Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/imiXlcJdPTekr9aoSLdPXzmcHU4.roa
File: imiXlcJdPTekr9aoSLdPXzmcHU4.roa (raw, json)
Hash identifier: oifk1TKSnuFxam/YZv0C/4a9xR0Pp2hQ//Z6UpAM9NM=
Subject key identifier: 8A:68:97:95:C2:5D:3D:37:A4:AF:D6:A8:48:B7:4F:5F:39:9C:1D:4E
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 01856CAF4294275C01DB5BBABF73D50418E2
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/imiXlcJdPTekr9aoSLdPXzmcHU4.roa
Signing time: Sun 01 Jan 2023 09:35:03 +0000
ROA not before: Sun 01 Jan 2023 09:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210948
IP address blocks: 185.65.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:42:94:27:5c:01:db:5b:ba:bf:73:d5:04:18:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 1 09:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a689795c25d3d37a4afd6a848b74f5f399c1d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:48:0b:84:d9:69:f6:af:bd:04:70:c8:3e:60:
46:82:e6:e3:8c:10:90:10:dd:af:0b:4b:bc:94:c4:
1a:ae:d6:0c:2e:a6:65:88:61:cf:15:f1:b3:a9:b6:
22:a7:d4:61:fc:8e:63:6d:4d:4e:b8:e2:2c:c8:f2:
de:4f:81:45:1b:cb:45:b3:76:b9:46:bf:83:8d:c3:
22:cc:30:92:55:44:f7:0e:de:1f:c5:e2:f9:69:0e:
88:aa:70:5f:ee:87:a8:98:97:f4:fa:16:7c:d5:ce:
4a:34:a5:32:d1:dd:55:ad:02:8f:87:bc:0b:c7:f0:
30:22:04:63:31:88:fd:20:18:39:86:14:35:81:fc:
dc:03:2e:47:67:78:7b:37:ee:98:9c:24:7c:8a:bd:
bd:5c:25:67:f2:87:f7:a2:84:92:34:72:c3:45:e4:
5a:87:e1:aa:48:62:eb:6c:a3:2c:ea:c5:c0:d6:a4:
c9:9f:4f:d3:21:19:96:ec:6e:ee:1f:82:3e:9f:32:
4e:fc:ea:c4:e9:b5:7c:fd:df:69:a7:cd:45:8f:cd:
d9:db:94:ed:61:10:f3:96:a4:ff:c4:83:63:31:47:
e1:b6:e7:6a:e5:a2:50:86:41:ad:cf:5f:a7:aa:50:
ef:2f:3b:11:98:11:5d:95:cd:79:98:2a:a8:e6:ce:
02:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:68:97:95:C2:5D:3D:37:A4:AF:D6:A8:48:B7:4F:5F:39:9C:1D:4E
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/imiXlcJdPTekr9aoSLdPXzmcHU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.51.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:3c:7a:a0:52:9c:d0:58:b1:9e:3f:e2:5d:d4:3c:29:36:cb:
f0:57:5a:62:a6:b9:7c:f4:ca:5e:37:8f:24:57:d5:62:50:3f:
97:5c:0a:bf:a4:27:06:2d:e3:bb:89:9c:16:cb:25:d1:76:1c:
3c:81:b0:a7:20:0b:45:cb:ba:e8:21:8d:38:a5:e9:19:0e:c1:
af:df:cb:f0:c5:62:01:48:53:92:80:ca:7a:e8:fb:e3:99:4e:
02:2e:ed:02:65:a9:7b:e3:d0:db:95:49:bb:74:d7:5c:9e:bf:
56:77:51:2c:d3:e2:19:c1:82:44:48:c3:91:bf:9e:47:5c:6e:
6c:46:c5:2b:31:86:00:c8:5e:c7:c6:8f:3a:1f:5c:cc:b4:d0:
6d:3b:bb:6b:12:f9:92:7e:53:80:fb:cc:d7:fc:ce:d7:74:9b:
a9:34:fa:de:ae:30:25:0d:0d:1f:50:19:25:0c:df:46:b3:09:
f4:fa:7a:43:a8:a7:8b:3e:f3:c3:01:b2:d6:ea:01:e5:b6:b6:
cc:81:94:8b:96:f1:ca:fc:30:7b:72:64:bd:08:11:f3:ae:1e:
9b:b7:f6:34:6c:f3:c5:83:10:e1:6d:16:9c:27:cc:c3:08:ce:
ff:65:53:23:59:48:d6:b0:24:e8:3b:6d:3a:1a:c8:52:ab:d0:
f3:f9:b2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:23 2024 by rpki-client on console-fra.rpki-client.org