Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/DlPFpyxarhb8b3mM4Jys1DgF9iw.roa
File: DlPFpyxarhb8b3mM4Jys1DgF9iw.roa (raw, json)
Hash identifier: YI23ig+myme/2zpUZo0IzCKIvOZu9bfL1AkBM7VfvqI=
Subject key identifier: 0E:53:C5:A7:2C:5A:AE:16:FC:6F:79:8C:E0:9C:AC:D4:38:05:F6:2C
Certificate issuer: /CN=2fbe2ad7cc69a95e3a8071fb33df9af7a379928b
Certificate serial: 01857230F5C4A2AAC951120375579A016682
Authority key identifier: 2F:BE:2A:D7:CC:69:A9:5E:3A:80:71:FB:33:DF:9A:F7:A3:79:92:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/DlPFpyxarhb8b3mM4Jys1DgF9iw.roa
Signing time: Mon 02 Jan 2023 11:14:49 +0000
ROA not before: Mon 02 Jan 2023 11:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42605
IP address blocks: 185.243.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:f5:c4:a2:aa:c9:51:12:03:75:57:9a:01:66:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbe2ad7cc69a95e3a8071fb33df9af7a379928b
Validity
Not Before: Jan 2 11:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e53c5a72c5aae16fc6f798ce09cacd43805f62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:17:c6:f8:d3:f6:85:23:0c:63:e9:79:46:
7c:32:57:83:53:66:95:c5:48:76:88:18:a0:d3:45:
30:d9:e1:8b:11:d8:28:6f:05:3b:63:14:76:76:4c:
fc:25:5e:a4:87:6b:f8:bf:5d:ac:bd:49:bd:b8:97:
50:5a:4c:b0:77:c6:ea:57:f6:43:e0:40:46:33:39:
f2:d1:9a:2d:7a:b5:1f:20:b5:90:6a:03:1c:58:70:
68:83:31:b0:1b:f5:43:2b:2b:7a:a7:1c:95:6c:ad:
c7:29:5b:d7:89:af:7e:7e:a0:f3:b4:58:c7:98:43:
cf:b5:7d:0e:b4:93:8a:03:09:00:69:50:01:ee:c1:
71:0b:c9:c5:83:73:f5:84:30:fb:3c:02:12:c6:17:
3c:2c:7f:81:81:16:b4:0f:41:46:db:a0:fd:3d:40:
72:81:c9:95:0b:31:b6:4d:37:c8:9f:da:84:11:a8:
3c:6a:cf:79:f8:2c:a7:12:7a:5a:ee:e1:1f:fb:d3:
0a:3c:fd:00:23:bf:5e:b2:68:15:7c:25:67:46:bc:
a7:d6:66:0f:52:4d:a9:d1:ea:10:88:38:23:d1:86:
b6:ca:42:23:47:7c:f6:3a:c6:0f:ea:a0:4d:eb:d5:
6d:15:05:84:c6:ce:fd:57:7c:c8:37:33:04:a7:e1:
99:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:53:C5:A7:2C:5A:AE:16:FC:6F:79:8C:E0:9C:AC:D4:38:05:F6:2C
X509v3 Authority Key Identifier:
keyid:2F:BE:2A:D7:CC:69:A9:5E:3A:80:71:FB:33:DF:9A:F7:A3:79:92:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/DlPFpyxarhb8b3mM4Jys1DgF9iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:cf:5a:fb:0e:ef:62:bd:34:01:bd:e0:a2:d2:b9:7b:74:ec:
e0:b3:78:8a:02:b6:8e:66:23:52:c7:26:d0:db:01:d8:e1:a4:
08:98:5d:5f:fe:a1:9f:0a:d4:b9:1c:ce:d7:2b:41:80:7e:83:
31:e4:bf:29:ea:62:ec:45:7a:fa:f6:70:ae:0c:22:a5:9d:18:
54:b2:d4:ef:db:bb:fd:74:f9:68:bb:8f:7d:00:1c:aa:8b:3c:
95:7b:c3:d7:e0:10:03:fc:38:63:7f:ba:dd:10:c8:a8:57:fe:
f7:d0:8a:ec:4c:9b:38:89:a2:3b:da:1a:df:31:97:e7:23:8e:
de:5d:72:1a:55:8b:fd:71:29:63:2d:3c:66:ba:f9:a7:fc:1c:
f0:0c:eb:0d:f3:7c:47:2b:70:73:f8:cd:90:32:78:88:b5:10:
3a:c2:c2:35:db:21:cb:26:39:59:69:b9:44:2d:a5:e8:71:67:
40:d9:72:37:a0:70:f8:1c:5e:98:03:2b:9f:74:f4:93:5a:db:
82:8e:3e:42:83:49:0d:a7:df:b1:97:e2:c9:9d:59:d4:3e:b3:
56:96:f0:23:0a:6a:7f:0f:45:05:71:02:ac:94:21:8f:e5:6f:
db:89:dc:87:e8:8e:62:fa:95:5c:32:06:b4:ce:83:72:31:af:
3c:40:b9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:00 2024 by rpki-client on console-fra.rpki-client.org