Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/iqw54wjPAyO2ryLiA6vndNDNYdQ.roa
File: iqw54wjPAyO2ryLiA6vndNDNYdQ.roa (raw, json)
Hash identifier: G/hFcIYENIQeAh8VSVTxvRKxzRr4j0un9Nl6MWADrIc=
Subject key identifier: 8A:AC:39:E3:08:CF:03:23:B6:AF:22:E2:03:AB:E7:74:D0:CD:61:D4
Certificate issuer: /CN=167782bea46fd271768ff46d9b45c057a9df5481
Certificate serial: 01856D8AAB4AFB50B4C12995543518832767
Authority key identifier: 16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/iqw54wjPAyO2ryLiA6vndNDNYdQ.roa
Signing time: Sun 01 Jan 2023 13:34:42 +0000
ROA not before: Sun 01 Jan 2023 13:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 185.229.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:ab:4a:fb:50:b4:c1:29:95:54:35:18:83:27:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167782bea46fd271768ff46d9b45c057a9df5481
Validity
Not Before: Jan 1 13:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8aac39e308cf0323b6af22e203abe774d0cd61d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:66:1b:88:bc:00:1d:dc:c6:f3:67:00:37:5e:
9c:29:39:93:a1:79:92:66:c1:6a:5e:7d:3f:52:8f:
e6:82:b0:36:80:94:3a:8a:e8:2d:c8:0a:32:05:b9:
f6:c0:68:06:ec:6f:4d:8d:91:b3:61:9c:58:b3:e4:
b9:7c:f6:3f:6c:20:c2:28:29:d5:8f:2a:35:8e:13:
64:44:09:56:cb:1a:f3:4a:4b:7b:38:cd:06:40:49:
c7:b0:50:a1:b6:a3:d2:19:98:14:d9:6e:82:77:19:
c1:f8:11:d3:58:87:2e:03:8e:08:c7:2c:67:94:44:
10:a7:f1:bd:e1:b2:a6:24:a8:92:23:c1:3a:f2:ed:
d2:2a:b0:a0:ca:08:cb:c5:85:7f:1d:88:40:2e:89:
fd:af:5a:63:fd:df:a8:78:32:2c:f0:41:44:46:df:
26:1b:a4:7e:99:2b:a0:f3:d2:18:f4:c0:14:c5:8d:
f4:1d:23:1f:bf:20:a2:90:5c:c1:fc:2a:36:5f:a7:
80:d2:5a:22:c7:21:04:49:61:2e:94:18:63:a9:fa:
f3:85:24:5c:39:84:8e:c3:76:6c:36:cd:1b:cf:fc:
6b:f3:25:15:44:af:79:c1:0a:ff:f9:cb:4b:69:05:
20:58:dc:8d:b1:f0:4e:ce:c3:95:30:68:3e:6c:d6:
87:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AC:39:E3:08:CF:03:23:B6:AF:22:E2:03:AB:E7:74:D0:CD:61:D4
X509v3 Authority Key Identifier:
keyid:16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/iqw54wjPAyO2ryLiA6vndNDNYdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.14.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:83:97:ad:5d:6a:a9:74:fc:fd:5d:8e:48:a7:c6:e9:bc:86:
4d:4c:6c:3c:2b:13:16:ae:30:9d:95:07:53:15:2e:dd:58:6d:
f7:28:12:8e:77:49:f8:2c:3e:42:16:de:75:c6:b9:df:4e:4a:
57:a0:00:69:6e:97:ac:1f:75:dd:69:19:ea:8d:28:67:7d:bf:
bb:18:83:fa:e0:6c:d2:c2:44:d5:90:b3:f5:2c:58:80:68:31:
34:c0:c9:2a:2c:9b:3b:94:ae:6a:e8:1e:c6:93:41:88:e4:4c:
7f:17:33:64:a3:08:a2:3f:5e:84:7a:60:09:8f:a6:6f:8d:94:
63:da:68:0c:81:00:d5:eb:e7:16:10:2b:24:38:b6:f7:c6:8e:
07:9c:b7:ba:08:dd:4c:fc:b2:a6:3f:dc:10:b6:e0:b7:7f:22:
c9:78:fc:a1:be:dc:60:54:37:e4:17:e4:41:68:46:7b:30:e5:
4f:c9:5f:31:60:5d:21:8b:ba:03:40:23:49:3f:21:85:63:0e:
49:81:55:93:7e:e8:79:9d:d4:c7:89:8e:e1:10:61:91:5e:06:
2e:f8:e6:08:7c:e2:b2:7a:a3:6b:ba:46:8f:ee:b1:da:71:9d:
8a:1b:17:41:27:d2:4e:56:09:b2:c2:8f:c4:ac:b9:5b:62:62:
2f:77:b5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:15 2024 by rpki-client on console-ams.rpki-client.org