:cc:63:dd:34:b3:46:a0:8f:
c0:5c:2b:8d:ce:c7:15:22:7c:21:15:91:24:8f:a5:30:db:27:
64:9b:2f:9d:9b:c8:76:1c:9d:47:50:76:b2:6e:a1:10:ba:aa:
6e:87:17:58:5f:81:44:22:91:54:13:e2:21:d7:25:8f:f7:2a:
ad:7a:64:0d:a0:46:26:af:7e:c4:75:5e:d5:b6:f8:10:e4:72:
a1:e0:91:56:f5:de:5f:af:ad:b9:d7:e2:35:90:df:e8:27:5d:
55:e7:83:bb:33:69:76:b1:07:b5:0c:ae:a2:d1:5e:5c:8c:a1:
f5:80:aa:2f:29:e0:95:16:85:8c:a2:bc:bf:f4:62:67:90:e6:
93:24:b7:10:48:66:bf:1c:15:0d:d0:67:3a:3b:6e:42:55:c0:
df:35:e5:7a:b1:0c:da:1d:41:26:14:08:4d:f5:4c:70:c9:54:
e9:b0:62:0a:91:48:46:75:4a:33:9d:75:64:73:4b:4a:98:6f:
68:7c:5f:95:b8:38:a0:f4:54:c4:36:42:1f:68:f8:31:ed:06:
a1:33:7e:b3:6f:63:8c:e9:7e:79:63:f7:09:ec:5e:77:f1:ce:
2d:27:a7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:13 2024 by rpki-client on console-ams.rpki-client.org