Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/SLVk7hLV9nmagkdZZobqpn3ZkMQ.roa
File: SLVk7hLV9nmagkdZZobqpn3ZkMQ.roa (raw, json)
Hash identifier: /LgF2KZBFNqSHi9r3IH/Z6utyaHvuVe3kcVUMWnXXkI=
Subject key identifier: 48:B5:64:EE:12:D5:F6:79:9A:82:47:59:66:86:EA:A6:7D:D9:90:C4
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 01856CAF3C2A4341866A7FAEF188D7632D2B
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/SLVk7hLV9nmagkdZZobqpn3ZkMQ.roa
Signing time: Sun 01 Jan 2023 09:35:01 +0000
ROA not before: Sun 01 Jan 2023 09:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13260
IP address blocks: 185.11.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:3c:2a:43:41:86:6a:7f:ae:f1:88:d7:63:2d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 1 09:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48b564ee12d5f6799a8247596686eaa67dd990c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cc:df:40:6c:0d:4d:1b:f1:af:8a:ee:5e:03:
88:fc:ff:75:4e:c1:af:97:2f:92:9c:e9:82:89:3e:
37:89:1e:d9:6d:7d:9d:ec:24:25:69:e5:93:3a:bf:
e0:55:bb:ac:ef:48:6a:a5:59:a8:e3:74:d7:44:97:
5a:2f:97:49:b3:2f:82:58:11:9d:f7:4b:12:fd:f2:
4b:f1:ab:9f:7b:82:35:5d:3a:e4:ce:89:83:48:cf:
ed:86:eb:bb:65:2e:05:5d:55:82:1c:3a:e1:44:90:
50:bf:f6:9f:39:1b:7b:eb:36:c2:b2:19:dd:5f:06:
16:25:51:ab:38:b0:de:e4:ab:da:1b:b8:cd:4d:4a:
cb:44:44:16:52:5b:61:aa:42:1b:6e:3e:68:3d:2f:
50:c3:1c:4d:98:a0:8d:5c:1e:0e:20:c0:a0:c7:82:
a8:a1:78:1d:e9:76:e4:0b:65:a9:df:95:8b:55:68:
de:e4:be:3b:c6:93:29:29:ab:ee:99:e2:55:69:a3:
1f:9a:65:92:00:7f:0b:51:2c:83:06:48:87:7f:57:
03:3d:a7:0b:e5:6d:bb:b4:31:ce:04:c6:ca:45:6f:
90:1f:53:50:0f:c9:d8:15:75:7d:51:a9:71:19:47:
a1:c9:0e:18:70:2a:ba:51:27:2f:dc:a8:c9:a4:ea:
65:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B5:64:EE:12:D5:F6:79:9A:82:47:59:66:86:EA:A6:7D:D9:90:C4
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/SLVk7hLV9nmagkdZZobqpn3ZkMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.25.0/24
Signature Algorithm: sha256WithRSAEncryption
59:db:af:1b:5a:76:70:75:54:7c:99:8b:f9:b7:2f:31:70:74:
d8:dd:da:c9:1d:5e:18:a6:3d:bb:a8:56:14:60:76:83:62:c9:
00:ca:6b:a4:3b:1a:99:82:a5:0c:70:5a:cc:f9:57:57:c3:86:
89:af:9f:d4:79:7a:da:8e:d2:3f:02:2b:d7:bf:6e:ac:de:b4:
a0:a8:f9:fb:7a:80:26:f8:f6:57:1a:62:3e:82:d6:19:de:76:
d3:72:f9:80:05:b6:af:b5:1b:85:eb:18:44:ce:ce:13:ff:d4:
bf:6b:e1:bc:c5:f3:a2:80:6c:c6:f4:33:ae:49:ac:81:49:1a:
bc:3a:88:da:85:40:45:cf:e2:1d:9e:3d:00:2e:73:3e:77:5d:
39:d2:4d:1d:91:24:df:14:b9:0c:3f:94:ff:26:db:54:b6:0f:
42:10:17:63:ac:72:fe:d4:8b:1b:94:4c:6e:04:cb:91:98:3b:
bb:bd:89:9b:a8:d3:c4:b7:e5:7a:d4:b7:cc:3b:3d:b3:8b:cd:
28:b4:06:ba:ec:bc:c2:62:1d:fe:6f:2f:f8:c1:00:33:9c:37:
4a:66:93:38:a6:75:8d:a4:41:44:44:a2:07:a9:de:46:42:54:
50:6a:24:d9:e0:dc:5e:4d:98:49:91:a0:6c:f9:50:64:d0:a0:
a4:65:49:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:49 2024 by rpki-client on console-ams.rpki-client.org