Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/1wItov8yjLCywXJ5qsA7tMrU1Xk.roa
File: 1wItov8yjLCywXJ5qsA7tMrU1Xk.roa (raw, json)
Hash identifier: pGrL9zvmVEoJhhbRtf7Bf0C0wp8cIl+0p/ZVVMp34Lw=
Subject key identifier: D7:02:2D:A2:FF:32:8C:B0:B2:C1:72:79:AA:C0:3B:B4:CA:D4:D5:79
Certificate issuer: /CN=054f1eb8b3072796fee42922863a0bb6697f5c97
Certificate serial: 01875680505D8FBFF751C5AC1F8D4AA5D841
Authority key identifier: 05:4F:1E:B8:B3:07:27:96:FE:E4:29:22:86:3A:0B:B6:69:7F:5C:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BU8euLMHJ5b-5CkihjoLtml_XJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/1wItov8yjLCywXJ5qsA7tMrU1Xk.roa
Signing time: Thu 06 Apr 2023 12:17:42 +0000
ROA not before: Thu 06 Apr 2023 12:17:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.11.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:80:50:5d:8f:bf:f7:51:c5:ac:1f:8d:4a:a5:d8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054f1eb8b3072796fee42922863a0bb6697f5c97
Validity
Not Before: Apr 6 12:17:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7022da2ff328cb0b2c17279aac03bb4cad4d579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a3:41:2f:65:1c:25:98:d1:bc:24:47:7c:05:
6f:bf:68:80:d7:21:20:ce:4a:1c:04:2d:0e:de:db:
34:7d:19:d4:9a:86:f6:40:95:f5:39:8a:b7:86:3c:
87:56:43:fb:b0:1b:b9:e4:fb:57:cf:d5:9e:08:92:
66:c5:29:0f:a6:3e:65:36:92:ae:99:be:83:30:3b:
d3:76:d9:c4:57:83:e8:17:65:c2:90:7c:64:23:25:
4c:db:ed:e5:71:64:63:2c:bd:33:8c:a6:1d:91:f9:
bc:06:28:35:12:8d:43:d1:61:ff:fc:37:fc:9c:8c:
cc:d7:00:ff:1d:c6:2d:13:e5:25:6e:cd:de:ae:9d:
2b:05:65:0a:8a:86:53:44:f7:20:0c:85:0d:52:8a:
8f:45:e3:fc:62:f1:aa:7f:f5:96:5b:19:0c:e2:c6:
c7:5b:ac:30:4b:40:4e:f4:e8:43:b8:18:85:f1:99:
c2:9d:73:60:a8:f3:5c:36:08:4e:68:d5:fa:56:9a:
3e:ab:58:da:88:27:9e:a9:56:9d:b8:86:1f:88:94:
e6:93:c5:5d:b3:55:d6:d3:aa:e5:7f:f6:52:5a:2b:
1f:9a:7e:82:f9:c6:de:7e:f4:36:a9:96:9a:5a:e3:
32:52:7b:de:26:9e:a1:b1:73:e6:77:00:29:55:20:
37:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:02:2D:A2:FF:32:8C:B0:B2:C1:72:79:AA:C0:3B:B4:CA:D4:D5:79
X509v3 Authority Key Identifier:
keyid:05:4F:1E:B8:B3:07:27:96:FE:E4:29:22:86:3A:0B:B6:69:7F:5C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BU8euLMHJ5b-5CkihjoLtml_XJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/1wItov8yjLCywXJ5qsA7tMrU1Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/BU8euLMHJ5b-5CkihjoLtml_XJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.63.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:ee:6f:22:d5:94:f8:17:e0:ef:a6:9f:e3:72:1f:9b:c0:de:
6d:e8:dc:a1:fa:eb:75:62:0e:ed:44:61:e5:e4:d9:00:31:6a:
35:d9:41:70:d4:cc:5c:78:10:01:57:a8:56:7c:8d:31:32:ce:
8d:26:73:09:de:84:23:66:bb:c7:2d:95:a7:16:e9:22:64:8f:
ef:d3:5f:46:46:92:f8:02:1e:74:60:3c:8f:b8:b4:1e:8e:08:
84:fd:2a:83:5b:25:a4:d8:cf:22:4b:fb:9f:1d:7a:82:6e:35:
68:c1:f6:57:f1:99:17:62:bb:3b:04:09:3e:e3:c7:b8:5b:de:
b7:a7:d9:24:c0:a4:a3:c9:8f:db:f2:54:7a:b7:3e:47:d1:66:
5a:ad:48:88:33:80:42:0e:8b:2d:b7:4d:0a:4d:ee:d2:19:9f:
36:2b:86:f3:8b:8d:06:d1:0d:20:d0:60:ba:6e:0d:f9:c8:62:
5c:c4:9a:4a:b6:70:58:d5:da:55:bd:9c:37:72:2f:61:e7:13:
d0:8f:60:d5:12:19:9e:5e:bb:9e:64:7f:eb:50:75:8e:3d:2f:
45:e6:17:93:3b:48:e0:99:9b:c8:3a:77:b1:8a:72:a3:1f:a8:
e5:5b:ad:65:1c:c1:b9:b6:a9:45:bf:95:ec:6a:e6:2c:1f:e5:
0f:e4:b7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:25 2024 by rpki-client on console-ams.rpki-client.org