Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/ClMLU2fttb9sZ1IxbiQOzkKvUk4.roa
File: ClMLU2fttb9sZ1IxbiQOzkKvUk4.roa (raw, json)
Hash identifier: XqaPKJo7C1wFgTmCDrLaOUUKv7AmrgfxLmYO2JlEoqs=
Subject key identifier: 0A:53:0B:53:67:ED:B5:BF:6C:67:52:31:6E:24:0E:CE:42:AF:52:4E
Certificate issuer: /CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Certificate serial: 01856F66DEFC85C106E4A7E3CB6F58756BB4
Authority key identifier: E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/ClMLU2fttb9sZ1IxbiQOzkKvUk4.roa
Signing time: Sun 01 Jan 2023 22:14:50 +0000
ROA not before: Sun 01 Jan 2023 22:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31543
IP address blocks: 185.236.188.0/22 maxlen: 24
2a0d:c900::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:de:fc:85:c1:06:e4:a7:e3:cb:6f:58:75:6b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Validity
Not Before: Jan 1 22:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a530b5367edb5bf6c6752316e240ece42af524e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a2:5e:d8:76:c1:36:4d:89:3b:4f:ae:16:27:
04:1a:f4:c3:f4:9a:fe:24:81:6a:4c:ed:2f:04:bf:
a6:1d:53:76:32:dc:62:44:7f:79:b0:f3:f3:c5:b1:
41:ad:51:d8:be:0b:3d:cb:14:c2:d3:d1:e1:cd:2a:
af:31:b7:46:5d:bf:59:21:27:67:e9:0c:83:ed:8a:
f5:78:3b:ec:a9:9a:64:ff:a6:10:e5:d2:48:6c:d8:
69:83:d4:56:66:70:81:08:d9:45:11:f8:74:21:54:
fe:a4:84:ee:fb:e8:ee:b9:43:75:52:3a:64:c1:44:
c7:30:d6:d5:e4:85:30:7a:96:24:81:dd:40:b8:ad:
07:13:79:86:b2:7d:70:ad:93:65:21:cc:2c:86:2c:
67:d9:f8:08:69:e3:ed:01:18:6f:20:74:2b:ce:74:
1c:e0:b1:43:5d:34:48:b7:53:0b:70:de:f1:79:15:
83:1d:22:d5:0b:2f:6c:81:a5:0f:23:c0:0a:98:a9:
cd:f4:89:b4:13:c8:b8:dc:ff:20:c3:92:0f:cb:18:
64:2b:e8:1f:36:ec:a5:0d:45:b0:ec:7d:12:72:b8:
fa:8f:ec:58:dd:55:92:a0:87:90:16:25:d3:49:06:
ea:8f:7f:23:52:1a:3f:5e:56:2c:4c:81:4e:7e:e7:
f0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:53:0B:53:67:ED:B5:BF:6C:67:52:31:6E:24:0E:CE:42:AF:52:4E
X509v3 Authority Key Identifier:
keyid:E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/ClMLU2fttb9sZ1IxbiQOzkKvUk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.188.0/22
IPv6:
2a0d:c900::/29
Signature Algorithm: sha256WithRSAEncryption
63:ce:ce:28:e1:be:52:40:b7:e1:5b:4e:84:1c:0d:3b:b4:99:
23:ab:5e:23:b4:38:29:1a:cf:8b:35:0e:fc:e2:63:50:fc:24:
c2:4c:4a:f0:55:94:d7:08:49:e2:68:04:1d:93:93:53:4d:1e:
4d:69:62:49:0f:8b:6d:59:b5:69:90:bc:09:ca:f8:c6:0c:13:
f5:68:4f:23:57:10:be:f1:dd:12:9e:cb:e0:5d:ca:29:e2:a4:
0c:c0:b9:47:a8:e6:86:ad:04:82:4d:11:0d:70:43:d1:c8:62:
4d:6f:5c:8d:8f:1f:9d:0e:6f:0b:f2:52:c2:1a:b3:80:23:99:
2d:12:2f:6d:1a:32:ea:3b:d7:1d:50:8d:82:23:27:a1:08:1b:
8e:ca:c9:be:ca:de:ba:47:6a:e6:64:44:7b:bb:38:83:47:4f:
61:48:c1:16:82:9e:bb:8c:58:c7:63:e0:3a:e8:79:f7:fa:57:
a3:8d:90:b7:02:94:36:5d:54:6b:38:07:6d:b5:f5:59:d5:2c:
74:52:10:c7:69:c6:c5:27:cb:b3:a4:29:5d:62:cd:a4:da:ef:
54:a3:17:60:5b:02:a7:94:ac:50:48:09:bc:e8:07:a7:28:a7:
1d:37:59:d0:72:cd:c3:69:c0:61:3d:48:cb:2e:71:d2:cd:01:
02:45:a6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:24 2024 by rpki-client on console-ams.rpki-client.org