Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/bmF4wxVly3OZ5jfusISKSidxhNU.roa
File: bmF4wxVly3OZ5jfusISKSidxhNU.roa (raw, json)
Hash identifier: AzOBDIl7HKlxN5VdW2ibE4VwCR3MNBFX4zv0kmh4iyM=
Subject key identifier: 6E:61:78:C3:15:65:CB:73:99:E6:37:EE:B0:84:8A:4A:27:71:84:D5
Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial: 01856C938503511D85E3F9B093ADFDB53005
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/bmF4wxVly3OZ5jfusISKSidxhNU.roa
Signing time: Sun 01 Jan 2023 09:04:45 +0000
ROA not before: Sun 01 Jan 2023 09:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44217
IP address blocks: 185.181.110.0/24 maxlen: 24
185.181.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:93:85:03:51:1d:85:e3:f9:b0:93:ad:fd:b5:30:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Validity
Not Before: Jan 1 09:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e6178c31565cb7399e637eeb0848a4a277184d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:80:62:39:82:3d:7d:bc:05:fe:f1:08:f0:41:
ea:03:71:b7:a8:6d:9c:c6:2d:3a:da:ff:47:a5:d7:
9a:f1:fe:08:81:90:d5:38:61:eb:a8:ff:5f:1b:8d:
78:52:94:91:26:9c:32:86:1f:41:43:fd:85:7b:dc:
7c:88:ec:50:31:8f:1b:f4:59:b3:06:c0:17:16:ad:
e3:fd:72:99:60:35:0f:f6:20:49:3d:9f:2d:e8:70:
6a:ff:d2:6e:f3:c9:59:c5:73:91:3c:06:61:0c:32:
5b:16:e6:ff:a0:22:60:a7:32:ed:01:9c:2b:b5:7a:
93:57:7d:5f:64:d1:2c:70:24:d9:61:5b:64:34:76:
87:14:83:11:b1:9d:fd:af:47:d2:1a:36:7c:a8:20:
be:3f:2c:49:09:cc:40:b2:ff:97:57:81:d3:72:8a:
a8:1d:3d:6e:d1:11:f6:46:ec:78:27:29:fd:d4:25:
b2:db:9f:af:5a:53:79:4e:69:5c:d6:dd:a2:5a:05:
cf:8a:13:a9:70:b4:37:bb:94:cc:4d:2a:02:49:a0:
1e:e6:63:14:ab:16:51:b7:a6:16:f6:2c:93:fd:1b:
0f:e2:09:3b:43:9d:42:09:da:8e:22:9a:e9:12:21:
a5:27:ee:04:73:9a:bb:d4:a3:e5:d0:0a:b1:78:a0:
51:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:61:78:C3:15:65:CB:73:99:E6:37:EE:B0:84:8A:4A:27:71:84:D5
X509v3 Authority Key Identifier:
keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/bmF4wxVly3OZ5jfusISKSidxhNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.110.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:f9:08:bf:31:9b:4e:7d:49:6e:55:16:55:38:e0:e7:bc:bb:
f0:7d:1c:02:10:91:3c:8d:c8:5f:17:97:1f:69:63:43:60:e9:
c9:0c:e3:00:5c:71:94:dd:0a:86:ae:b8:b3:04:2d:5d:0b:54:
51:7b:64:c2:1e:87:7c:7d:f7:19:4d:a5:e3:8d:57:8a:f8:b7:
ae:da:5b:5e:de:c9:56:f3:7e:49:e8:dd:5f:fa:bd:83:6b:88:
7d:d9:45:2e:59:41:d2:fe:98:4b:85:ad:f2:d5:95:af:10:db:
29:f4:27:07:2b:85:a3:37:07:1f:2b:76:f0:11:de:71:81:a0:
d1:ed:5c:15:a3:cb:2e:5f:9c:6c:e3:53:93:8d:80:63:e8:3f:
dd:d8:68:60:7b:f3:51:d3:56:eb:2d:d2:06:f5:d9:a6:67:f2:
fd:d0:0a:65:94:d0:e8:ce:39:fc:1b:a1:cc:1c:2e:30:3d:f1:
44:8b:47:70:9f:46:dc:50:67:40:80:81:88:3e:7d:38:8c:9c:
75:54:29:46:17:fe:79:9b:b5:70:43:bf:5f:07:e8:1a:13:a5:
53:bb:f4:31:46:af:74:3c:0d:4c:aa:5a:e3:56:c7:fb:22:95:
65:b4:24:86:d9:2a:00:50:51:34:41:59:4a:b6:00:a5:ba:f5:
70:ce:ea:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:44 2024 by rpki-client on console-ams.rpki-client.org