Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/U55pAmEKDaNa0jofJs4SVWhQj0c.roa
File: U55pAmEKDaNa0jofJs4SVWhQj0c.roa (raw, json)
Hash identifier: VmDdiFAOU+d4S7WW8j3+Sx4s3nfUIrGhEz7WqQNOnNo=
Subject key identifier: 53:9E:69:02:61:0A:0D:A3:5A:D2:3A:1F:26:CE:12:55:68:50:8F:47
Certificate issuer: /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Certificate serial: 01857246ED71DBC074041200DE73CB6978E9
Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/U55pAmEKDaNa0jofJs4SVWhQj0c.roa
Signing time: Mon 02 Jan 2023 11:38:48 +0000
ROA not before: Mon 02 Jan 2023 11:38:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 185.248.248.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:ed:71:db:c0:74:04:12:00:de:73:cb:69:78:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Validity
Not Before: Jan 2 11:38:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=539e6902610a0da35ad23a1f26ce125568508f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:f7:df:e7:b2:ca:1f:3f:23:81:ca:d1:bb:
c8:73:3a:d4:7a:4f:2b:35:04:2a:6e:c3:27:5c:b3:
2e:e2:23:74:59:f2:6d:f1:57:7d:08:b4:e8:44:75:
78:e0:a4:b7:16:4a:7f:12:e3:3d:9e:63:4e:6b:f3:
24:6b:f8:9e:ea:61:43:6e:f8:ca:b6:7e:6f:fe:57:
f6:a8:f7:ba:ed:15:cc:ba:51:e9:c6:25:1e:30:6f:
bf:89:8f:6d:88:71:79:ad:20:75:8b:c9:e7:17:00:
7d:2b:c4:08:79:e9:b2:9a:5d:c1:67:e6:37:44:13:
88:1e:ff:b6:ac:5f:db:0b:14:40:13:68:56:dd:69:
6b:6d:17:46:b5:15:c5:ca:18:98:8a:29:da:c8:be:
be:05:44:71:8c:55:cb:04:a5:47:f4:99:67:7c:b3:
38:3e:34:75:11:5f:b7:06:42:04:c1:13:89:23:c8:
d8:62:25:a8:f7:40:f6:7d:59:7d:b9:59:c9:4f:90:
7e:e2:e0:2e:18:e3:b7:88:ab:97:61:36:0c:ca:1b:
6d:bb:f4:20:f0:c6:7d:74:f6:f9:d6:b8:f9:fe:95:
9b:ca:af:f0:54:d6:18:75:49:7b:49:97:ec:8d:a1:
f0:90:11:8d:06:31:77:7e:de:35:4e:1c:e5:f6:7f:
65:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9E:69:02:61:0A:0D:A3:5A:D2:3A:1F:26:CE:12:55:68:50:8F:47
X509v3 Authority Key Identifier:
keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/U55pAmEKDaNa0jofJs4SVWhQj0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.248.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:11:c6:df:93:25:94:8f:7e:24:bb:95:93:bb:0d:47:c4:0d:
07:d3:d6:36:ab:a0:4b:49:ec:d4:75:57:25:06:f7:70:63:24:
b8:f6:21:c0:e2:17:13:d9:a5:2c:da:ea:8c:ef:61:61:89:4d:
aa:11:c7:5a:28:95:90:47:6c:24:07:70:bc:ef:2d:af:66:5a:
12:8c:89:34:8d:a4:37:00:82:fd:1e:df:96:26:19:cd:11:dd:
41:1c:03:ce:97:5d:9d:8a:13:ba:61:42:57:4c:16:71:a2:34:
e7:4a:55:13:1a:00:38:3a:8b:2f:3e:8f:dd:cd:a3:76:d3:87:
68:6e:69:03:87:6c:5f:b9:ee:e2:a3:24:e3:e8:69:47:de:09:
28:f2:bf:41:f2:86:88:3f:be:47:81:f4:df:bf:f1:37:69:cd:
41:61:22:92:b4:01:3c:82:f1:c9:6a:fe:02:70:df:f9:dc:32:
38:06:f2:10:62:4d:ba:cd:f8:1f:96:3d:71:d5:00:86:84:4e:
63:dd:0f:44:1c:f5:5d:a2:8e:1b:e9:ad:92:3e:17:c5:b8:3c:
53:26:62:73:d4:c3:7f:64:5a:0f:79:d0:69:46:27:ef:82:f6:
7d:73:30:74:41:45:15:17:d3:cf:19:3a:e1:44:17:07:86:87:
96:15:5f:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyRu1x28B0BBIA3nPLaXjpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZTVkNjkxN2RjMmRhYmZiNWNhZjkwN2MzZTc0NTE0OTUw
MmM5MGUwHhcNMjMwMTAyMTEzODQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzllNjkwMjYxMGEwZGEzNWFkMjNhMWYyNmNlMTI1NTY4NTA4ZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzff33+eyyh8/I4HK0bvIczrUek8r
NQQqbsMnXLMu4iN0WfJt8Vd9CLToRHV44KS3Fkp/EuM9nmNOa/Mka/ie6mFDbvjK
tn5v/lf2qPe67RXMulHpxiUeMG+/iY9tiHF5rSB1i8nnFwB9K8QIeemyml3BZ+Y3
RBOIHv+2rF/bCxRAE2hW3WlrbRdGtRXFyhiYiinayL6+BURxjFXLBKVH9JlnfLM4
PjR1EV+3BkIEwROJI8jYYiWo90D2fVl9uVnJT5B+4uAuGOO3iKuXYTYMyhttu/Qg
8MZ9dPb51rj5/pWbyq/wVNYYdUl7SZfsjaHwkBGNBjF3ft41Thzl9n9lKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFOeaQJhCg2jWtI6HybOElVoUI9HMB8GA1UdIwQY
MBaAFFTl1pF9wtq/tcr5B8PnRRSVAskOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk9YV2tYM0Myci0xeXZrSHctZEZGSlVDeVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS80NzlkMDYtOWU4NC00Zjc2LThhZTAt
MTMxZDI5MTY0ODhjLzEvVTU1cEFtRUtEYU5hMGpvZkpzNFNWV2hRajBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS80NzlkMDYtOWU4NC00Zjc2LThhZTAtMTMxZDI5MTY0ODhj
LzEvVk9YV2tYM0Myci0xeXZrSHctZEZGSlVDeVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufj4MA0G
CSqGSIb3DQEBCwUAA4IBAQBeEcbfkyWUj34ku5WTuw1HxA0H09Y2q6BLSezUdVcl
BvdwYyS49iHA4hcT2aUs2uqM72FhiU2qEcdaKJWQR2wkB3C87y2vZloSjIk0jaQ3
AIL9Ht+WJhnNEd1BHAPOl12dihO6YUJXTBZxojTnSlUTGgA4OosvPo/dzaN204do
bmkDh2xfue7ioyTj6GlH3gko8r9B8oaIP75HgfTfv/E3ac1BYSKStAE8gvHJav4C
cN/53DI4BvIQYk26zfgflj1x1QCGhE5j3Q9EHPVdoo4b6a2SPhfFuDxTJmJz1MN/
ZFoPedBpRifvgvZ9czB0QUUVF9PPGTrhRBcHhoeWFV9y
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:38 2024 by rpki-client on console-ams.rpki-client.org