Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/qWmc6S9Wl-zDHAxAmb6FImAjmXI.roa
File: qWmc6S9Wl-zDHAxAmb6FImAjmXI.roa (raw, json)
Hash identifier: H9UZMVyMw0PSL0asjtGyDoJJxw9ifq1TjMhLPqmpm9k=
Subject key identifier: A9:69:9C:E9:2F:56:97:EC:C3:1C:0C:40:99:BE:85:22:60:23:99:72
Certificate issuer: /CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Certificate serial: 018756C5E437D8A059BFE6CB4F228539D463
Authority key identifier: 5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/qWmc6S9Wl-zDHAxAmb6FImAjmXI.roa
Signing time: Thu 06 Apr 2023 13:33:42 +0000
ROA not before: Thu 06 Apr 2023 13:33:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51984
IP address blocks: 185.182.152.0/24 maxlen: 24
185.182.155.0/24 maxlen: 24
185.182.154.0/24 maxlen: 24
185.182.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:c5:e4:37:d8:a0:59:bf:e6:cb:4f:22:85:39:d4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Validity
Not Before: Apr 6 13:33:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9699ce92f5697ecc31c0c4099be852260239972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c1:8b:47:27:55:fa:e5:a5:47:01:89:c3:5e:
48:31:73:18:d3:c2:01:ca:7d:d6:e5:21:7a:d2:67:
cf:0e:b8:a8:d3:12:00:08:73:7a:42:0c:f9:d9:de:
5d:d8:23:97:8b:ca:b3:d9:61:bb:ef:51:76:00:f8:
c5:11:37:79:af:5b:18:38:44:04:8f:e8:2d:66:a8:
da:fb:92:ef:2b:d0:8f:6b:3a:d9:9f:3f:fa:58:79:
d3:7b:64:b0:f3:5e:da:79:19:a8:3c:3f:67:07:97:
9b:39:46:ad:31:14:20:42:a0:f0:e9:06:cc:aa:48:
a4:2f:4f:33:17:bc:2a:5b:15:c4:f6:68:8f:70:82:
dc:56:a1:4a:31:a2:b2:05:a1:4a:78:b8:25:61:6d:
3a:2e:d7:d8:d6:5e:1d:9e:0d:52:da:84:c1:b4:9c:
e6:8a:61:1d:56:65:47:20:f4:2b:89:cb:6b:d9:5f:
99:61:08:a1:02:a7:f6:0c:cb:e9:81:e6:57:b4:00:
cc:b1:32:0f:2d:6d:bb:03:11:4b:a0:d6:33:af:90:
eb:4d:b0:a0:4b:72:ae:e8:79:b1:96:32:a1:e4:8a:
14:f4:e3:8c:b8:00:36:c5:73:38:d4:13:a7:1c:7e:
ae:b6:87:b6:5f:5f:7e:76:21:fc:c6:7c:bd:26:2e:
fc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:69:9C:E9:2F:56:97:EC:C3:1C:0C:40:99:BE:85:22:60:23:99:72
X509v3 Authority Key Identifier:
keyid:5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/qWmc6S9Wl-zDHAxAmb6FImAjmXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.152.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:a0:91:d1:65:f7:ba:47:45:f3:c0:27:e5:a4:3d:a0:9a:cf:
98:a1:a1:f7:ef:f9:2d:91:d4:a4:0f:ec:2b:30:ba:63:d1:05:
b1:24:06:17:7a:db:10:3f:1e:d5:78:68:0a:c1:7d:9b:48:8b:
74:22:ae:56:7a:dc:58:dd:af:7d:57:e4:cc:af:50:ca:77:39:
d2:cf:a6:b4:5a:27:3d:24:f4:ba:6d:76:08:7a:25:58:5c:cf:
e5:2a:a8:11:3c:fe:33:8e:d5:61:1d:51:2c:79:ef:ea:d8:35:
51:d3:54:73:e8:3a:32:27:01:87:75:71:30:5e:93:fd:66:1d:
c1:58:5d:d1:5c:72:b4:5c:ad:4d:84:dc:fc:0f:99:b3:53:f9:
f2:e3:49:52:90:e4:ee:43:b4:40:99:9b:bc:12:78:43:bc:3a:
e7:3f:84:bc:ef:85:98:ef:6b:04:25:04:f8:cd:1a:9b:4c:d9:
91:1e:4f:b8:07:02:5d:76:02:c2:89:d0:cf:08:cf:91:02:f0:
fc:0e:e3:22:ef:71:70:87:17:53:b0:5d:2b:41:b6:53:6a:c6:
ae:0d:8c:11:6c:f4:33:20:62:b6:92:f1:a4:ae:be:eb:24:ae:
ce:89:bb:95:54:cf:3a:46:5f:41:cf:15:c9:04:27:83:84:6c:
0f:4e:c4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:42 2023 by rpki-client on console-ams.rpki-client.org