Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1b1qdf_jUnSWAZEfsn3I1_6E_zA.roa
File: 1b1qdf_jUnSWAZEfsn3I1_6E_zA.roa (raw, json)
Hash identifier: 1TuVSNy0EHctxf0NLlY/c1iTKTi0iY8GqN2GJS/R/yE=
Subject key identifier: D5:BD:6A:75:FF:E3:52:74:96:01:91:1F:B2:7D:C8:D7:FE:84:FF:30
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185A340195401676E967E51DA7AE922B33B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1b1qdf_jUnSWAZEfsn3I1_6E_zA.roa
Signing time: Wed 11 Jan 2023 23:52:45 +0000
ROA not before: Wed 11 Jan 2023 23:52:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25198
IP address blocks: 185.238.189.0/24 maxlen: 24
185.238.190.0/24 maxlen: 24
2a0e:97c0:a80::/44 maxlen: 48
2a0e:97c0:300::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a3:40:19:54:01:67:6e:96:7e:51:da:7a:e9:22:b3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 11 23:52:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5bd6a75ffe352749601911fb27dc8d7fe84ff30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a0:1b:12:76:59:c1:83:42:de:36:02:1f:8f:
ca:03:5a:78:8c:5f:81:f5:21:e3:dc:b8:9c:b8:6c:
30:6c:3c:4a:a4:80:0e:e1:8e:7a:e0:c6:f7:d8:14:
32:1e:ac:20:ad:c6:9c:70:4c:c6:c6:68:f2:a5:89:
90:91:be:a3:33:33:89:35:b1:2c:50:0c:32:cd:d2:
cf:4c:d1:96:10:da:73:70:af:55:02:1b:c3:8b:34:
82:cd:89:56:58:68:1b:84:1f:17:98:80:9a:fa:48:
da:4a:7f:33:de:da:40:c0:1f:6d:43:65:e2:d4:98:
8f:87:76:6c:e2:bb:7e:d4:f6:e4:2b:e5:34:43:2e:
37:48:06:fc:a5:ab:0c:ff:a0:ef:19:85:83:1c:1e:
ed:69:19:d2:29:1d:bc:5e:11:b4:27:84:bc:b4:12:
ca:2e:f6:80:87:d9:8a:cf:51:8a:6a:65:dd:6e:fc:
48:32:ed:dc:0d:ab:25:5b:1a:cb:71:01:6e:b0:a5:
12:eb:23:06:ba:6f:6a:07:f0:13:86:c3:a3:c7:ca:
90:74:a7:3f:6e:d1:82:b9:8d:17:e0:0e:34:87:67:
d0:3f:66:f8:75:e3:4d:e7:bc:9d:75:77:de:a7:33:
7e:2d:1c:77:9f:bc:c8:ff:19:95:38:0d:ec:50:91:
24:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BD:6A:75:FF:E3:52:74:96:01:91:1F:B2:7D:C8:D7:FE:84:FF:30
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1b1qdf_jUnSWAZEfsn3I1_6E_zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.189.0-185.238.190.255
IPv6:
2a0e:97c0:300::/44
2a0e:97c0:a80::/44
Signature Algorithm: sha256WithRSAEncryption
49:c6:83:f9:11:c9:0f:89:e9:c7:e5:2f:67:65:d1:4b:08:26:
d7:c0:e7:08:78:d1:08:00:4a:af:d0:d2:bb:89:62:7c:80:99:
f2:d2:ff:cd:1a:8b:a2:bc:c7:b0:45:f0:bd:cd:d5:57:f1:c2:
c7:16:f1:6a:ab:50:73:28:da:06:f4:50:dd:87:01:0b:68:b5:
cd:88:a4:8d:bd:83:8b:c9:7c:b8:10:12:8d:14:13:71:d5:07:
1f:93:d6:93:d0:ca:8c:8f:ca:55:e1:5f:f6:24:b1:d5:b1:27:
f5:26:40:58:b6:69:18:ee:c3:7f:3a:a7:45:62:15:e4:58:7f:
3f:ec:b5:8d:59:a8:c8:24:ee:1c:6d:93:7d:a0:e5:51:dc:41:
9a:e3:d7:dc:dc:c1:9c:7e:25:d4:50:fc:05:a3:73:c2:19:86:
0b:9a:f3:a5:16:77:c5:ca:d1:53:5d:3f:29:e3:7b:c3:7f:80:
64:52:f0:9e:3c:72:2a:db:82:8d:59:7f:36:52:24:bf:28:ab:
17:bb:7d:5b:20:8c:8f:4d:48:26:ae:84:c9:42:26:6a:6c:d7:
b8:6e:09:a1:0a:12:d1:a5:90:62:a6:68:14:2d:64:8d:c2:50:
6e:10:b7:cc:bb:ea:ee:a0:d7:4d:09:8b:88:ea:6d:91:44:57:
19:58:27:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:54 2023 by rpki-client on console-ams.rpki-client.org