Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/iMDjDnvs9FCNxZSq0Fgvh78Gc2Q.roa
File: iMDjDnvs9FCNxZSq0Fgvh78Gc2Q.roa (raw, json)
Hash identifier: uWGsmllIjEI+IwdxGa5sML7qQgpnhxLTictK9+to3AY=
Subject key identifier: 88:C0:E3:0E:7B:EC:F4:50:8D:C5:94:AA:D0:58:2F:87:BF:06:73:64
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 01856CAF3F19CCB104964D5A573079CBD4F0
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/iMDjDnvs9FCNxZSq0Fgvh78Gc2Q.roa
Signing time: Sun 01 Jan 2023 09:35:02 +0000
ROA not before: Sun 01 Jan 2023 09:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47929
IP address blocks: 185.216.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:3f:19:cc:b1:04:96:4d:5a:57:30:79:cb:d4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 1 09:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88c0e30e7becf4508dc594aad0582f87bf067364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:6c:2f:ec:99:f6:7e:dc:f5:41:07:65:f2:
1c:63:7b:f4:83:71:1a:9e:d8:ee:45:a0:56:af:4f:
30:99:37:57:84:63:72:69:5b:55:f4:3b:9d:de:fb:
5e:d9:5f:04:b2:61:b9:84:6c:a7:15:0b:2e:ed:4a:
96:f9:71:a7:ee:74:11:d1:0e:1a:ac:06:37:d5:57:
bb:6e:7e:d1:d7:fd:34:80:54:a0:50:03:00:bf:05:
a9:47:2c:a5:11:13:25:f1:42:71:9b:1f:16:4c:32:
f6:6d:a8:ec:fd:35:6c:6c:d1:32:f8:0b:fc:8d:3d:
72:3f:40:2a:4f:8a:95:36:36:61:d9:10:66:fd:32:
16:f6:f3:36:5c:fc:44:dd:29:38:4a:ac:cf:91:1a:
7c:71:76:84:e3:0c:64:94:47:43:86:19:74:e7:74:
37:a3:3a:0f:89:5e:38:1d:b1:8d:51:c8:01:d2:1f:
2c:bb:0d:18:33:de:c8:29:23:3a:5e:60:ec:55:12:
07:fb:14:cf:af:3e:30:a5:ba:3d:91:5d:91:5b:fc:
80:47:52:c4:fb:3e:32:fd:91:6d:e6:80:0f:b6:52:
53:8c:e6:e0:16:96:8e:94:48:e9:d2:c6:c7:b5:96:
e1:03:d3:9d:3b:7c:36:1b:62:18:de:bb:08:bf:2e:
4d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C0:E3:0E:7B:EC:F4:50:8D:C5:94:AA:D0:58:2F:87:BF:06:73:64
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/iMDjDnvs9FCNxZSq0Fgvh78Gc2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.208.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:70:e8:fd:b4:f0:8c:25:96:18:33:23:61:2a:2e:f0:04:10:
5c:34:71:df:f2:3c:e0:47:d5:7a:53:81:77:87:df:e0:b1:2a:
ec:61:9e:64:ef:62:11:c1:f1:0d:da:7b:05:f0:2d:f8:6c:ab:
67:b1:43:c5:c3:d0:3b:f8:9a:a1:9e:db:fc:a2:de:b9:72:c3:
97:cf:a4:57:a8:f8:24:c1:99:f0:ff:d8:43:bf:e3:38:6b:5a:
ec:48:a8:7a:6b:b5:90:1a:23:46:79:9a:39:ac:fa:7d:14:1f:
0d:55:a0:5a:f9:06:45:07:08:99:72:b2:a9:cc:0f:49:70:7e:
59:33:7c:bd:d7:49:e1:c2:73:2d:aa:27:4b:10:29:40:62:85:
50:9a:8a:33:8a:e7:11:50:88:4c:a1:41:2a:9d:b3:51:00:9d:
a6:f7:aa:59:e5:33:29:66:e0:d9:b6:ca:72:b2:28:d2:86:01:
10:fe:33:43:31:80:83:0b:c9:d1:1b:87:51:b3:ed:7d:f6:50:
d0:f6:72:6d:f0:d6:89:7c:75:09:35:85:ec:87:5c:1f:0d:85:
84:ec:cf:4f:fa:ed:63:06:82:a1:58:85:dd:07:b3:46:c9:37:
94:56:74:63:d8:20:68:da:1e:f4:04:81:b8:ba:88:eb:36:53:
95:54:4b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:31 2024 by rpki-client on console-ams.rpki-client.org