Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/uLV6RFF7eCc1G1JjFMp3jOnkkG8.roa
File: uLV6RFF7eCc1G1JjFMp3jOnkkG8.roa (raw, json)
Hash identifier: QTn5od+b9Jg5HHM10VLOo94/FJA6+oq6wylEXFsX7+M=
Subject key identifier: B8:B5:7A:44:51:7B:78:27:35:1B:52:63:14:CA:77:8C:E9:E4:90:6F
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 01856C784D7A444D11C17FF3E22FF6472590
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/uLV6RFF7eCc1G1JjFMp3jOnkkG8.roa
Signing time: Sun 01 Jan 2023 08:35:01 +0000
ROA not before: Sun 01 Jan 2023 08:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 185.55.132.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:4d:7a:44:4d:11:c1:7f:f3:e2:2f:f6:47:25:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: Jan 1 08:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8b57a44517b7827351b526314ca778ce9e4906f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5d:d6:72:5b:f2:9b:4a:97:46:3a:d7:76:bc:
44:c7:e3:b1:12:1e:b7:19:c9:a4:e7:64:2c:ee:80:
8d:37:3c:c0:89:db:9e:e1:35:01:89:c0:22:57:53:
63:e5:13:e1:27:26:0e:50:7c:e1:aa:38:f4:c2:5f:
b3:e8:a8:42:8a:4e:a8:25:33:4e:d0:49:5b:0c:10:
82:7a:c0:8b:f8:c3:5b:2f:db:89:44:cd:d5:0b:37:
ff:4a:dc:ae:bf:d8:b7:ec:f6:1b:3e:38:49:89:e9:
1f:9b:b6:34:9e:e6:7e:c5:41:49:42:4d:1c:68:e2:
68:d8:e4:30:7b:55:4f:96:49:50:d1:07:61:60:1b:
9c:8d:f4:b7:e1:cb:8e:a8:07:bc:f1:64:6d:95:e8:
b3:80:b7:15:8c:36:2d:ec:cc:79:22:bf:75:d2:79:
7a:7d:2a:db:64:3d:76:6b:fb:ee:86:99:20:50:90:
3d:1e:16:cb:0d:66:de:ef:75:cc:b8:84:2e:1e:27:
05:b0:5e:49:91:1f:07:31:b2:84:ff:85:0f:d5:3b:
74:55:5e:22:8d:cf:e2:3c:2e:37:84:e3:e9:4b:a9:
37:1a:41:3f:2e:42:cf:a6:28:4c:67:9f:59:b8:b7:
c8:c4:f2:a8:25:a4:47:22:42:f4:8a:f6:88:21:e2:
1e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B5:7A:44:51:7B:78:27:35:1B:52:63:14:CA:77:8C:E9:E4:90:6F
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/uLV6RFF7eCc1G1JjFMp3jOnkkG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.132.0/22
Signature Algorithm: sha256WithRSAEncryption
00:d0:3e:35:41:49:02:e7:86:a8:ca:73:54:1b:3f:9d:0e:14:
9b:16:a7:71:70:77:6c:9a:7d:f6:ee:61:bd:ec:d7:c4:be:0b:
e1:c4:3a:dd:77:a3:5e:d0:03:ee:ab:ee:00:18:c9:10:77:d8:
47:02:24:61:3b:b6:20:e5:4d:6b:58:83:1f:b0:6c:ab:02:29:
0e:76:c7:4d:20:aa:a3:d7:a9:2e:c9:ab:91:c1:11:e5:53:2b:
55:0f:18:d5:eb:ff:1e:af:4b:51:05:32:0f:b4:c0:29:f6:1c:
87:d0:cb:ad:51:88:66:a3:1a:53:7d:6c:11:de:7e:cf:1a:99:
85:50:2f:f5:6a:f1:5e:fb:e3:2a:4b:b7:86:26:4c:fa:db:8a:
41:83:1e:71:81:fb:ed:90:84:e7:21:19:8b:ca:ee:12:20:27:
f4:24:0e:f3:29:26:81:de:54:67:bb:07:47:e3:26:a7:86:e5:
20:2e:66:fd:97:43:a8:8c:99:a7:da:b7:5d:b2:56:f4:25:70:
02:f1:bf:9c:69:78:fc:77:fd:7b:a8:a9:e1:e0:61:b6:ee:19:
c7:98:3f:18:fb:3f:fd:62:04:3c:ef:5c:42:91:79:e2:49:cc:
d4:62:b1:ce:d9:97:01:60:1b:4f:b9:93:c3:cd:16:a5:85:f1:
32:86:4b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:36 2024 by rpki-client on console-ams.rpki-client.org