Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/pX7MmEP5b2ZVihaZbcx2BBmhb-g.roa
File: pX7MmEP5b2ZVihaZbcx2BBmhb-g.roa (raw, json)
Hash identifier: bE1eokzPQcN8A0jW2PInLm5gJPtbpdL3k4c33VPjIuE=
Subject key identifier: A5:7E:CC:98:43:F9:6F:66:55:8A:16:99:6D:CC:76:04:19:A1:6F:E8
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 01856FC289B28BFA115D84C08E7582E51865
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/pX7MmEP5b2ZVihaZbcx2BBmhb-g.roa
Signing time: Sun 01 Jan 2023 23:54:58 +0000
ROA not before: Sun 01 Jan 2023 23:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 185.155.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:89:b2:8b:fa:11:5d:84:c0:8e:75:82:e5:18:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jan 1 23:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a57ecc9843f96f66558a16996dcc760419a16fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:95:bf:9c:46:46:4d:c7:da:7d:6a:2e:c7:da:
83:40:ec:02:b6:b9:25:f6:26:95:07:4c:98:a7:b4:
13:b9:95:dc:66:a0:3e:59:d1:9a:d7:67:95:de:d6:
e3:ef:17:9c:02:5c:eb:74:72:a5:a9:0d:83:5b:7b:
fd:4e:2f:ad:af:b2:79:c8:b6:3b:61:a7:54:94:0a:
bd:46:2b:fb:1e:32:e1:8d:b8:2c:32:2b:e3:88:a6:
db:46:12:01:f9:d2:f4:ff:65:34:b8:7e:83:46:68:
58:43:06:cb:d3:9e:69:28:ec:7d:1c:f5:5a:29:10:
b0:07:d6:10:ed:0f:5f:52:1e:7b:f2:a6:7b:be:e0:
22:68:40:24:5f:74:0b:c5:2e:c6:8a:4a:01:8b:d5:
f9:e4:bc:77:f2:6c:8d:e6:98:fe:34:ea:ff:35:d1:
e9:05:4d:60:cf:e2:53:dd:9b:38:fa:ce:5d:86:49:
a2:41:23:cf:96:4b:a6:16:ca:c3:87:0d:29:5c:4b:
e2:9a:90:d5:a9:86:66:56:b1:c2:3e:46:e8:dd:fc:
21:d1:56:53:19:1b:7f:2e:96:65:b0:06:e2:df:57:
13:20:2f:96:83:64:89:7d:73:00:67:64:cc:92:e3:
27:87:12:f6:a5:e1:59:c7:3b:be:6f:b4:17:39:4a:
05:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7E:CC:98:43:F9:6F:66:55:8A:16:99:6D:CC:76:04:19:A1:6F:E8
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/pX7MmEP5b2ZVihaZbcx2BBmhb-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.55.0/24
Signature Algorithm: sha256WithRSAEncryption
47:bd:6f:64:94:c7:78:0b:e4:db:ae:40:9b:97:1f:f7:6f:d2:
f8:f6:49:a2:5c:3a:c4:6c:fa:97:d4:e4:a1:38:db:a4:cd:96:
fb:67:ec:be:32:a7:1a:82:2b:bf:d9:c1:9c:e8:a3:cd:4e:44:
df:1a:2a:81:96:ef:35:f4:82:58:8b:30:63:ec:aa:74:22:a1:
ae:4b:05:98:6d:14:ef:c7:46:34:7c:6f:1e:71:0f:19:25:2b:
7c:1a:9c:29:33:ba:a5:9d:07:e2:b0:1e:7a:f2:0a:e7:eb:99:
3b:12:e2:78:07:6f:5c:23:01:96:ca:a8:32:b3:73:14:d0:cc:
86:61:3b:0d:d2:65:37:f2:0c:ce:9f:0e:fd:30:67:ff:dc:25:
8d:13:c1:8e:ab:67:7b:30:22:17:d1:b4:8d:e6:7f:13:25:8d:
27:bc:85:cf:6e:31:00:43:c1:16:5f:a3:96:73:4e:9a:b7:e2:
3f:5e:3d:0a:75:30:3c:30:95:1d:72:1a:83:ac:ff:77:79:f4:
03:52:34:44:08:86:82:87:40:5e:cc:77:7f:3f:06:b6:69:dd:
18:a6:60:58:27:c6:d7:79:aa:79:63:39:73:72:e1:24:64:a4:
66:34:b9:e9:ae:e3:27:81:cd:77:80:9e:03:72:e1:44:c2:6e:
b9:59:57:c5
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 15 16:06:22 2023 by rpki-client on console-fra.rpki-client.org