Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/iLe0jKRuqw1CSYhihafqr2jZvkw.roa
File: iLe0jKRuqw1CSYhihafqr2jZvkw.roa (raw, json)
Hash identifier: Ig0cCl8HCxr62j7vQ6SiZodoOEII5vIsNgu+O1Aqvpo=
Subject key identifier: 88:B7:B4:8C:A4:6E:AB:0D:42:49:88:62:85:A7:EA:AF:68:D9:BE:4C
Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial: 0185732811792DA51128B369764C26F0B022
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/iLe0jKRuqw1CSYhihafqr2jZvkw.roa
Signing time: Mon 02 Jan 2023 15:44:43 +0000
ROA not before: Mon 02 Jan 2023 15:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42296
IP address blocks: 185.240.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:11:79:2d:a5:11:28:b3:69:76:4c:26:f0:b0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Validity
Not Before: Jan 2 15:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88b7b48ca46eab0d4249886285a7eaaf68d9be4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:91:b1:5d:fd:82:e3:5c:ff:63:7f:e6:fb:db:
98:77:4d:2e:0e:29:96:40:c6:9c:0e:97:21:e0:4c:
58:be:c2:a2:2f:bf:50:5e:9d:b8:a4:96:f5:e2:28:
4b:27:96:58:ec:20:aa:9a:60:1b:2a:40:1f:d7:4a:
2b:0e:04:8b:74:5c:4a:c6:8f:cf:1e:63:9e:99:90:
2f:0d:04:12:08:4d:cb:b1:b2:d1:66:49:34:0b:3c:
9f:2e:f0:9f:f5:9f:13:53:66:59:fc:20:a5:de:e7:
22:88:68:0c:fd:38:89:a4:3f:60:5e:c0:ed:1b:bc:
65:8c:0d:f0:5c:e2:e8:6f:8f:6f:c4:b5:72:e4:28:
86:19:11:af:b6:fa:d5:01:3f:ac:61:77:11:10:b2:
c3:03:f9:9d:f6:ee:48:c3:d6:43:75:25:ed:68:af:
f1:b1:fd:f2:31:15:68:55:02:f6:37:0d:b0:22:3b:
d3:eb:00:1b:76:13:49:1e:dd:c9:11:ed:77:99:49:
0b:7c:63:f6:7a:be:29:a8:de:9e:e7:ea:b5:95:1e:
4e:60:fa:46:e1:11:2b:8f:ad:33:4c:ac:96:4b:e6:
a7:43:da:d0:db:e0:88:61:0d:b9:1d:11:d6:cb:9a:
ec:ff:24:a1:77:0e:71:66:a8:42:84:e9:3a:22:44:
53:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B7:B4:8C:A4:6E:AB:0D:42:49:88:62:85:A7:EA:AF:68:D9:BE:4C
X509v3 Authority Key Identifier:
keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/iLe0jKRuqw1CSYhihafqr2jZvkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.253.0/24
Signature Algorithm: sha256WithRSAEncryption
40:d8:3e:66:16:da:29:49:7b:a7:02:03:de:85:7f:66:05:26:
61:df:d1:d0:b4:8c:bd:a3:3b:28:55:68:4e:a6:e4:b0:61:c8:
80:fa:cb:31:2c:aa:dc:5d:25:54:7f:c5:6e:0f:c2:d0:20:f4:
ef:dd:88:30:ff:c7:65:26:97:5e:ce:9f:ea:13:7c:94:3f:af:
ed:1d:9b:28:d8:70:ec:30:4f:41:47:05:28:c2:fb:2a:13:d9:
63:4d:35:94:78:ab:40:6d:ce:ac:f2:42:25:dc:d1:d0:64:55:
e4:82:36:22:63:48:7a:63:c8:b5:ba:b7:93:dc:f0:a6:de:7c:
e5:c6:45:49:67:cf:fd:c4:2f:e1:de:63:c3:c6:cf:c4:e6:da:
f0:30:3d:72:55:40:57:cf:8d:a1:e2:40:ba:9c:48:10:56:35:
af:78:2c:58:a7:16:86:f8:6d:0f:af:4a:ac:2a:48:bf:5b:f4:
70:aa:25:b2:e2:dd:6d:38:7a:fa:51:48:cf:79:d9:35:9d:6f:
09:34:1e:ba:9e:08:0e:ba:57:31:11:a7:80:3d:b3:4d:d9:06:
45:b8:cb:a2:96:ea:bb:6a:35:c7:97:b0:0b:28:f3:c0:75:da:
9c:be:e9:7f:85:b5:92:41:73:6a:29:cc:0e:85:40:56:ee:5a:
a6:cd:b7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:39 2024 by rpki-client on console-ams.rpki-client.org