Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/sDs6xMdHmYmkYgC1ORNjXXNs3z8.roa
File: sDs6xMdHmYmkYgC1ORNjXXNs3z8.roa (raw, json)
Hash identifier: 3pwvViUUOqi5odM/fHxELjX88UoNi6Fn3POb4dsQdTc=
Subject key identifier: B0:3B:3A:C4:C7:47:99:89:A4:62:00:B5:39:13:63:5D:73:6C:DF:3F
Certificate issuer: /CN=e334ec393448d83bf1515f4967a448098e55fb43
Certificate serial: 01857183184D031595F06FE1CD768833AB3C
Authority key identifier: E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/sDs6xMdHmYmkYgC1ORNjXXNs3z8.roa
Signing time: Mon 02 Jan 2023 08:04:54 +0000
ROA not before: Mon 02 Jan 2023 08:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62092
IP address blocks: 185.226.164.0/24 maxlen: 24
2a0f:d340::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:18:4d:03:15:95:f0:6f:e1:cd:76:88:33:ab:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e334ec393448d83bf1515f4967a448098e55fb43
Validity
Not Before: Jan 2 08:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b03b3ac4c7479989a46200b53913635d736cdf3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:fb:b8:d3:2d:ae:81:6b:dd:95:d5:c6:d5:
d7:77:fa:a4:4d:50:43:db:12:39:94:43:e5:92:d3:
ad:69:79:10:11:ae:d6:4e:c2:43:8a:d2:4e:ad:63:
40:9f:4d:e2:3e:c3:f2:6f:c4:6a:f9:71:d5:71:8a:
cc:0c:79:74:f2:17:62:44:85:81:7c:07:21:75:b6:
c0:2f:64:d2:9f:54:65:5b:e1:aa:d7:1a:31:b1:47:
f9:29:1a:32:6e:8a:b6:f7:e4:fb:fc:36:23:f3:69:
99:6c:83:4c:f4:57:95:22:ab:3d:03:40:f9:1d:54:
ae:8a:1e:bb:fe:0c:0d:ab:c2:d0:fd:ac:23:9c:86:
60:fd:4e:34:2b:cd:d7:09:77:7a:5f:74:a4:07:f7:
fd:80:1d:53:c5:11:4a:84:90:a3:aa:35:73:95:12:
96:99:6d:bd:78:b4:f3:f1:6b:e1:8b:00:03:62:39:
7c:91:0d:2b:b8:ed:67:f9:20:b5:46:2f:bb:6a:a4:
5b:98:bc:c4:24:c7:7b:66:cf:3c:d8:5c:49:63:be:
56:47:fd:6d:34:36:45:82:6d:ef:3d:b2:97:c9:e7:
93:bc:a1:29:95:3e:fb:9b:88:f4:a3:46:64:5b:1f:
1b:d7:10:88:f3:35:40:01:a2:6b:7c:b5:7b:78:f4:
89:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3B:3A:C4:C7:47:99:89:A4:62:00:B5:39:13:63:5D:73:6C:DF:3F
X509v3 Authority Key Identifier:
keyid:E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/sDs6xMdHmYmkYgC1ORNjXXNs3z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.164.0/24
IPv6:
2a0f:d340::/29
Signature Algorithm: sha256WithRSAEncryption
45:e3:6c:42:1c:b0:44:17:aa:09:ec:5a:1f:84:25:bd:02:53:
5c:62:af:0b:b9:78:20:fe:e5:6d:ad:62:bb:1a:a1:1f:fe:07:
51:29:86:d9:d4:af:8b:24:ff:08:aa:e0:99:e8:27:09:3b:90:
56:0e:12:82:16:91:06:e0:20:40:b1:8c:11:8c:6a:69:97:46:
35:2f:19:b4:da:b0:5d:46:71:38:f9:04:34:6b:cd:9f:18:82:
11:a1:bc:b9:01:a2:e4:03:ce:6c:ab:44:2d:1b:09:49:0c:db:
83:44:02:11:df:c9:7f:56:ea:fe:e5:e4:ea:94:d8:ec:28:bb:
7f:54:7d:27:6e:94:df:99:c6:62:aa:3e:96:c7:b1:17:43:31:
c5:78:a3:4f:85:1e:94:1f:23:40:45:4f:bd:15:6a:60:2b:35:
ad:77:c3:a0:b4:a8:81:18:f1:64:e9:64:71:e5:cc:56:f1:4f:
0b:6d:2a:ee:48:9d:a8:59:33:93:af:09:d0:7b:79:00:25:66:
c2:d4:0d:e7:a2:bf:0a:1c:03:c0:ad:b2:30:93:ba:0d:36:cb:
75:ea:dc:6e:d6:b4:0c:f1:86:09:b2:80:08:1a:9a:70:f3:cd:
31:09:8d:b8:05:66:30:67:73:82:2d:61:9a:81:a0:69:06:55:
68:0f:b2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:31 2024 by rpki-client on console-ams.rpki-client.org