Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/2asBSBVoLET5YSxcEGz6O2FK4Uo.roa
File: 2asBSBVoLET5YSxcEGz6O2FK4Uo.roa (raw, json)
Hash identifier: h9a6KebRZnlSWRWXuy3+g8aOkqDPwvJeG92B+RfGQ98=
Subject key identifier: D9:AB:01:48:15:68:2C:44:F9:61:2C:5C:10:6C:FA:3B:61:4A:E1:4A
Certificate issuer: /CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636
Certificate serial: 0188233CD9EFFEA3AD2CE19CD9E1CDA416A5
Authority key identifier: C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/2asBSBVoLET5YSxcEGz6O2FK4Uo.roa
Signing time: Tue 16 May 2023 06:26:10 +0000
ROA not before: Tue 16 May 2023 06:26:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198290
IP address blocks: 193.169.158.0/23 maxlen: 24
185.44.56.0/22 maxlen: 24
2a01:7360::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:23:3c:d9:ef:fe:a3:ad:2c:e1:9c:d9:e1:cd:a4:16:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636
Validity
Not Before: May 16 06:26:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9ab014815682c44f9612c5c106cfa3b614ae14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b0:10:de:d7:14:1e:12:56:82:56:ab:6b:65:
26:60:0d:ad:5b:9c:d5:fe:93:60:71:be:74:1f:60:
14:fe:df:14:f2:d4:4f:13:5e:6d:42:2a:cb:73:96:
fc:34:a3:e7:77:03:c8:83:dd:55:46:79:49:de:89:
cf:ac:d1:8a:30:2f:f5:b4:97:cc:67:1f:88:53:63:
33:4e:c3:ff:e7:2f:77:17:f7:a2:d2:e2:42:cd:34:
b4:56:ea:6a:82:e0:ce:25:0c:91:a5:8d:6c:16:1f:
04:5d:82:a9:2e:e8:3c:ca:1c:1a:68:e9:67:e2:ea:
5e:6b:b8:83:fd:3a:45:c4:fb:cb:93:a7:3e:b7:5a:
35:a5:26:11:bb:9f:a9:51:1c:5d:1f:a5:6d:40:65:
3d:6f:ae:d1:11:1b:a7:53:9c:0a:2f:21:c0:7b:ee:
f9:f5:3a:40:76:ca:5b:88:8f:4d:ae:ab:bd:81:a3:
f4:04:95:2c:85:8e:08:27:05:0e:d3:64:8b:e2:66:
a6:bf:47:ee:c5:f8:69:ad:d0:3b:ac:68:f2:39:3d:
52:9c:86:cd:5f:5d:11:b2:c1:18:33:9b:b1:1a:2d:
fa:24:a7:a7:3b:21:a9:9d:24:79:dd:51:90:e5:3f:
62:e0:81:a2:55:7a:3a:cd:0c:c8:44:fe:25:a0:d1:
97:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AB:01:48:15:68:2C:44:F9:61:2C:5C:10:6C:FA:3B:61:4A:E1:4A
X509v3 Authority Key Identifier:
keyid:C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/2asBSBVoLET5YSxcEGz6O2FK4Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.56.0/22
193.169.158.0/23
IPv6:
2a01:7360::/32
Signature Algorithm: sha256WithRSAEncryption
8d:8f:ab:1d:4e:18:25:37:b9:cd:a2:52:bc:7a:37:4b:c7:fa:
f1:d6:6b:ca:ac:b6:d2:b8:21:08:bd:91:19:d7:9d:2c:14:50:
eb:e7:23:65:96:bb:7f:32:27:39:3b:6b:56:05:34:30:8f:35:
a7:59:5f:d1:f0:48:21:22:0e:a0:fa:84:6c:15:d2:67:e6:9e:
19:68:2e:fd:83:96:d5:53:9c:3d:7a:00:d6:70:f6:9e:c7:5a:
3a:25:74:bd:95:9d:76:f0:f3:90:fc:2f:f0:94:ae:ef:5f:a9:
cf:74:4e:35:c6:16:53:c5:b5:f2:7f:ee:6f:d8:af:62:63:1e:
31:77:a0:9b:6c:c6:c9:d9:88:c7:c5:fd:1d:04:6b:9d:b7:6c:
cb:1b:66:ab:b0:c8:d1:30:16:88:58:a8:f9:c5:f2:ed:93:f1:
95:7e:96:9a:de:8f:e0:e4:f1:c6:27:2d:f9:55:72:bd:cc:0a:
13:fa:0a:49:93:82:0a:9b:c6:c0:8f:83:45:82:4c:e6:89:bd:
d0:30:aa:63:06:b5:a0:5f:e3:d9:81:d3:d6:b6:83:59:c0:a0:
53:0e:36:0c:39:6e:62:8e:f3:0f:fd:58:cc:15:44:60:a7:3b:
9e:78:fc:70:73:f6:c6:96:71:73:e2:4e:4e:e2:11:11:54:f8:
86:0e:7a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:39 2024 by rpki-client on console-ams.rpki-client.org