Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/3w1KH4pOS-Ni-yE730YviWVAMyo.roa
File: 3w1KH4pOS-Ni-yE730YviWVAMyo.roa (raw, json)
Hash identifier: bE/lMA8V74xGs79MA+0+q+2sVErNl8hlXhu9t4FDkBY=
Subject key identifier: DF:0D:4A:1F:8A:4E:4B:E3:62:FB:21:3B:DF:46:2F:89:65:40:33:2A
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 01857246C9A099AA80099DC9D62673E76390
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/3w1KH4pOS-Ni-yE730YviWVAMyo.roa
Signing time: Mon 02 Jan 2023 11:38:39 +0000
ROA not before: Mon 02 Jan 2023 11:38:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 185.122.142.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:c9:a0:99:aa:80:09:9d:c9:d6:26:73:e7:63:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: Jan 2 11:38:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df0d4a1f8a4e4be362fb213bdf462f896540332a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:45:bb:29:81:98:9e:4e:04:08:b2:e2:c6:
4b:67:f4:4a:42:c5:14:f6:c1:08:49:46:6f:f3:69:
46:e6:99:e2:c1:0d:0d:8a:e8:ca:2a:59:cd:80:69:
95:8a:5a:6e:da:ed:3a:dd:1b:3a:f1:2a:05:e8:b9:
07:d6:37:8b:b4:99:35:0a:a2:54:a4:9d:f2:4c:19:
90:ae:6b:ca:a3:89:61:9b:98:30:da:64:7f:f6:a2:
92:05:47:6f:93:8e:01:b7:c2:ae:7f:9b:58:e9:2a:
b9:03:6e:43:bd:67:0d:88:04:e3:b6:71:28:50:2f:
a6:e0:2f:e0:f7:e1:35:c9:f6:f4:26:0d:67:e0:50:
d8:4f:e2:6e:64:43:64:85:9c:50:50:83:31:b6:d7:
b8:a0:21:82:31:11:73:68:a6:10:ea:81:fe:0e:96:
1a:0d:9e:2e:e4:14:b7:72:cf:4e:e2:64:f7:1f:da:
66:3c:7d:1d:4f:a0:92:25:9e:e4:6a:11:37:81:3f:
ba:46:de:40:5d:75:80:d2:13:0b:e2:94:6a:37:f1:
04:2b:15:d8:75:da:82:90:98:e3:15:10:2d:e4:95:
e0:07:57:a0:44:d8:5f:13:29:53:06:c4:71:8f:c1:
8b:8c:94:45:5d:8b:30:a3:6c:4c:05:a8:89:ca:e6:
43:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0D:4A:1F:8A:4E:4B:E3:62:FB:21:3B:DF:46:2F:89:65:40:33:2A
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/3w1KH4pOS-Ni-yE730YviWVAMyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.142.0/24
Signature Algorithm: sha256WithRSAEncryption
80:22:d8:04:92:12:32:45:92:50:07:9a:73:45:b1:69:d1:2b:
5f:b0:bf:d4:e2:35:cb:6a:51:ec:be:21:d6:1f:ad:be:87:07:
7a:e5:67:ee:71:07:ea:81:7b:b1:c8:5a:44:b5:0d:2e:76:c6:
71:de:68:cd:a7:6f:47:18:b7:69:bb:6a:cb:09:41:b8:9f:99:
7f:2a:c1:29:b2:8e:1f:85:49:16:e7:54:8f:b3:be:fe:5e:0c:
2e:ae:35:1c:0d:47:69:d0:f8:59:ec:ab:87:7c:a9:fd:07:f9:
7b:4b:66:4a:a1:9c:47:10:17:6a:3a:cb:f0:0f:39:2f:f7:41:
01:3a:38:e4:be:5f:f9:86:48:1d:cc:97:6f:6f:23:46:b5:a7:
8f:79:01:9f:90:2c:f6:2a:c4:72:9c:ea:2f:54:34:99:38:4f:
fb:22:45:05:b0:a1:fd:c3:e9:f2:81:a5:c5:29:fc:b4:93:35:
5f:d6:5a:b0:84:13:63:0e:3c:ad:ff:29:59:ca:5f:33:0c:21:
83:b1:9e:38:29:0f:ce:e7:75:39:f3:31:8d:45:09:c0:b2:d2:
c0:24:6e:7b:2f:da:a2:07:6a:71:05:cb:93:0d:26:82:47:82:
38:e0:94:03:06:7d:38:1c:af:d6:83:21:e1:97:0f:3b:e2:b1:
21:5f:69:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:56 2024 by rpki-client on console-fra.rpki-client.org