Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/R3LHmRO0imHcBX-D6dvBIrFcGxQ.roa
File: R3LHmRO0imHcBX-D6dvBIrFcGxQ.roa (raw, json)
Hash identifier: RiX/ZHTdX7kbB6hzFTVjq0Bh/9jfAepbQbq3QAHWsdY=
Subject key identifier: 47:72:C7:99:13:B4:8A:61:DC:05:7F:83:E9:DB:C1:22:B1:5C:1B:14
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 01856C25B4ADAA3A875E634C5ACA7E2C9F7F
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/R3LHmRO0imHcBX-D6dvBIrFcGxQ.roa
Signing time: Sun 01 Jan 2023 07:04:48 +0000
ROA not before: Sun 01 Jan 2023 07:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201935
IP address blocks: 82.85.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:b4:ad:aa:3a:87:5e:63:4c:5a:ca:7e:2c:9f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Jan 1 07:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4772c79913b48a61dc057f83e9dbc122b15c1b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:72:a2:db:1c:71:5e:4b:d5:94:43:b6:59:
a4:0c:d6:0c:75:16:75:a7:48:78:e3:4f:1a:55:44:
d3:cd:41:a1:d3:86:fb:bf:e0:c7:e3:4e:29:a4:1d:
59:8f:14:be:36:a9:a2:89:91:08:af:25:fb:6a:23:
85:8e:b2:b9:ba:c8:25:04:5f:63:98:b9:c6:20:c5:
93:02:a0:95:ba:c2:ea:2f:9b:32:c5:e5:7e:1f:c1:
53:a6:0c:4e:5d:4c:d9:29:b4:bc:c4:c3:a9:d3:c6:
a0:df:69:2f:b0:2d:8c:b7:ef:b2:91:7d:3b:40:04:
a0:08:88:d7:c1:ed:89:87:6a:8d:2d:08:aa:f1:ae:
e0:43:50:96:28:05:62:c3:6c:74:e6:77:b2:70:4d:
42:97:6c:a4:7f:b9:6d:9d:c1:9e:8d:0d:68:44:22:
b7:97:b4:3a:b4:78:46:be:14:6e:7d:eb:d1:ec:ea:
cb:92:70:ec:a7:84:9b:9d:88:0e:a4:1d:ac:68:d0:
60:da:0c:56:c1:c4:e1:f9:9d:14:16:96:28:00:dd:
c1:fd:51:dd:c5:a0:4d:b5:c2:d9:9a:d3:1d:90:a7:
cb:30:c4:8b:db:47:db:35:2a:8e:42:7e:c4:e2:95:
73:3e:68:96:2a:b8:35:3e:6a:bf:f9:56:d5:d7:3e:
ae:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:72:C7:99:13:B4:8A:61:DC:05:7F:83:E9:DB:C1:22:B1:5C:1B:14
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/R3LHmRO0imHcBX-D6dvBIrFcGxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.85.176.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:06:15:37:8a:21:5a:02:ff:bc:34:3c:a5:c7:e4:45:2e:46:
9f:c1:77:ee:0e:4c:7e:3f:70:ae:38:89:b3:70:8a:fc:ac:7d:
dd:27:33:ee:3b:8e:11:57:da:e6:11:bc:fe:86:85:4e:cb:c6:
1a:ea:b6:8b:b6:2f:fc:a8:7e:26:f9:c0:0e:ea:00:a2:68:44:
8e:8f:41:e1:b3:18:48:0a:c5:ff:8c:1b:be:11:a5:70:41:d2:
c1:74:81:a5:b7:37:60:b9:70:93:f6:7a:8d:ed:9a:e7:68:71:
d4:14:5b:85:f1:e5:5f:11:89:39:e8:40:a4:40:d4:dd:d1:0b:
89:b7:4c:37:f1:38:38:49:8e:ee:2b:ad:f6:e5:80:68:db:32:
b5:9a:79:91:2d:62:f2:d0:f2:d2:23:1f:ee:69:43:79:50:de:
fd:6b:8b:23:7d:0b:6a:8a:c8:8b:7a:68:68:98:5d:c4:b0:83:
03:d6:ff:07:28:58:1a:2d:43:2e:3a:53:cd:ef:df:1a:c9:71:
c3:6a:c9:fc:45:16:53:ca:90:bd:98:20:b9:c7:51:c9:53:d8:
20:f1:d1:c8:54:b4:91:21:59:37:07:c6:b0:c5:0f:26:5b:ff:
29:d0:5d:e6:64:ed:62:96:48:6a:42:32:e1:2a:fa:a4:e6:05:
21:3b:59:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:53 2024 by rpki-client on console-ams.rpki-client.org