Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Saq9bslt-7fG7iOLe8hD6mMMPr4.roa
File: Saq9bslt-7fG7iOLe8hD6mMMPr4.roa (raw, json)
Hash identifier: lVResh3dOLeAHBA/+coc7NiyxUYc4DWHCDiO2z26bZk=
Subject key identifier: 49:AA:BD:6E:C9:6D:FB:B7:C6:EE:23:8B:7B:C8:43:EA:63:0C:3E:BE
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4CC3BB802A99925401B273D86AFEC
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Saq9bslt-7fG7iOLe8hD6mMMPr4.roa
Signing time: Sun 01 Jan 2023 19:35:17 +0000
ROA not before: Sun 01 Jan 2023 19:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60711
IP address blocks: 185.226.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:cc:3b:b8:02:a9:99:25:40:1b:27:3d:86:af:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49aabd6ec96dfbb7c6ee238b7bc843ea630c3ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:22:a5:b8:e0:01:43:b6:82:ff:d0:55:79:94:
a6:a1:a4:f7:5f:b4:54:38:24:61:d4:64:7e:fe:68:
1a:fd:a5:dc:f3:e6:55:af:07:23:38:75:df:1f:63:
cd:73:fb:55:bd:d5:43:a1:c2:a3:95:82:82:69:30:
23:dd:5c:7d:aa:f9:04:80:e0:1f:20:f1:ad:f6:d6:
6a:ff:26:01:9b:6a:26:fc:4c:73:23:fe:2a:5a:81:
6c:3d:00:8c:31:f1:50:dd:d5:d4:37:38:41:b1:9b:
bc:e7:a5:26:3a:57:a3:88:58:e1:ba:61:4d:fd:16:
57:c0:2e:06:74:36:a5:3a:ec:5a:20:6e:dc:54:55:
18:36:80:dd:90:84:f2:d2:2c:2a:6d:c5:01:93:2d:
b2:92:50:c9:6a:6f:13:e8:db:78:02:96:0a:94:2a:
34:e7:a7:73:8e:f7:dc:f8:dd:8a:c3:16:64:ca:98:
ec:41:8b:4f:07:36:2a:33:ef:73:8f:57:6e:30:35:
e2:dc:2a:c2:74:1d:a2:ee:0a:a9:92:f5:2a:9c:06:
d3:5d:c2:5d:c9:37:cd:be:b9:05:70:fa:2a:1d:63:
2d:72:1f:18:38:d2:0b:54:4b:4d:00:37:03:e2:87:
a4:86:d4:52:aa:8b:18:79:54:1e:ea:2a:9e:11:cd:
80:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AA:BD:6E:C9:6D:FB:B7:C6:EE:23:8B:7B:C8:43:EA:63:0C:3E:BE
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Saq9bslt-7fG7iOLe8hD6mMMPr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.194.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:f9:06:5c:0b:c1:75:4d:bf:93:fe:83:ff:73:6e:16:79:64:
48:4a:7f:b3:23:6d:dc:1a:08:96:b2:14:2e:ca:78:ff:46:d4:
66:33:70:64:ee:f3:26:25:a6:35:08:7d:95:f0:bb:94:0a:31:
00:f1:ca:61:65:58:da:0c:01:18:62:b3:78:bd:ca:4e:c5:2e:
1e:d7:83:95:2d:f6:4d:a5:84:b6:58:83:2f:1e:27:3b:36:ec:
41:ea:45:13:d4:89:48:c9:c9:04:fc:f8:1c:b0:01:a6:c6:32:
c0:fe:fb:cc:48:03:63:67:c4:e8:95:ca:99:83:a2:c4:5a:76:
c9:27:60:74:09:e9:b1:e4:01:3e:e7:55:b2:47:cd:7d:c7:54:
a5:e6:84:5c:60:b6:cc:5f:eb:e4:c8:44:0e:2a:ea:f3:70:ed:
a3:6f:e0:f4:04:45:64:e8:e2:dd:35:c9:18:49:25:d8:b6:8c:
7f:f5:47:47:c3:61:99:2b:38:89:63:88:a8:18:c1:7f:97:af:
f1:90:66:5c:86:80:51:2d:89:90:1a:1d:7a:1d:7e:f5:83:e1:
a0:1e:fa:eb:bc:75:1a:0b:33:11:12:cf:c4:c3:c4:9d:03:61:
28:d4:ea:c6:aa:3c:e2:93:f3:e0:19:f8:8a:e8:97:4b:38:09:
d0:45:38:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:08 2024 by rpki-client on console-ams.rpki-client.org