Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/AtfmU63tX2IltszbGATWyNWhOfc.roa
File: AtfmU63tX2IltszbGATWyNWhOfc.roa (raw, json)
Hash identifier: m/rtxbI1WA95lz1yDSsnJJkoaUqcVVsUQnSOdjkKlz0=
Subject key identifier: 02:D7:E6:53:AD:ED:5F:62:25:B6:CC:DB:18:04:D6:C8:D5:A1:39:F7
Certificate issuer: /CN=d533b09430b048f0526ef6a937774e7f06203731
Certificate serial: 018A1EF271D6E3D21E10F617B7F1A3984CCF
Authority key identifier: D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/AtfmU63tX2IltszbGATWyNWhOfc.roa
Signing time: Tue 22 Aug 2023 20:31:59 +0000
ROA not before: Tue 22 Aug 2023 20:31:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198556
IP address blocks: 185.135.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1e:f2:71:d6:e3:d2:1e:10:f6:17:b7:f1:a3:98:4c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d533b09430b048f0526ef6a937774e7f06203731
Validity
Not Before: Aug 22 20:31:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02d7e653aded5f6225b6ccdb1804d6c8d5a139f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ba:c3:17:58:67:8c:c3:33:bc:b4:bf:43:be:
fa:5d:4e:18:d8:cc:3e:a0:23:b7:88:a0:f5:7c:87:
e4:29:75:3d:9f:3c:2f:70:e2:1e:d3:1f:40:bd:34:
bc:b6:5c:9e:67:77:49:eb:e3:69:c6:8d:e6:37:0d:
74:4e:8f:aa:db:43:85:c5:a7:c7:46:f2:8c:8e:f9:
b5:9c:bb:03:ef:5a:c5:63:00:0f:67:ef:e1:7a:96:
2a:1e:cd:ea:98:dd:e4:9d:e2:f7:f9:cf:2f:86:2b:
6d:f9:30:74:79:68:60:00:24:b1:0a:84:d6:42:94:
9d:c5:5d:db:ce:e5:4e:dc:14:f0:a0:da:a7:84:79:
0f:b7:e2:0f:1b:e6:43:15:1d:56:ba:4e:72:e0:78:
8a:95:86:c1:5e:64:b3:64:ff:56:7b:4f:82:f8:12:
90:66:18:f0:ad:b9:7a:cd:f4:f2:ee:36:24:1a:59:
0b:ee:00:2d:14:4e:81:5a:84:75:bf:60:ff:75:43:
e3:7f:ed:bd:5a:61:fa:cb:57:fa:e6:00:b9:c6:c5:
ea:c6:aa:c9:49:1c:eb:25:c6:e9:e5:f5:83:42:af:
68:04:52:49:2b:c3:79:cf:54:72:47:16:78:e1:3a:
7b:45:1a:c8:ae:57:52:02:d6:ce:a5:87:4e:97:a3:
34:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D7:E6:53:AD:ED:5F:62:25:B6:CC:DB:18:04:D6:C8:D5:A1:39:F7
X509v3 Authority Key Identifier:
keyid:D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/AtfmU63tX2IltszbGATWyNWhOfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.44.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ed:4f:2c:50:e5:83:2d:2f:fe:4f:68:c4:75:10:fa:f5:88:
20:29:3d:c3:72:bf:b7:49:e6:0f:c2:15:8a:89:87:d0:5f:6d:
e5:21:bd:73:ec:1c:34:9e:1b:39:73:bb:56:c4:9c:1d:d0:4a:
f2:6d:0c:a4:a0:9f:9d:b2:75:32:f5:30:a2:68:3e:77:b4:d0:
6d:fd:a6:ad:dd:cf:61:04:c1:5e:32:32:b9:3a:3e:4f:5e:8b:
e9:d7:47:22:43:d1:43:af:c9:7b:82:b9:b1:b4:20:53:a0:1c:
de:90:57:4f:f1:c4:91:eb:31:f2:01:54:34:06:6f:df:fb:8d:
e3:74:28:1d:8a:23:01:e1:34:c7:a9:9a:58:98:c9:54:94:00:
b3:21:cc:d7:27:12:c8:d4:a2:1e:68:59:6c:74:2d:8d:0b:a5:
c6:c3:8a:c5:c8:2d:a8:95:18:ea:d7:02:19:d3:b5:af:8d:26:
ae:8a:d1:38:f3:2d:d7:3d:6f:cb:b1:31:83:1b:f6:8b:78:4f:
f9:5a:9a:4a:0a:47:59:48:81:2e:22:0b:7e:d5:92:38:69:0b:
73:f4:c3:af:4b:ef:3e:83:a7:7c:80:f6:c5:ba:77:56:56:6c:
c3:49:e0:3b:3a:3e:07:df:79:ba:90:d2:d4:48:4f:36:14:49:
e0:fc:0f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 13:40:59 2023 by rpki-client on console-fra.rpki-client.org