Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/1-Da4-yZnWHVhC0bgXxTyy9IqX9Y.roa
File: 1-Da4-yZnWHVhC0bgXxTyy9IqX9Y.roa (raw, json)
Hash identifier: 0AE+Xrwy8n+R+Wb9on+coHIAP8J1S1Uotg3jYT0EU18=
Subject key identifier: F8:36:B8:FB:26:67:58:75:61:0B:46:E0:5F:14:F2:CB:D2:2A:5F:D6
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 01860849362D9E4314C6250044A9EF78CA62
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/1-Da4-yZnWHVhC0bgXxTyy9IqX9Y.roa
Signing time: Tue 31 Jan 2023 14:44:21 +0000
ROA not before: Tue 31 Jan 2023 14:44:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60578
IP address blocks: 185.7.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:08:49:36:2d:9e:43:14:c6:25:00:44:a9:ef:78:ca:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 31 14:44:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f836b8fb26675875610b46e05f14f2cbd22a5fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:07:4b:67:89:6f:57:cd:80:09:86:86:ae:1a:
8e:d1:07:66:10:e1:c0:26:59:a9:0e:b6:f6:21:75:
a3:fd:2b:bb:d9:6f:1b:d6:d8:ad:89:9f:4f:1c:a1:
87:27:48:d6:96:b1:b1:66:d1:b3:1f:f1:51:8d:b9:
3f:9a:b9:28:54:bb:d6:14:cb:42:53:15:c1:f4:d4:
c3:d9:60:c7:69:b4:62:40:0e:6d:91:55:d0:a0:b1:
d3:ac:c0:b5:9b:d0:d1:17:8d:f7:ca:e4:9f:dd:4b:
18:bc:6a:a4:45:81:d0:2e:18:b4:fe:c7:29:3c:cf:
bf:2f:96:b0:82:1e:fa:2e:b4:0b:11:9a:04:b0:69:
a7:a6:30:0f:ab:fd:7c:16:ea:a1:9c:bc:32:12:1f:
83:1d:5d:78:f4:c5:6d:24:ae:cb:3f:19:b9:1b:77:
79:0d:96:a6:cd:11:dc:6f:e6:c1:fb:f4:c9:15:bd:
ab:17:24:c8:b9:b0:e1:84:3e:cc:8d:81:d8:af:82:
7a:45:dd:ad:cf:07:07:6e:2c:54:8e:dd:1b:3e:55:
bf:bd:fb:9f:01:65:92:ee:b8:ec:92:e7:19:43:3a:
48:0e:49:29:e5:be:75:71:b2:04:09:41:19:69:89:
64:65:72:8f:fb:7b:8c:3b:9b:db:b6:3f:d6:2d:e8:
9d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:36:B8:FB:26:67:58:75:61:0B:46:E0:5F:14:F2:CB:D2:2A:5F:D6
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/1-Da4-yZnWHVhC0bgXxTyy9IqX9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.216.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:4c:d7:91:ad:d4:6c:87:1b:83:dc:33:54:1b:c7:65:c8:90:
fd:f7:56:0d:0e:1b:fe:8d:d8:18:03:76:a1:9a:20:fd:85:9b:
c4:9b:4e:c3:8d:77:de:35:ba:28:cb:f3:cc:95:ad:21:33:88:
d5:a3:e3:69:11:3b:bb:e2:21:cb:8c:91:2c:1a:c4:c7:3a:70:
d9:55:ae:d2:d3:10:81:0e:fd:e7:fd:fc:68:5b:2a:34:c6:3a:
c8:4d:8e:d8:8b:6a:29:66:20:aa:d9:43:13:4b:6a:b8:a9:a7:
62:82:bc:d0:4f:7c:d7:cc:45:a9:e6:47:61:99:9e:2e:72:fc:
11:eb:11:ca:40:71:89:c6:18:1f:55:c4:b6:dd:b3:9d:a6:04:
b1:af:49:1d:a5:26:17:b3:17:8b:e8:fb:dc:85:68:20:9b:72:
f2:66:83:44:1b:5d:cc:19:34:a3:52:7b:85:6d:68:8d:25:e7:
98:f9:1f:d5:78:5d:be:05:16:99:b7:bc:2e:c0:fa:a0:7c:cd:
1b:bb:17:e1:86:df:7a:52:46:4a:61:10:b5:f1:02:6e:7b:79:
6f:bf:61:18:06:12:40:e7:f4:73:4c:ee:c3:7b:1c:0f:23:5e:
14:04:46:be:96:80:c3:86:ee:2f:17:89:a1:0e:8a:c0:44:31:
90:3b:da:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:08 2024 by rpki-client on console-fra.rpki-client.org