Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/uj6p5LqvTRm4fiT-gSs1mOd2f9M.roa
File: uj6p5LqvTRm4fiT-gSs1mOd2f9M.roa (raw, json)
Hash identifier: jyk6k0V0n7BLVZNMAzhrMXsQnVtaxwGvlJ5V/nqX0Kg=
Subject key identifier: BA:3E:A9:E4:BA:AF:4D:19:B8:7E:24:FE:81:2B:35:98:E7:76:7F:D3
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 018BA8B2407C04CBC7AA74D215AAA04CFACF
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/uj6p5LqvTRm4fiT-gSs1mOd2f9M.roa
Signing time: Tue 07 Nov 2023 07:32:16 +0000
ROA not before: Tue 07 Nov 2023 07:32:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 185.155.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a8:b2:40:7c:04:cb:c7:aa:74:d2:15:aa:a0:4c:fa:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Nov 7 07:32:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba3ea9e4baaf4d19b87e24fe812b3598e7767fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cd:ea:dc:33:c7:ff:b7:6e:1d:28:ab:d7:1c:
0e:e7:18:02:e2:a9:d7:87:05:a0:4b:74:ca:c7:18:
ad:d9:56:1b:3c:43:7c:15:9b:55:f1:0d:a5:c3:c6:
c5:78:c7:ca:17:c1:24:c8:f1:59:ae:d9:74:0a:61:
c1:a7:04:34:d6:02:9a:3c:25:26:78:7a:01:8b:fa:
59:f0:b9:99:a4:02:b3:77:d4:d5:f0:de:ba:b0:a8:
a7:56:db:b8:68:ce:dc:29:53:92:55:aa:ce:9e:f5:
e4:ba:75:9b:53:28:68:18:76:05:76:bf:cd:3d:0e:
21:81:a9:e1:63:5b:12:d4:6f:65:e1:09:0c:71:e5:
b0:ad:32:b0:e6:e6:04:0e:a0:91:e8:13:bc:04:b0:
8e:41:07:9d:9c:1f:26:18:cf:47:f1:31:b2:92:ac:
73:3e:9b:58:74:01:25:f9:9d:fc:77:39:65:b5:97:
bf:1b:fb:5a:28:3b:b8:7e:2a:93:03:79:cb:ab:16:
1f:fb:1a:03:15:41:30:05:43:36:a9:3c:87:5c:bc:
16:ce:0b:28:74:16:29:6b:2a:a9:d1:21:52:9f:be:
ed:bc:e9:c9:2f:01:d0:91:dd:11:93:8f:c8:40:00:
e9:ed:76:fc:40:ad:9f:38:6a:75:7f:5e:cb:d0:4a:
dc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3E:A9:E4:BA:AF:4D:19:B8:7E:24:FE:81:2B:35:98:E7:76:7F:D3
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/uj6p5LqvTRm4fiT-gSs1mOd2f9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.52.0/24
Signature Algorithm: sha256WithRSAEncryption
91:2a:f3:61:b5:4e:33:27:a8:20:d8:94:77:88:49:21:a0:e9:
c4:01:ee:fb:ab:a3:b8:05:56:64:ef:b7:bf:50:c3:43:18:57:
e4:f1:ff:c5:2f:49:24:22:fe:68:22:9e:bb:cd:2c:70:2a:b6:
98:2c:b9:bd:01:1b:99:b5:01:4d:2d:90:81:9c:c4:39:bd:6a:
c9:ae:8d:29:5c:98:63:5a:d7:4e:bc:91:bc:db:82:a5:2a:d7:
fb:b2:f8:d4:ba:9d:ea:b1:08:0d:88:41:88:fd:9f:49:fb:3a:
a4:06:4a:ab:c3:1b:f7:12:91:83:84:63:4e:ce:70:9f:26:8b:
0a:0c:f2:39:98:ad:8a:45:b0:ee:9e:ff:df:d3:e7:c5:83:13:
dd:c4:52:7e:b5:ac:c7:74:71:b6:d3:b1:5e:a8:ec:3a:a3:75:
42:0d:46:8a:46:f4:2d:03:c0:36:cc:b2:b1:d1:ab:0a:db:5e:
e8:81:c8:c5:48:40:b3:33:d4:ee:d0:22:e0:ba:40:24:cb:73:
c1:cd:2a:ab:62:18:bb:80:09:a8:27:70:4d:db:23:0a:60:f9:
c6:10:c6:d3:ae:d8:a3:c7:ac:36:1e:ac:21:89:fd:db:cd:41:
71:40:a0:df:67:bb:06:fe:46:75:73:4e:0e:dc:d3:eb:01:7e:
8b:a7:8d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:41 2024 by rpki-client on console-ams.rpki-client.org