Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/547RKucTn9xGbFQviD9qQSF80z0.roa
File: 547RKucTn9xGbFQviD9qQSF80z0.roa (raw, json)
Hash identifier: qwU7fnRTyyCVal2nSB2JPNb1fRMt1CixOrQw000HHGk=
Subject key identifier: E7:8E:D1:2A:E7:13:9F:DC:46:6C:54:2F:88:3F:6A:41:21:7C:D3:3D
Certificate issuer: /CN=fad7e14a262560191c66576998e9c69b89c3c136
Certificate serial: 01856FDDE5FCA7ACA949DBDF29B28001114B
Authority key identifier: FA:D7:E1:4A:26:25:60:19:1C:66:57:69:98:E9:C6:9B:89:C3:C1:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/547RKucTn9xGbFQviD9qQSF80z0.roa
Signing time: Mon 02 Jan 2023 00:24:51 +0000
ROA not before: Mon 02 Jan 2023 00:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200735
IP address blocks: 185.55.72.0/24 maxlen: 24
185.55.75.0/24 maxlen: 24
185.55.74.0/24 maxlen: 24
185.55.73.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:dd:e5:fc:a7:ac:a9:49:db:df:29:b2:80:01:11:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7e14a262560191c66576998e9c69b89c3c136
Validity
Not Before: Jan 2 00:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e78ed12ae7139fdc466c542f883f6a41217cd33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:a6:0b:85:48:55:b5:e9:53:47:d9:f4:d5:
f4:77:d5:aa:18:6b:4e:80:d1:1a:8d:b4:ea:a6:41:
eb:89:6b:53:64:91:59:fc:aa:4b:32:7d:d7:4f:1b:
d8:0f:b5:1d:54:a9:82:8c:63:09:ae:28:98:86:9c:
76:e9:26:b5:95:98:cc:93:c8:e2:f0:21:a7:b2:8e:
f7:50:c1:8e:8d:f1:1b:53:24:7c:f1:01:e7:37:a0:
29:25:96:48:a3:c9:74:7b:e3:2d:09:a9:2c:1d:46:
f8:24:14:cb:33:fb:f4:94:20:a9:c2:6c:cd:54:bd:
e8:60:33:ad:b7:db:f9:4a:99:2a:ca:e0:c7:0e:98:
2f:4c:ef:bd:d4:8d:97:01:8e:01:00:b3:de:76:88:
8a:85:71:1b:67:32:c6:f2:45:6a:7d:55:79:fb:b4:
9b:6b:7a:58:d6:b6:80:52:bd:a7:7e:f2:30:b0:16:
5b:bb:a5:f4:bd:a6:f9:ee:77:fe:92:75:bb:68:d1:
4d:bf:be:ce:5d:86:d3:ec:96:96:6b:b1:35:a1:c2:
cd:d6:88:b5:80:24:1b:fd:2f:05:b6:05:0c:58:46:
47:80:7b:76:94:90:f6:33:52:06:a5:92:f1:47:2e:
65:8f:ba:32:aa:bd:64:d6:0d:0d:e2:c5:03:bb:38:
a1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8E:D1:2A:E7:13:9F:DC:46:6C:54:2F:88:3F:6A:41:21:7C:D3:3D
X509v3 Authority Key Identifier:
keyid:FA:D7:E1:4A:26:25:60:19:1C:66:57:69:98:E9:C6:9B:89:C3:C1:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/547RKucTn9xGbFQviD9qQSF80z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.72.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:eb:c3:67:59:6e:6c:fd:94:b1:ad:18:c6:34:71:8f:db:42:
b6:df:00:fc:ec:01:22:9b:30:0c:ef:b4:45:1a:90:52:84:7b:
68:78:a2:a6:a6:ee:57:d4:9c:96:23:15:4c:5b:ca:55:e0:f1:
01:18:6c:0d:61:e8:ec:3e:34:77:fd:bd:a1:ae:a7:20:78:1f:
b2:28:bb:23:59:24:c0:38:e4:2e:ae:1a:9e:df:98:37:b4:d9:
c0:48:1e:98:7e:16:a5:cb:df:cc:32:db:ca:eb:1e:14:7f:53:
1f:e1:5b:39:93:69:72:0e:95:e6:e4:c2:66:5c:e8:30:f0:83:
4e:8b:1c:83:78:83:da:ef:78:c8:e0:91:98:c9:2d:ea:12:f8:
96:2e:8f:77:e6:f4:05:d8:4c:de:d6:c9:65:3e:5e:21:0a:88:
be:f2:b8:14:bf:f0:59:83:3b:5f:eb:35:25:cc:9c:8a:3e:29:
71:8a:20:57:2d:89:01:0b:39:5f:0d:46:da:15:64:ea:04:27:
61:86:07:f3:e5:9f:31:94:51:d2:45:4f:31:00:96:81:2c:eb:
72:9b:03:12:ec:4f:91:8c:3f:3f:83:64:26:e7:4b:18:86:a3:
32:53:4f:d7:da:6d:39:78:2f:db:97:ed:86:10:7b:b1:44:10:
07:bb:0a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 13:54:37 2023 by rpki-client on console-fra.rpki-client.org