Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/66fSRYPZ7ZiDZRW8DqQV_E4O2Bg.roa
File: 66fSRYPZ7ZiDZRW8DqQV_E4O2Bg.roa (raw, json)
Hash identifier: hln9pwlBmgclZrL3i/mFeR4M0CWxBK5NebLX+xnODxc=
Subject key identifier: EB:A7:D2:45:83:D9:ED:98:83:65:15:BC:0E:A4:15:FC:4E:0E:D8:18
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 01856FC2882E61AA1BDE271775B7C13067AE
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/66fSRYPZ7ZiDZRW8DqQV_E4O2Bg.roa
Signing time: Sun 01 Jan 2023 23:54:57 +0000
ROA not before: Sun 01 Jan 2023 23:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 185.155.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:88:2e:61:aa:1b:de:27:17:75:b7:c1:30:67:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jan 1 23:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eba7d24583d9ed98836515bc0ea415fc4e0ed818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:66:e1:1f:68:d1:1f:8f:27:c4:69:1a:f1:
a7:c7:9e:96:dc:35:aa:75:94:0c:4c:bf:b3:0e:db:
67:64:a5:af:dd:0b:9d:08:70:0f:e6:92:90:6f:ae:
e1:dd:22:9d:94:f3:c8:5b:ef:ad:f8:8e:c3:6e:a1:
4e:df:a5:2e:dc:e1:bf:25:c8:89:12:df:73:93:19:
96:e9:9b:e8:35:f6:9a:90:ff:c2:02:fb:e0:ff:c9:
03:a1:04:71:e4:7c:a4:78:ee:76:df:14:3f:2a:9d:
40:12:81:99:34:be:16:a1:1e:fd:be:d9:f2:c9:ae:
e5:f4:a0:66:88:75:bc:15:81:6e:f9:f8:29:d5:90:
ac:67:b5:00:2b:cc:06:7a:9f:93:1c:f8:81:6e:e1:
d0:52:ef:f9:af:cc:b4:69:48:c6:f1:29:b7:f3:71:
48:ab:b5:68:85:9d:61:91:85:78:a7:d1:49:1c:06:
53:db:4b:6d:54:2e:ec:5c:fb:71:1a:9d:51:7f:8e:
ea:61:00:af:7d:22:91:62:38:33:e8:c8:e0:3a:e6:
35:e2:71:90:16:1c:f1:79:4b:66:b8:4e:13:c4:cd:
59:a4:dc:c5:01:4d:5c:e1:ec:66:17:b1:f4:f3:49:
5c:4a:92:4d:90:37:82:a8:0a:cb:ef:82:50:1b:d8:
42:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A7:D2:45:83:D9:ED:98:83:65:15:BC:0E:A4:15:FC:4E:0E:D8:18
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/66fSRYPZ7ZiDZRW8DqQV_E4O2Bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.54.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:73:d0:8e:cd:5e:46:8f:bd:a8:f3:af:06:68:3a:16:1c:56:
3f:25:f8:db:5f:a9:30:c2:cd:5a:43:65:eb:80:42:54:f2:70:
6a:7e:79:9e:da:62:4f:3b:bd:8d:51:61:aa:6b:4c:91:59:50:
c3:8e:d2:1a:d7:86:63:33:11:85:7c:0e:64:ac:5d:83:d1:43:
8e:a2:0b:9e:ab:0c:65:23:68:8e:5c:fb:08:45:26:ae:83:57:
ec:00:a9:c9:2a:a6:70:0b:0f:74:0c:9d:1d:70:e9:32:f1:ca:
0b:58:c1:37:3c:36:d7:ef:3e:c5:55:db:7b:93:09:9e:c9:07:
87:e7:f3:0a:23:e6:e2:a1:0d:5d:55:ac:be:78:e7:06:a3:95:
65:e4:47:c6:31:24:87:e0:b0:ec:d2:f5:12:23:1b:82:de:3b:
96:c6:25:06:72:5b:c2:6f:31:79:ad:63:03:6e:04:7e:1b:0a:
b2:98:8e:8a:9d:36:40:d4:6d:04:a9:03:5b:5e:80:b8:43:82:
08:d6:7e:45:52:32:63:44:9a:c7:1f:6a:50:56:b5:75:6a:97:
d3:4f:cf:6b:0c:14:bd:de:b5:be:cf:ec:5b:f1:67:39:09:d3:
2b:e7:5f:47:6d:c3:9f:0d:9e:3a:cb:e6:fc:80:03:7b:a7:9a:
76:18:ac:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 13:17:19 2023 by rpki-client on console-fra.rpki-client.org