Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/slSrQUNrf12CK3dz9mkSUZvDtUQ.roa
File: slSrQUNrf12CK3dz9mkSUZvDtUQ.roa (raw, json)
Hash identifier: U5KiGyMbo9R1Z6AzuXnF7AqtZGONOepZGnQEQYZnTbo=
Subject key identifier: B2:54:AB:41:43:6B:7F:5D:82:2B:77:73:F6:69:12:51:9B:C3:B5:44
Certificate issuer: /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial: 01856FD518FD301B88BCADF71418A9B3581D
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/slSrQUNrf12CK3dz9mkSUZvDtUQ.roa
Signing time: Mon 02 Jan 2023 00:15:14 +0000
ROA not before: Mon 02 Jan 2023 00:15:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25514
IP address blocks: 195.34.90.0/23 maxlen: 23
91.218.12.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:18:fd:30:1b:88:bc:ad:f7:14:18:a9:b3:58:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Validity
Not Before: Jan 2 00:15:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b254ab41436b7f5d822b7773f66912519bc3b544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:c8:92:a0:5d:d7:0a:4b:72:12:c7:22:e4:
25:9a:bf:14:55:dc:63:f7:77:11:94:de:a9:f7:5e:
c6:44:6c:95:2a:24:a6:cf:de:5a:cf:6c:31:af:c0:
dd:bb:0a:93:2f:63:ac:74:86:99:ae:a5:7e:13:9e:
5f:26:88:ec:16:8e:95:e6:f8:b2:14:1a:52:33:32:
fb:f3:d7:f8:bf:60:56:6a:2d:fb:6a:a8:1d:c2:ac:
b9:75:6c:10:3b:93:03:48:10:62:12:6d:d7:2f:3d:
38:a4:3c:07:1e:ce:50:1a:ae:4b:84:ba:92:bd:62:
8a:03:9d:c8:e6:73:b5:be:d7:f9:a1:7a:d0:91:a1:
d1:02:ad:92:07:de:58:15:c8:e2:1a:ba:63:3d:74:
d0:9f:29:ec:8a:9a:df:5c:f4:d5:c0:f4:2c:a6:48:
02:38:32:c9:8f:40:e8:69:69:b9:3a:bb:d9:14:ac:
ad:41:f0:63:0b:b3:db:a4:bb:1e:da:e3:bc:ae:5a:
62:f9:d6:cb:d4:b6:aa:95:9d:bf:84:90:ef:7b:23:
ea:40:5a:62:72:7e:23:1f:e6:79:39:90:aa:f6:86:
b8:68:39:18:e1:b3:82:23:9e:52:ed:a6:b9:8d:b1:
54:9a:af:bb:82:c9:ac:67:f7:a7:ce:66:bf:64:b1:
9a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:54:AB:41:43:6B:7F:5D:82:2B:77:73:F6:69:12:51:9B:C3:B5:44
X509v3 Authority Key Identifier:
keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/slSrQUNrf12CK3dz9mkSUZvDtUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.12.0/22
195.34.90.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:10:59:47:f1:6b:1d:4a:04:da:64:a1:cf:63:a6:b5:17:dc:
fb:3a:ed:cf:b5:ee:37:21:19:10:69:8e:6a:05:7f:9e:50:f0:
a9:3b:9b:be:ac:7d:fc:51:bc:9a:72:ae:61:ed:c3:89:47:bb:
ca:67:36:db:3c:0f:cc:8f:55:15:02:0c:40:86:03:15:7e:a4:
eb:d7:b1:f7:bc:19:df:04:01:02:ea:00:a1:ad:c7:5e:16:5c:
be:43:42:5f:73:21:10:36:5e:ce:be:a3:d2:1e:b8:c7:b9:d7:
ea:e2:db:1f:5d:9a:7f:b0:a0:ae:7f:81:e1:17:75:a5:65:31:
94:bd:93:4a:5d:0f:ce:11:66:73:b6:26:d7:85:78:35:88:38:
8b:c4:6b:ca:b5:ec:07:41:97:a7:d3:61:96:ea:90:2a:31:d7:
85:13:ed:ad:7a:08:05:83:8c:fb:96:e1:8e:04:21:61:2a:99:
23:ed:c8:3b:6f:ea:04:85:ac:61:d8:2a:04:e1:11:28:b5:16:
0f:6d:64:f8:c7:fa:60:5a:3c:a7:4f:79:4b:19:40:6c:0a:30:
73:4f:7e:12:9f:95:e5:23:95:56:e6:b3:54:48:f3:80:50:c3:
3d:76:30:df:c7:63:bc:61:e3:e4:44:4a:24:df:6a:be:72:dc:
22:c4:9a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:55 2024 by rpki-client on console-ams.rpki-client.org