Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/UOD90QzzC3v_jG2V8v1CP3jUbF0.roa
File: UOD90QzzC3v_jG2V8v1CP3jUbF0.roa (raw, json)
Hash identifier: g/bf7Orkr1F6tAuo+XUZC/sOKSgdBjK2B9c5dwtqogg=
Subject key identifier: 50:E0:FD:D1:0C:F3:0B:7B:FF:8C:6D:95:F2:FD:42:3F:78:D4:6C:5D
Certificate issuer: /CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Certificate serial: 01856D4AC9A807DE8BBFFBD8A51D9478F337
Authority key identifier: FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/UOD90QzzC3v_jG2V8v1CP3jUbF0.roa
Signing time: Sun 01 Jan 2023 12:24:55 +0000
ROA not before: Sun 01 Jan 2023 12:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31433
IP address blocks: 185.100.192.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:c9:a8:07:de:8b:bf:fb:d8:a5:1d:94:78:f3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Validity
Not Before: Jan 1 12:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50e0fdd10cf30b7bff8c6d95f2fd423f78d46c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4e:b7:7f:d7:5a:8e:aa:e5:1e:92:07:24:95:
c8:4b:13:f2:19:89:95:ae:62:8e:c7:92:3b:e6:de:
f2:89:67:2c:f8:a4:71:bd:67:bc:3c:99:da:a6:d7:
12:cd:de:ce:28:52:81:41:ea:88:82:22:0b:a1:00:
ae:a4:84:ec:43:32:3f:e5:e8:cd:83:00:0b:eb:e3:
fb:74:f9:74:c6:8f:07:80:de:eb:aa:3b:92:cb:4d:
0c:b2:e1:3c:e8:5b:a5:ef:5c:15:a6:33:6e:4a:9b:
77:dd:44:98:d1:be:8b:f6:e6:2a:b8:f5:ed:d5:8b:
f1:be:f3:3a:2c:96:c9:cb:99:11:b7:97:d6:4b:22:
1d:ec:27:36:6c:20:75:6b:f3:df:36:39:52:79:2b:
e6:15:29:3a:a1:25:38:b1:fb:2d:d5:01:8a:18:1c:
03:c2:ca:f9:ad:15:9e:49:1d:58:94:d6:97:f0:6d:
b0:f5:05:44:17:91:3e:c4:0e:32:d0:07:80:51:36:
df:28:34:9e:7b:a0:a5:4a:46:70:51:fd:80:d8:f3:
c6:d0:c0:cd:8d:f0:09:17:ed:1d:0a:07:8e:8b:89:
2f:43:c6:02:d1:56:9d:69:66:c0:1d:9c:4f:7c:74:
60:a2:bb:1d:c1:20:e2:e6:2d:39:96:d9:6f:4b:88:
82:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E0:FD:D1:0C:F3:0B:7B:FF:8C:6D:95:F2:FD:42:3F:78:D4:6C:5D
X509v3 Authority Key Identifier:
keyid:FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/UOD90QzzC3v_jG2V8v1CP3jUbF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.192.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:5a:73:11:93:53:53:33:d4:c6:c6:26:65:a9:7f:60:a0:66:
af:e5:f3:b2:c4:49:6d:54:dd:ba:48:c5:04:42:75:6d:44:da:
47:ee:0a:5a:95:1e:08:64:2a:88:f7:a6:a1:67:e3:aa:89:d8:
84:91:bc:1f:23:fb:30:a4:06:2d:b8:30:cb:97:3e:1f:60:41:
53:21:15:81:d3:c7:c8:42:11:e1:9b:86:7f:ac:5b:07:67:1c:
8d:31:0c:6d:17:bc:ca:ab:8d:31:d8:a5:26:15:c2:fa:66:ed:
83:4c:a9:a4:cd:19:9a:da:01:3c:6e:87:66:4f:ba:58:5d:01:
f3:f3:aa:df:e3:c6:9b:e9:b2:25:75:ad:4f:96:3d:7f:ba:a3:
ae:86:34:85:f7:6c:59:db:b6:84:68:e0:a1:2f:2d:0e:e3:56:
97:69:00:25:fc:03:b9:9b:04:10:00:6e:ff:ea:6b:97:c9:1c:
44:b4:9a:0c:fe:0a:6f:fb:4a:07:21:ed:bc:8c:b1:15:5e:8c:
d2:99:77:d8:5e:76:62:71:de:e4:78:7d:b0:4f:c8:0c:ee:c5:
37:d9:cc:2b:e4:88:1b:89:02:25:7d:7f:c0:0c:d1:2d:a9:9f:
b9:ad:e9:b0:78:eb:ec:96:30:0a:1e:9c:1f:86:92:5f:04:16:
4f:dc:a2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:25 2024 by rpki-client on console-ams.rpki-client.org