Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/p6USeeuNsOKjoMQjqsTEg_RF62A.roa
File: p6USeeuNsOKjoMQjqsTEg_RF62A.roa (raw, json)
Hash identifier: hCUJNvdkSeFRhyiUdUTz9yYOLlsC3z34PqWB0HHrv5o=
Subject key identifier: A7:A5:12:79:EB:8D:B0:E2:A3:A0:C4:23:AA:C4:C4:83:F4:45:EB:60
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 01863AAA0BE21E175605F8EC868E27082A1C
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/p6USeeuNsOKjoMQjqsTEg_RF62A.roa
Signing time: Fri 10 Feb 2023 09:31:08 +0000
ROA not before: Fri 10 Feb 2023 09:31:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8311
IP address blocks: 185.251.80.0/22 maxlen: 24
194.4.52.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:aa:0b:e2:1e:17:56:05:f8:ec:86:8e:27:08:2a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Feb 10 09:31:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7a51279eb8db0e2a3a0c423aac4c483f445eb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:c9:51:ed:f5:96:74:4d:6a:14:01:2d:43:
9f:61:83:fd:70:be:b8:d0:65:c8:4d:f3:ad:c5:a8:
c0:c4:44:76:d8:4c:db:27:00:ad:19:59:00:1b:00:
f4:16:9c:35:e8:63:a4:94:18:4e:57:69:1b:0d:df:
4d:a5:47:51:26:29:4e:b1:67:28:10:9c:00:43:6f:
f1:83:89:64:d0:ab:a1:fc:15:8d:f0:0b:18:3c:f6:
5f:df:7e:2b:3a:4e:8b:a7:a9:f2:ce:fb:43:d9:8a:
d7:38:ce:66:4d:35:91:d3:5f:7e:43:99:63:63:e6:
4a:4d:5a:27:f7:af:e8:76:ef:6b:fc:58:c7:54:b7:
01:72:26:97:58:c2:1d:a1:12:d2:b9:88:48:51:a3:
0e:27:67:19:9b:02:65:3d:3e:13:f2:ae:b9:bd:c3:
ea:44:87:36:8f:0f:04:0b:48:3c:b2:7f:78:bf:02:
8d:b8:5a:5a:6d:1c:49:1a:f3:87:2f:b7:25:0b:c8:
25:54:f0:46:56:d4:0f:b7:91:ab:86:22:6c:77:33:
cb:a5:49:3e:35:78:e1:66:3c:9e:4d:cf:2c:c4:46:
7c:4c:66:d6:e0:55:57:72:12:ea:28:4b:80:8e:1d:
64:53:f9:3e:31:46:55:61:6c:c0:b1:d2:f7:d8:a9:
38:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A5:12:79:EB:8D:B0:E2:A3:A0:C4:23:AA:C4:C4:83:F4:45:EB:60
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/p6USeeuNsOKjoMQjqsTEg_RF62A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.80.0/22
194.4.52.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:77:92:aa:6f:6a:fa:15:3f:6e:29:c3:89:ba:75:a0:b6:3d:
14:5d:8e:73:88:14:67:16:6b:c5:fc:e7:e5:c5:a8:e4:7c:e2:
e5:1b:29:39:ba:bc:39:e3:b5:b3:c0:ba:23:14:99:6c:6c:ba:
1b:0d:47:0e:f3:b9:aa:53:d4:a7:03:ef:b4:16:04:1a:89:c5:
62:84:bd:96:de:c8:f5:56:98:8d:3b:c0:c2:a8:76:10:ab:6d:
76:bd:7e:9f:41:4d:05:0e:89:31:32:01:5f:4e:02:80:cc:2f:
9a:b4:bc:ca:1a:ba:8f:9e:2d:6a:53:7d:76:08:24:9d:fb:47:
d0:30:3e:14:a4:76:93:75:3b:9b:9a:1e:39:8b:32:3f:f7:24:
3b:a2:c9:c9:e8:79:64:aa:da:a2:ee:26:16:a5:d4:92:9c:78:
26:32:2c:f0:43:68:95:ba:33:d5:90:cd:40:02:79:de:fd:70:
f7:ba:d5:39:a2:59:eb:6f:7a:c9:4f:ce:f0:b7:03:5c:ed:38:
3c:b6:17:de:31:fc:e5:40:e8:be:a9:13:81:83:d0:67:e7:e4:
2e:eb:ff:24:62:a8:78:04:0d:8c:ba:fe:02:98:d1:78:2e:29:
62:f6:5e:38:b1:3c:e4:88:10:ef:c1:65:5f:12:95:92:c1:00:
cf:21:38:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:26 2024 by rpki-client on console-ams.rpki-client.org