Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/unSpIkT4LNxVGvGOnpyK7GV5iLw.roa
File: unSpIkT4LNxVGvGOnpyK7GV5iLw.roa (raw, json)
Hash identifier: CHSR17vc99yyQAXC/vJFIylaufh18YQKJ0SmMnGIg0s=
Subject key identifier: BA:74:A9:22:44:F8:2C:DC:55:1A:F1:8E:9E:9C:8A:EC:65:79:88:BC
Certificate issuer: /CN=4812ff485ffd794a6948078afe4e076afe617635
Certificate serial: 01856FE7277F49E342F42FCDE4EA47A7595B
Authority key identifier: 48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/unSpIkT4LNxVGvGOnpyK7GV5iLw.roa
Signing time: Mon 02 Jan 2023 00:34:58 +0000
ROA not before: Mon 02 Jan 2023 00:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3242
IP address blocks: 185.149.191.0/24 maxlen: 24
185.149.188.0/24 maxlen: 24
185.149.189.0/24 maxlen: 24
185.149.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:27:7f:49:e3:42:f4:2f:cd:e4:ea:47:a7:59:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4812ff485ffd794a6948078afe4e076afe617635
Validity
Not Before: Jan 2 00:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba74a92244f82cdc551af18e9e9c8aec657988bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:e6:d2:1f:34:bd:e0:ec:f2:61:67:f1:70:
b5:43:ea:85:12:dc:a7:93:61:3d:23:87:92:4d:a1:
be:66:b3:ea:c1:3f:ba:91:fc:49:7a:8f:f1:b5:ca:
f0:31:bf:4e:c0:77:ef:6e:60:c8:6c:ac:ef:67:11:
8f:84:3e:fb:cf:b8:ad:e6:22:70:e3:6a:51:e9:99:
d5:e5:a8:1e:f1:b3:d9:29:0d:c8:48:60:a6:7b:57:
69:86:c1:1e:5b:c7:5a:cd:1f:0d:63:63:01:00:d6:
83:ba:78:87:3f:31:35:62:1f:b8:1e:63:b5:28:76:
29:c6:b3:f0:71:93:5d:e2:23:d3:b2:08:36:5e:2d:
91:38:a4:bd:2d:8f:67:4d:3c:b7:9a:71:87:56:83:
fc:25:7b:ad:0e:38:b3:49:fa:38:f8:2b:a0:94:57:
6d:04:7b:c6:4b:05:c8:a9:13:34:f3:79:75:cb:65:
75:0b:d2:3d:53:5d:dc:9d:2a:63:64:13:10:4b:73:
c3:4d:4a:a9:8e:f3:72:0d:d3:32:0b:92:53:10:b5:
2d:54:79:2b:70:c4:94:8c:46:ac:17:c5:ea:4f:7d:
e6:5a:1d:b6:6b:bf:aa:be:49:0b:3a:01:b2:69:34:
cc:70:f8:64:db:2d:9c:48:bd:b3:da:99:be:d8:94:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:74:A9:22:44:F8:2C:DC:55:1A:F1:8E:9E:9C:8A:EC:65:79:88:BC
X509v3 Authority Key Identifier:
keyid:48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/unSpIkT4LNxVGvGOnpyK7GV5iLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.188.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:57:94:66:d7:b6:31:6d:e5:66:f8:ca:8b:93:e6:d0:66:8c:
6a:37:3a:25:99:f4:70:6e:e4:11:cf:85:61:1e:7d:0a:f3:65:
41:ed:f1:c3:10:7f:4f:ba:fd:dd:59:07:24:9d:68:d0:7b:2a:
4a:26:a9:59:21:27:cb:e9:d7:88:ba:78:41:b6:f9:45:a8:c5:
06:b1:d5:f0:bf:96:4b:4c:1a:56:56:d2:71:6c:00:f3:72:d6:
e1:52:b5:b0:d5:90:8d:68:df:73:74:dc:4c:cb:26:87:6e:d7:
56:df:7f:a7:df:4a:38:07:fb:2c:af:16:b7:bd:33:44:6c:55:
fa:b8:53:14:79:90:f0:92:8b:07:a2:9f:dc:58:7b:3c:c4:50:
d1:79:45:c9:27:7a:4c:a1:d6:5a:be:39:99:90:92:bd:ee:3d:
d0:f2:cd:6f:f6:f0:b0:ba:be:6b:ef:e9:55:b3:eb:89:ee:92:
ac:11:3c:e1:9a:b2:ac:72:a3:c4:75:4b:76:f8:10:90:af:d1:
c4:c3:46:d9:b2:b6:a3:09:e9:bf:bb:fd:47:f7:19:03:41:5e:
99:10:b9:b9:8d:6f:fc:fd:9b:56:b5:81:fa:c6:82:34:84:9e:
1e:7e:dd:0d:5b:4a:ad:52:c1:e0:19:f3:cb:ef:56:b8:ed:25:
0b:87:e2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:51 2024 by rpki-client on console-ams.rpki-client.org