Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1nSKJqWY1exOn4A01sD_FATtD2s.roa
File: 1nSKJqWY1exOn4A01sD_FATtD2s.roa (raw, json)
Hash identifier: xilpCKc+QoNH8GAnc1R3WhKr1LmlMT+dS2D69JD6t0w=
Subject key identifier: D6:74:8A:26:A5:98:D5:EC:4E:9F:80:34:D6:C0:FF:14:04:ED:0F:6B
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4CFD3890DF932A56B623E7001597E
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1nSKJqWY1exOn4A01sD_FATtD2s.roa
Signing time: Sun 01 Jan 2023 19:35:18 +0000
ROA not before: Sun 01 Jan 2023 19:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202813
IP address blocks: 185.28.48.0/24 maxlen: 24
185.242.172.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:cf:d3:89:0d:f9:32:a5:6b:62:3e:70:01:59:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6748a26a598d5ec4e9f8034d6c0ff1404ed0f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d8:2e:1a:8f:32:41:6d:93:af:8f:d1:d7:37:
04:b7:27:20:03:f6:29:02:1c:21:ce:55:db:c7:02:
1b:8c:6e:ab:ff:ab:42:c8:84:ca:95:58:74:6e:97:
63:16:de:bd:21:59:9f:e8:43:1c:47:93:24:ea:d5:
33:25:50:75:09:6a:1e:ee:f5:2c:db:d8:8b:ba:dd:
d8:e9:18:1a:70:20:c8:c9:35:a7:4c:9a:fe:bc:03:
ed:a5:eb:5c:75:b0:66:4c:a9:5e:aa:a1:b6:33:7d:
fd:2b:4f:a6:51:33:61:27:b9:8a:e0:aa:1e:cb:54:
e0:0d:0c:54:04:31:cd:d8:69:c3:2a:62:2f:f2:87:
99:6f:63:ce:e5:1f:ca:30:67:63:fa:92:45:9f:88:
45:ca:fd:fb:c2:ab:d0:f0:5d:26:a3:7f:c2:93:6d:
64:cb:93:5d:d4:88:5e:1b:a5:5b:c3:25:c1:39:09:
1d:0e:a8:12:9b:ad:4d:1b:c0:ab:3a:82:30:80:29:
62:32:99:1a:6e:dd:1a:79:40:64:1a:bb:2f:21:08:
95:ad:f3:f3:e6:57:9c:b0:da:0a:f4:d4:99:1b:fa:
94:40:e5:6d:03:6f:80:ac:af:59:1c:7e:4e:bf:e1:
cc:e2:f5:26:a0:81:ff:0c:cb:b3:b6:db:6c:3b:a5:
ba:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:74:8A:26:A5:98:D5:EC:4E:9F:80:34:D6:C0:FF:14:04:ED:0F:6B
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1nSKJqWY1exOn4A01sD_FATtD2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.48.0/24
185.242.172.0/24
Signature Algorithm: sha256WithRSAEncryption
80:88:e3:7e:7a:ed:33:d2:ee:b8:64:a3:8c:2a:aa:ac:f8:0b:
0a:cb:17:67:51:86:69:a2:9d:38:92:b1:ab:ae:78:d6:d9:fe:
16:25:2f:49:5b:10:41:02:0e:3f:32:da:9c:37:2e:42:14:b8:
9d:95:d9:0e:01:f4:82:f5:73:fd:98:ec:99:39:22:f1:87:03:
a3:e3:5a:4d:97:81:69:91:57:77:9d:69:21:37:48:71:5d:62:
ff:e3:da:30:bd:b3:90:62:4a:51:14:bc:52:de:97:b8:9e:22:
9e:2b:2a:e2:39:c3:34:ec:5c:35:cd:2e:b3:7a:0a:2c:8a:81:
a8:ec:71:a1:08:ad:f8:6a:fa:4c:4b:82:13:a8:8e:80:c0:61:
8b:13:21:66:4c:bc:af:aa:42:1a:c2:25:69:9e:45:c3:5e:1e:
5b:c9:c0:fc:d1:15:18:6b:79:0e:5e:c0:38:ac:fd:42:cd:de:
c6:55:a8:5d:5c:65:91:b0:f7:89:29:2a:6d:5e:0b:30:8c:ac:
b2:c0:26:1f:51:98:cb:44:7d:71:f8:46:1f:a6:72:76:ca:91:
d5:63:3d:0d:47:36:a4:33:58:e4:af:e2:fd:13:ba:b6:2b:cc:
c6:92:65:25:b0:65:62:68:ac:92:5c:17:6a:21:60:1e:84:cb:
cb:ed:30:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:08 2024 by rpki-client on console-ams.rpki-client.org