Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/RKg1qdwEQcaw8ZwC0bMWaQLlq-A.roa
File: RKg1qdwEQcaw8ZwC0bMWaQLlq-A.roa (raw, json)
Hash identifier: Qiy0LkLXGpSAao6kX3CI9d3mWMsD5U5Rs2cDXzZST54=
Subject key identifier: 44:A8:35:A9:DC:04:41:C6:B0:F1:9C:02:D1:B3:16:69:02:E5:AB:E0
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 018570F09549DB71FEE9A22DDABA760F3DD0
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/RKg1qdwEQcaw8ZwC0bMWaQLlq-A.roa
Signing time: Mon 02 Jan 2023 05:24:53 +0000
ROA not before: Mon 02 Jan 2023 05:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34447
IP address blocks: 185.82.35.0/24 maxlen: 24
185.82.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:95:49:db:71:fe:e9:a2:2d:da:ba:76:0f:3d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Jan 2 05:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44a835a9dc0441c6b0f19c02d1b3166902e5abe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:52:16:7e:95:4d:9b:3c:98:b9:d7:56:77:09:
05:75:23:b8:dd:7d:e4:d1:f5:3a:72:76:b8:93:88:
4a:3c:c0:d6:f0:07:9a:38:3c:e8:2e:3e:7a:d1:a6:
40:71:c4:1f:79:f8:06:46:e0:d5:b2:45:38:cc:10:
c3:ea:45:76:7b:63:f2:77:0a:cf:10:93:66:c9:a5:
5a:a6:dc:a6:af:07:7e:2b:d6:15:cf:c4:23:5f:ed:
d8:d6:fa:1a:80:91:3e:ac:a0:56:34:64:35:c8:c8:
49:94:24:ac:8f:67:b4:72:e2:45:38:fe:3e:37:a1:
92:ca:e0:30:06:cb:9e:07:50:f6:bd:a4:29:23:1b:
38:7c:5d:62:c2:98:38:4f:50:2d:d1:5f:7b:d9:01:
50:35:f5:38:38:51:86:98:12:f1:b6:64:21:a3:7f:
8a:ca:f2:1e:4f:b4:25:8b:2b:6d:ad:1f:06:80:01:
37:4d:04:e9:a0:32:08:71:a0:48:d2:0c:5a:df:c6:
b5:c7:87:af:98:1b:40:d0:b6:74:51:11:71:4e:27:
bd:7b:d5:0e:b9:ec:b6:98:27:e7:92:0c:ff:d2:81:
a5:b5:ab:31:1e:61:36:82:58:3b:c1:cb:b8:06:83:
27:a8:de:85:38:53:86:f0:c8:72:74:0a:3e:4a:67:
62:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A8:35:A9:DC:04:41:C6:B0:F1:9C:02:D1:B3:16:69:02:E5:AB:E0
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/RKg1qdwEQcaw8ZwC0bMWaQLlq-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.34.0/23
Signature Algorithm: sha256WithRSAEncryption
15:a0:e3:8d:db:45:7e:39:0a:b5:cc:a0:79:5d:97:83:91:8b:
cb:94:1a:ae:89:73:01:e6:b9:f2:67:58:e4:0c:3b:02:7e:62:
c0:ca:85:f8:05:0f:74:92:b3:5c:79:62:88:4b:f0:13:53:48:
a4:24:3c:b0:36:48:a7:69:d9:cb:e7:47:e8:a6:3c:57:0e:31:
4c:66:cf:f7:5d:cf:f6:bb:8d:bc:45:8e:56:27:e9:ce:41:8e:
72:7c:20:b6:f6:c6:18:42:64:8c:64:d4:04:e4:86:fe:bf:49:
fe:90:a2:9c:b2:ba:dd:a6:42:1e:5e:d5:dc:73:07:2c:5c:89:
8f:2d:26:4a:35:12:43:5e:12:d1:93:b8:1b:57:05:05:22:43:
80:fd:ba:7f:f3:e6:7e:43:e8:02:15:d9:9b:6b:8c:e9:b7:59:
58:24:f4:00:b6:60:86:66:ee:98:47:cc:d4:f4:4b:4e:1f:86:
8a:d5:de:a8:41:32:72:a2:15:20:c1:d9:4c:5f:93:ef:00:74:
61:68:f9:be:9a:67:18:a3:f2:27:31:18:76:42:cc:f2:29:70:
df:4a:b8:69:b9:84:cd:6a:9a:81:d6:08:74:a7:65:22:bd:df:
e9:22:0c:23:80:49:95:6a:78:ff:5a:0d:86:71:e2:fe:63:b8:
33:d0:66:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:53 2024 by rpki-client on console-ams.rpki-client.org