Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/eX09ijxtxjamGM_JGMGySQDe2qk.roa
File: eX09ijxtxjamGM_JGMGySQDe2qk.roa (raw, json)
Hash identifier: rgkeJzQtn3mBZ5vUzbYE6QC22AgAwCZ3HJB/o90qIh8=
Subject key identifier: 79:7D:3D:8A:3C:6D:C6:36:A6:18:CF:C9:18:C1:B2:49:00:DE:DA:A9
Certificate issuer: /CN=1dde7463ed8498020dd392322459d2cf40f226b2
Certificate serial: 01856FC25D5DE6AC2F9FF8C986CCCBFFE713
Authority key identifier: 1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/eX09ijxtxjamGM_JGMGySQDe2qk.roa
Signing time: Sun 01 Jan 2023 23:54:46 +0000
ROA not before: Sun 01 Jan 2023 23:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39364
IP address blocks: 185.225.80.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:5d:5d:e6:ac:2f:9f:f8:c9:86:cc:cb:ff:e7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde7463ed8498020dd392322459d2cf40f226b2
Validity
Not Before: Jan 1 23:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=797d3d8a3c6dc636a618cfc918c1b24900dedaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:3b:2c:0e:d8:7b:31:05:28:f7:2c:a5:ad:
39:69:25:c4:06:39:68:10:6e:16:18:83:19:7a:d4:
25:82:75:17:20:db:f3:a7:91:3f:01:9c:55:0c:68:
90:47:a4:5e:c2:fd:95:32:da:f0:07:11:2e:22:e4:
db:f9:7b:9c:fc:10:7d:ee:df:a2:0f:ca:6e:06:9b:
54:ca:e9:c2:2b:3b:ae:dd:a8:98:80:5c:92:37:54:
36:5f:a8:f1:82:8a:3e:09:a7:a5:d0:bf:8d:cc:9e:
28:bb:cb:16:c2:e7:03:cd:ce:ee:e0:fc:72:43:29:
bd:f2:79:38:d8:ff:e6:55:b3:01:03:ee:ca:ac:a5:
7e:02:99:8f:9c:88:fb:c7:f1:e7:2b:4a:27:82:5d:
02:a9:ac:02:b3:67:9d:9a:a1:03:c6:1c:c8:1f:34:
b5:c2:4d:d0:75:ac:21:a9:4f:0d:cc:2b:50:d9:89:
f0:b8:6a:7b:1d:4e:62:79:ef:2e:ca:91:7d:cc:0d:
04:6b:39:93:9d:6f:cb:e7:3b:b8:86:2e:50:38:b2:
7c:fb:74:fd:35:1f:2a:0a:00:1b:5d:28:13:9f:d4:
b3:63:ef:3f:3d:d7:0e:12:8d:eb:43:f8:eb:eb:7d:
f5:b2:07:86:a7:79:1a:69:64:c5:0a:10:75:d3:fd:
85:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7D:3D:8A:3C:6D:C6:36:A6:18:CF:C9:18:C1:B2:49:00:DE:DA:A9
X509v3 Authority Key Identifier:
keyid:1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/eX09ijxtxjamGM_JGMGySQDe2qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.80.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:32:84:6b:e4:14:f8:84:0c:ab:9d:18:ac:5c:df:8a:87:2f:
d9:d9:9a:de:e4:7a:94:4a:00:54:fc:68:cd:0b:a1:fd:c0:df:
fe:06:d7:bd:cb:81:25:69:94:40:17:96:2e:f6:be:e3:33:0f:
13:ac:a8:4c:27:99:1c:50:83:3e:f2:b5:69:18:3c:44:3a:9a:
db:e5:ca:1c:ae:92:81:f1:f8:f7:e5:44:3a:51:3e:84:53:d9:
20:be:4b:16:0a:aa:5b:7b:da:67:af:7a:d3:15:8d:68:2b:1e:
e5:81:1d:37:68:4b:30:c1:6d:a3:6b:3e:ad:62:f1:20:b2:a9:
bd:67:8f:12:13:a1:02:3d:b7:cc:29:23:7b:49:da:93:49:db:
06:c3:0e:53:ab:2c:bd:a1:05:3f:cc:1a:6a:1a:00:a2:c8:f4:
e6:7d:7f:5c:7d:dc:1c:d0:bd:5f:25:2b:0a:ff:f0:f3:03:00:
ba:e7:2a:7a:73:8d:f3:c8:09:33:46:ce:27:66:d0:61:44:6a:
be:47:13:d6:51:6d:62:ce:83:62:c1:5d:84:4b:67:48:b9:9b:
2f:e8:b4:4b:8b:51:bb:d5:85:fa:2f:7a:48:7a:fd:83:d4:42:
34:4d:5a:41:04:75:22:bb:cb:13:7e:49:a6:4b:ae:e9:fd:fd:
34:ed:f7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:51 2024 by rpki-client on console-fra.rpki-client.org