Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/32JnI1kNkB6D_TxNpnqDYpSMLn8.roa
File: 32JnI1kNkB6D_TxNpnqDYpSMLn8.roa (raw, json)
Hash identifier: GJAfTJBohzh3lg1UNhbaXtLpJpO1WggSLS1icKXdkZw=
Subject key identifier: DF:62:67:23:59:0D:90:1E:83:FD:3C:4D:A6:7A:83:62:94:8C:2E:7F
Certificate issuer: /CN=27e367d8decf7d626e54780f80e57360d2c078cd
Certificate serial: 01856DB88BB97996B11CDE0524C08E861004
Authority key identifier: 27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/32JnI1kNkB6D_TxNpnqDYpSMLn8.roa
Signing time: Sun 01 Jan 2023 14:24:48 +0000
ROA not before: Sun 01 Jan 2023 14:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204184
IP address blocks: 185.245.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:8b:b9:79:96:b1:1c:de:05:24:c0:8e:86:10:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e367d8decf7d626e54780f80e57360d2c078cd
Validity
Not Before: Jan 1 14:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df626723590d901e83fd3c4da67a8362948c2e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a1:87:5f:e9:10:2c:71:6b:27:cf:da:f6:fe:
be:04:56:c0:2e:48:a8:da:a1:76:32:9b:21:00:0f:
8d:83:3e:cf:54:bf:a9:31:ac:c7:1d:94:b3:49:21:
b8:58:c5:b4:a2:b3:f9:c6:4d:aa:5f:2b:7b:07:47:
89:50:dc:4b:b4:ea:8e:a5:b9:da:ba:41:91:aa:84:
24:ae:be:58:82:d2:4f:d4:03:e9:36:fc:9b:0e:b2:
64:63:34:6f:b9:09:2c:e1:71:ea:67:13:0e:67:3d:
56:3e:55:7d:a0:e7:99:18:ec:d7:87:85:4e:f0:0d:
4d:df:59:80:e3:12:c9:ef:9f:8b:76:06:45:71:ae:
0a:a1:ad:89:94:77:6d:c8:3d:78:88:89:17:ea:20:
59:ba:2e:47:76:5d:d5:31:c9:9a:d6:2a:77:99:18:
b2:3f:bb:31:b2:cf:57:e2:63:6c:7f:64:20:bb:00:
05:a5:45:21:b1:4d:1b:9f:eb:1c:14:ca:e3:cc:b4:
0b:10:cd:43:5f:4b:e3:8a:0e:85:dc:cd:ff:f0:3c:
02:52:75:e1:df:de:fe:9f:2d:66:4c:c4:39:a3:f3:
f7:77:cc:e2:be:e7:66:77:cb:ab:e9:8b:15:22:5f:
4f:2b:c9:37:3f:7a:ea:2a:cc:34:2f:73:5c:7d:09:
dd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:62:67:23:59:0D:90:1E:83:FD:3C:4D:A6:7A:83:62:94:8C:2E:7F
X509v3 Authority Key Identifier:
keyid:27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/32JnI1kNkB6D_TxNpnqDYpSMLn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.53.0/24
Signature Algorithm: sha256WithRSAEncryption
02:bb:48:d6:2f:21:1e:c6:2c:b8:4c:c5:f5:7d:f8:60:44:a4:
ad:95:a6:99:48:33:0b:c9:f8:8a:24:f6:cc:23:0c:32:3b:8c:
c2:43:2e:e3:ef:d3:c5:17:2d:a4:d4:65:80:cf:e9:ee:64:81:
bd:ca:a2:4a:47:ac:7f:d2:1e:6a:2d:b3:ce:24:cc:bd:25:2d:
62:0e:c3:e7:2e:7e:6d:70:9e:86:81:e0:7d:e7:fd:a5:e7:48:
3f:ab:47:8f:50:e5:33:6c:fb:bb:f2:fd:3f:f2:48:7f:7d:0c:
18:cd:17:b1:d4:66:22:d1:5f:05:af:b3:a1:1c:94:4a:0e:9d:
e5:de:72:3d:ef:8b:e5:1d:d2:93:10:b7:51:47:fc:b2:4f:be:
07:11:90:c6:e9:f9:05:81:1e:3a:b1:8c:52:18:76:be:33:8f:
f2:7b:e9:16:dd:c5:3a:38:f4:50:11:4d:dc:1d:62:0d:b5:b2:
88:e5:94:25:b2:a5:ed:92:42:ef:0c:b9:6e:e4:2c:49:1e:df:
9d:54:d9:fd:40:84:c3:d3:9d:e8:cb:26:98:4b:e2:28:f4:e5:
8d:31:c7:a0:d7:99:71:73:15:39:8d:3e:35:0f:ab:49:56:e6:
68:8c:61:bb:a5:c9:5d:59:50:5c:85:cc:ee:41:80:36:05:2f:
8d:cb:90:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:28 2024 by rpki-client on console-ams.rpki-client.org