Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/k5J38b6KQTTO8ukT9zScHkRsFGQ.roa
File: k5J38b6KQTTO8ukT9zScHkRsFGQ.roa (raw, json)
Hash identifier: kRgjqgDhxdQRKaTtP6NL9ZyqKfTc2dz54zrzlW4/vJU=
Subject key identifier: 93:92:77:F1:BE:8A:41:34:CE:F2:E9:13:F7:34:9C:1E:44:6C:14:64
Certificate issuer: /CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Certificate serial: 01856F823B7CF3E4519C347E4A423BFEB20F
Authority key identifier: 21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/k5J38b6KQTTO8ukT9zScHkRsFGQ.roa
Signing time: Sun 01 Jan 2023 22:44:43 +0000
ROA not before: Sun 01 Jan 2023 22:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60205
IP address blocks: 185.25.47.254/31 maxlen: 31
185.25.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:3b:7c:f3:e4:51:9c:34:7e:4a:42:3b:fe:b2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Validity
Not Before: Jan 1 22:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=939277f1be8a4134cef2e913f7349c1e446c1464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:cc:3f:27:2f:98:f8:ae:74:f2:01:dc:18:
a1:ef:e9:30:37:61:f4:70:71:45:a8:37:30:a3:90:
e0:68:0a:25:2b:d6:34:56:a4:29:3f:97:82:cc:bf:
9a:3d:da:c9:11:b2:ca:0d:f1:b2:52:cb:4a:4f:85:
e2:e6:26:db:d9:8b:a4:a7:82:dc:75:cf:90:97:95:
0b:40:6a:4d:ac:04:aa:c5:e7:ec:31:4a:52:b7:89:
03:aa:90:ff:02:e9:83:88:16:2b:87:05:68:40:48:
29:d7:d0:1d:e4:32:7b:42:ab:10:d4:d9:3d:c3:ac:
a9:a6:9a:77:08:db:26:34:e3:1e:31:d0:80:db:94:
fd:14:81:ae:39:89:cb:8e:a1:1f:32:f9:ca:50:c1:
c1:64:0b:0c:4c:6f:b6:8e:60:4f:94:3a:91:5d:a0:
ec:43:1e:15:f0:8f:5e:45:09:4d:63:83:cb:f0:c6:
57:74:27:b0:88:fc:d7:45:21:d5:f7:fe:0f:d9:09:
86:e1:32:df:15:ea:df:e7:3a:f2:41:3b:9d:94:86:
84:a7:6c:a4:80:e2:bc:9a:5d:8e:54:4f:e4:d9:2f:
37:a4:eb:52:a6:4d:01:57:70:c9:df:25:2d:10:07:
05:6f:28:44:72:8c:3e:68:99:e7:c9:c3:45:91:a4:
a1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:92:77:F1:BE:8A:41:34:CE:F2:E9:13:F7:34:9C:1E:44:6C:14:64
X509v3 Authority Key Identifier:
keyid:21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/k5J38b6KQTTO8ukT9zScHkRsFGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.47.0/24
Signature Algorithm: sha256WithRSAEncryption
44:44:f5:eb:51:72:23:53:2b:a1:b4:e6:95:6e:46:58:39:9e:
99:26:24:7c:4b:dd:01:0d:ba:d5:62:9f:bf:b4:51:84:7a:50:
2a:fa:ee:40:ce:08:00:55:30:93:c7:10:ef:42:90:4a:70:c2:
c3:0f:62:fa:0c:db:0c:10:54:0f:3f:dd:97:b5:69:b9:f9:be:
5c:2f:9e:c1:ee:22:0f:34:ec:85:ca:76:42:5f:bd:1c:e7:36:
58:1e:0b:c6:29:7e:f8:71:b3:b7:7a:f8:04:a6:27:dc:95:cb:
09:6a:3a:5f:84:c1:bf:a0:e7:8c:df:f8:59:b9:d4:04:77:c8:
23:7b:1e:30:50:dd:5a:63:ef:31:a2:f0:6d:3f:eb:c5:8c:b0:
15:be:24:4b:00:2c:62:ce:c0:e5:57:a6:5b:64:2e:c5:59:eb:
65:0b:5f:10:2c:20:c2:5e:7b:46:65:ee:ec:19:e2:5c:3c:04:
a7:23:35:2e:11:33:68:f3:30:3b:af:2e:3e:4a:c2:4a:24:ab:
64:1c:de:bf:2d:da:4f:a8:9b:87:d7:8c:d7:1e:ff:f2:8d:9c:
c5:15:da:21:76:c6:11:8a:cc:ec:92:fe:06:7a:fd:94:f6:ae:
7c:c5:ff:78:09:3e:f1:ff:6f:3f:8c:b8:21:fc:22:12:f1:a3:
2c:85:c3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:54 2024 by rpki-client on console-fra.rpki-client.org