Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/5KZ4uLgaQAc7YwL9Md2sT03F_V4.roa
File: 5KZ4uLgaQAc7YwL9Md2sT03F_V4.roa (raw, json)
Hash identifier: sPGhS1tA816RnmlCOCv4qq4UgbGzJm9W7QoxQ5pRkZk=
Subject key identifier: E4:A6:78:B8:B8:1A:40:07:3B:63:02:FD:31:DD:AC:4F:4D:C5:FD:5E
Certificate issuer: /CN=026fd6b65a11a3a72c22faada06c31f2f6331637
Certificate serial: 01856E2F8C26B64B36E43B6156B58477F93E
Authority key identifier: 02:6F:D6:B6:5A:11:A3:A7:2C:22:FA:AD:A0:6C:31:F2:F6:33:16:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am_WtloRo6csIvqtoGwx8vYzFjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/5KZ4uLgaQAc7YwL9Md2sT03F_V4.roa
Signing time: Sun 01 Jan 2023 16:34:47 +0000
ROA not before: Sun 01 Jan 2023 16:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 185.76.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:8c:26:b6:4b:36:e4:3b:61:56:b5:84:77:f9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026fd6b65a11a3a72c22faada06c31f2f6331637
Validity
Not Before: Jan 1 16:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4a678b8b81a40073b6302fd31ddac4f4dc5fd5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:8c:eb:8e:24:fb:01:61:26:65:b5:87:d0:
13:09:0b:a2:74:76:72:db:28:dc:61:96:61:9e:78:
52:b4:82:0a:65:51:9d:35:5e:a0:8e:dc:34:1d:27:
1c:58:51:33:31:fc:e1:42:70:80:1c:11:9a:9a:a2:
54:ef:ff:70:88:63:c3:c8:b7:26:a1:13:00:1e:65:
38:68:2c:a2:c6:ba:a2:9f:c2:0c:81:40:58:5d:ba:
ee:ee:ce:01:0b:03:74:5c:7c:e8:02:38:bb:69:65:
d6:ea:f4:ce:d9:6c:77:77:72:10:c5:70:12:39:47:
cd:d3:f8:8b:c5:d4:f6:d3:00:7a:cc:e1:41:ea:36:
3a:67:1c:db:3a:f2:33:5c:49:78:6a:05:86:11:88:
57:79:be:d8:2b:d8:5a:22:5f:18:5c:40:16:8c:7e:
d8:80:aa:05:c2:62:74:f4:c1:ad:33:01:c5:f3:05:
e5:94:33:51:29:ba:06:e7:a3:4c:63:39:11:53:7f:
d1:5c:a2:20:96:b4:17:e5:7a:e4:7b:4c:b6:c6:35:
86:e9:58:29:af:6b:66:a1:ba:5b:ba:c2:bf:df:3a:
7a:09:9e:8b:f2:e5:3f:e9:2b:69:5a:a7:f1:23:c0:
62:a8:5f:e5:f0:ba:eb:42:21:e8:cc:18:c7:dd:5b:
3f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A6:78:B8:B8:1A:40:07:3B:63:02:FD:31:DD:AC:4F:4D:C5:FD:5E
X509v3 Authority Key Identifier:
keyid:02:6F:D6:B6:5A:11:A3:A7:2C:22:FA:AD:A0:6C:31:F2:F6:33:16:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am_WtloRo6csIvqtoGwx8vYzFjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/5KZ4uLgaQAc7YwL9Md2sT03F_V4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/Am_WtloRo6csIvqtoGwx8vYzFjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.150.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:65:96:07:e6:44:75:f8:ef:d3:8e:bf:e8:1f:f5:59:d1:22:
9a:b0:1c:95:b6:ef:60:3b:3f:04:e3:d9:2c:2f:75:75:d6:a5:
60:a9:f9:2b:f3:d1:00:60:a3:b7:51:4c:cf:de:4e:50:f4:3f:
d0:35:a9:5e:ff:37:5a:0e:9d:a8:68:14:da:fa:d1:a3:6c:1d:
76:16:e9:45:a7:36:91:bf:d0:d9:dd:ae:ca:a1:27:db:b4:18:
3f:3c:ea:20:d8:d9:2d:90:b3:ee:08:49:32:48:b6:9e:e0:5a:
40:90:8e:b2:ef:54:75:2a:94:92:ac:af:a7:d2:fd:fa:11:89:
79:04:53:0f:82:4f:f4:42:73:e2:66:4e:5b:06:ea:5a:75:73:
14:0d:3a:d1:4d:85:f9:0b:7b:22:11:b7:8e:06:9b:55:0c:10:
21:ad:7a:d5:0d:46:98:51:59:85:54:a6:ec:bb:dd:d8:7c:b3:
c3:4e:da:93:3c:30:59:6e:8e:e3:a4:68:7d:87:7a:6d:6e:17:
34:e1:09:13:37:26:61:28:6f:e5:1a:bc:02:1e:ba:03:8d:82:
78:4b:d5:fa:22:62:1f:47:d4:bc:f2:42:59:92:cd:c6:90:31:
72:be:17:5b:42:63:91:bb:92:cc:fe:1e:06:a1:a8:bd:92:03:
5f:97:74:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:07 2023 by rpki-client on console-fra.rpki-client.org