Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/k_qVjpjCjfmKqhGVSRWPAzXmsC0.roa
File: k_qVjpjCjfmKqhGVSRWPAzXmsC0.roa (raw, json)
Hash identifier: CkQJeE+WOFdeNsViEhbC3YBmdoqOzeiwY1teY78IEbQ=
Subject key identifier: 93:FA:95:8E:98:C2:8D:F9:8A:AA:11:95:49:15:8F:03:35:E6:B0:2D
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4BF1E51805C114EE9233397EC3ADD
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/k_qVjpjCjfmKqhGVSRWPAzXmsC0.roa
Signing time: Sun 01 Jan 2023 19:35:14 +0000
ROA not before: Sun 01 Jan 2023 19:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 185.244.235.0/24 maxlen: 24
185.227.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:bf:1e:51:80:5c:11:4e:e9:23:33:97:ec:3a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93fa958e98c28df98aaa119549158f0335e6b02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3f:73:1a:07:02:91:ab:3e:ee:60:d3:b1:6f:
4b:6e:ad:75:ad:2b:1a:b6:5d:d0:c8:42:d1:03:d5:
66:cb:3c:87:53:ec:92:d0:9c:0d:5e:0c:0b:31:75:
07:f8:cb:de:66:c4:55:85:39:85:4c:19:27:5e:25:
90:4f:e7:74:27:2f:68:bc:f9:3d:33:c7:89:6a:38:
f5:0c:a0:11:8a:e4:1f:34:3b:58:42:58:e3:1c:fd:
68:47:d7:c6:de:83:bd:d8:43:97:38:92:42:aa:1f:
d3:b5:cf:53:3a:ad:73:4f:d3:ce:fa:bc:1d:63:61:
06:de:52:bf:b4:7b:ab:73:5e:f8:83:ee:9a:78:3d:
53:d4:89:54:5d:26:5d:fd:da:f3:8b:b8:12:27:dd:
e3:f4:31:a5:f6:ea:66:cf:a8:a2:2b:07:7e:69:b8:
8b:49:6c:5d:21:4f:8c:f6:fc:f2:4f:b7:14:eb:c8:
3b:d1:20:e2:bb:bf:b3:00:ec:8c:12:f1:e9:59:1d:
23:60:a3:f4:47:61:b7:bb:1f:b6:d6:50:ed:34:a9:
0f:1a:5e:56:3b:6f:8f:a5:99:de:17:42:6b:48:63:
b4:52:95:a2:52:d7:98:e4:27:b5:ab:cb:78:48:4b:
2c:ae:99:85:d3:59:d7:be:2b:d1:a1:df:2c:2e:96:
22:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FA:95:8E:98:C2:8D:F9:8A:AA:11:95:49:15:8F:03:35:E6:B0:2D
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/k_qVjpjCjfmKqhGVSRWPAzXmsC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.102.0/24
185.244.235.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ce:84:52:cf:21:6c:bf:15:00:9d:d6:df:5d:72:26:bb:cf:
65:5d:b0:e8:61:a3:4b:fc:6b:d6:44:4c:a7:aa:a5:76:48:7e:
0c:74:ec:bf:d3:a5:3b:da:4d:63:ca:33:e4:e8:38:f7:04:a4:
72:c0:2f:fc:59:de:ad:2d:0e:fb:3a:7e:6b:ba:f4:89:fe:5a:
bb:3a:d4:e9:ec:4c:5f:fe:f4:b3:2c:d4:f7:90:a2:19:8e:74:
8e:89:08:04:67:ee:45:88:3e:7c:ac:89:aa:83:f8:60:41:bc:
ef:87:ad:33:9e:40:93:49:11:73:84:a8:c6:74:a1:dc:da:ae:
55:25:ec:db:61:3c:17:93:44:f5:36:35:8e:15:09:9b:ef:6c:
23:d3:b6:ec:64:fe:e4:e1:c4:64:c4:44:36:d7:75:b7:ed:f6:
6c:06:4a:de:77:2e:d7:83:65:86:42:07:7f:52:c7:14:16:66:
be:fe:b8:07:49:e2:dc:80:17:89:2f:82:4e:28:6d:f1:87:f8:
65:73:47:e2:82:fe:93:63:6e:e0:40:2b:21:5c:71:8b:41:20:
41:12:30:45:49:04:77:75:2a:7a:35:ae:68:d0:38:ce:c9:ee:
6e:61:99:f2:d6:b1:cd:ec:4c:31:08:10:20:1f:7b:d4:a7:03:
a9:13:33:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:09 2024 by rpki-client on console-ams.rpki-client.org