Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/3iwQsveA7JcJn64an71jBzSOpSU.roa
File: 3iwQsveA7JcJn64an71jBzSOpSU.roa (raw, json)
Hash identifier: jdbsDNyIsSJJXcCa0xYb5XJjzW71ltFga8kRps2RcKs=
Subject key identifier: DE:2C:10:B2:F7:80:EC:97:09:9F:AE:1A:9F:BD:63:07:34:8E:A5:25
Certificate issuer: /CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
Certificate serial: 01856C0A6B1EB36C9D85B3E1A834BA82A51F
Authority key identifier: 44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/3iwQsveA7JcJn64an71jBzSOpSU.roa
Signing time: Sun 01 Jan 2023 06:35:00 +0000
ROA not before: Sun 01 Jan 2023 06:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204577
IP address blocks: 185.54.210.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:6b:1e:b3:6c:9d:85:b3:e1:a8:34:ba:82:a5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
Validity
Not Before: Jan 1 06:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de2c10b2f780ec97099fae1a9fbd6307348ea525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:65:a6:59:7d:94:bf:d9:7f:93:ce:1f:b7:
4a:f2:da:c0:02:cb:fc:3a:aa:c3:0e:9c:c9:3c:61:
c1:1b:d1:ee:c2:c7:50:b0:ee:d0:5b:a1:60:09:68:
4d:6e:7a:b1:cc:8e:76:e0:88:0b:19:b5:85:a6:be:
4f:cb:8a:50:e3:29:9b:39:0b:3c:83:ab:ea:fe:c0:
30:13:67:ca:3e:fb:4d:9c:67:98:04:c2:bf:d2:95:
60:e8:14:b9:be:20:08:6e:8e:e7:6a:af:b6:b3:fc:
36:a4:61:6a:e1:87:87:13:e6:62:b8:40:9c:6a:92:
1b:8d:e7:3b:8e:0e:d4:29:4f:62:d7:6e:23:c3:16:
5f:a4:98:e6:19:45:e8:c0:1b:28:40:f4:5b:b4:37:
87:b7:88:67:fc:b0:c6:71:43:fb:50:bd:b2:15:29:
21:06:a1:ce:f7:c7:97:e9:b0:63:00:b7:c4:54:52:
8a:22:12:d6:91:20:f2:b5:dd:d0:9d:c6:36:fd:1c:
b0:68:7f:69:f7:8f:85:a1:9b:c4:99:77:bb:86:5b:
a7:2f:0a:64:4a:6c:26:4c:02:29:0b:cd:87:38:9f:
2f:83:d8:f5:20:05:96:e4:da:27:22:67:57:56:47:
8e:31:fa:3e:75:d2:55:59:73:c6:e4:4e:74:4a:22:
77:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2C:10:B2:F7:80:EC:97:09:9F:AE:1A:9F:BD:63:07:34:8E:A5:25
X509v3 Authority Key Identifier:
keyid:44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/3iwQsveA7JcJn64an71jBzSOpSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.210.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:a4:8a:ac:4d:8b:cb:b5:74:39:8c:55:26:56:3c:ae:db:f7:
01:b9:60:a0:bf:c6:7d:ac:46:35:7b:51:a5:5f:3b:ce:f4:dd:
e1:a4:2e:5d:f3:99:fa:f1:1b:4a:59:f1:21:09:6d:e2:4c:74:
45:8f:ce:7f:a8:d1:d8:5f:e9:d5:7d:40:62:55:ae:83:43:71:
2b:a5:2f:38:59:c3:3d:1e:a9:69:9b:11:79:6e:fc:8a:f5:f3:
4b:ec:c2:62:aa:0e:fc:25:af:73:3d:79:6a:9d:8f:ce:fe:1b:
6c:71:a3:1d:f3:5d:f8:00:c3:8e:5c:a4:ef:47:9f:0a:da:2a:
9d:83:9c:6d:8e:0a:d4:7d:17:78:c4:5e:6d:48:49:56:02:56:
c5:fb:15:e4:08:98:54:ae:42:8f:3f:8b:dd:71:1e:c8:d1:fe:
cc:c8:86:86:63:a9:f0:36:86:94:a9:d3:6f:e4:6f:08:44:8f:
7d:35:86:70:41:5c:e1:bb:c6:7c:bb:c3:2b:cb:ce:ec:6c:b8:
29:c5:52:7d:0c:3b:5a:d6:3c:a2:69:f2:06:69:c3:1a:64:0f:
0a:44:4a:27:f6:08:ec:e0:ea:40:92:36:ea:b7:e5:ac:7c:c4:
c7:91:01:f1:54:34:c0:fc:df:72:d1:93:69:b6:5d:12:00:f9:
66:72:ca:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:58 2024 by rpki-client on console-fra.rpki-client.org