Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2daf90-9c17-44c6-8082-3450f0d7afdd/1/18VD9yguGrOwKBoQIiX1c0LG5rY.roa
File: 18VD9yguGrOwKBoQIiX1c0LG5rY.roa (raw, json)
Hash identifier: 2z4sHSIJjYgyEbg+BZTz/JKqb29JmibQ22sQeLGOavM=
Subject key identifier: D7:C5:43:F7:28:2E:1A:B3:B0:28:1A:10:22:25:F5:73:42:C6:E6:B6
Certificate issuer: /CN=b0abfff885ca54bb2526380f725051d53e7213c0
Certificate serial: 0185715E5E32B8C4E7FBA6B94A999DB13B5F
Authority key identifier: B0:AB:FF:F8:85:CA:54:BB:25:26:38:0F:72:50:51:D5:3E:72:13:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKv_-IXKVLslJjgPclBR1T5yE8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2daf90-9c17-44c6-8082-3450f0d7afdd/1/18VD9yguGrOwKBoQIiX1c0LG5rY.roa
Signing time: Mon 02 Jan 2023 07:24:47 +0000
ROA not before: Mon 02 Jan 2023 07:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48551
IP address blocks: 185.149.192.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:5e:32:b8:c4:e7:fb:a6:b9:4a:99:9d:b1:3b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0abfff885ca54bb2526380f725051d53e7213c0
Validity
Not Before: Jan 2 07:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7c543f7282e1ab3b0281a102225f57342c6e6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2a:0e:4d:d8:22:ac:14:d4:b3:75:52:ac:50:
4d:40:23:63:4b:63:9a:26:a7:b5:bd:6a:59:44:45:
54:c0:dc:c7:1c:52:b8:df:6c:4f:be:d7:d4:08:38:
42:75:c5:5f:29:f0:8d:8d:43:4a:5b:07:de:93:49:
49:bb:93:95:93:da:f7:25:6b:b9:91:88:93:f7:69:
6b:e8:52:ed:ee:ba:96:94:8b:ee:45:86:41:62:d4:
fd:b9:f6:31:2d:82:42:1d:3b:25:2b:15:85:e4:d6:
b1:d5:c7:b2:1e:c2:e9:46:1a:06:13:50:c3:0a:20:
d3:73:a1:0e:e7:0d:ef:0f:53:cc:d0:6f:fb:1a:99:
3a:d9:71:81:59:cb:f7:39:47:05:c6:38:c1:38:fc:
11:dc:25:25:0c:91:44:a1:e3:5f:1c:fb:56:98:32:
27:1d:e5:7c:37:54:d1:90:d2:15:04:28:17:0b:d4:
64:85:4f:2a:1d:d8:72:53:94:76:cd:f9:f9:87:1f:
76:16:8d:6d:26:b5:cf:e5:51:f0:93:ae:be:15:31:
63:83:09:3a:33:8b:cb:9c:71:79:b2:cb:f9:db:83:
1d:66:e9:83:6e:29:57:f7:f3:73:34:ed:65:d9:3c:
07:67:d1:00:4c:a2:62:d0:74:b5:4b:91:08:34:91:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C5:43:F7:28:2E:1A:B3:B0:28:1A:10:22:25:F5:73:42:C6:E6:B6
X509v3 Authority Key Identifier:
keyid:B0:AB:FF:F8:85:CA:54:BB:25:26:38:0F:72:50:51:D5:3E:72:13:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKv_-IXKVLslJjgPclBR1T5yE8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2daf90-9c17-44c6-8082-3450f0d7afdd/1/18VD9yguGrOwKBoQIiX1c0LG5rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2daf90-9c17-44c6-8082-3450f0d7afdd/1/sKv_-IXKVLslJjgPclBR1T5yE8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.192.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:e1:43:99:3d:da:7f:c8:78:04:1e:ac:89:d9:f4:2e:84:94:
04:14:92:5e:f9:cc:fd:9c:ac:05:25:9c:6a:99:d9:d9:36:13:
2e:24:db:68:38:4b:12:a4:20:d3:f2:d2:60:4d:07:c5:b3:9f:
03:2e:bc:aa:53:06:39:dd:a6:7a:af:93:c9:9a:13:33:e1:65:
c2:fb:37:1a:78:2a:1c:04:34:81:70:51:25:55:3f:e8:0c:77:
64:c6:b8:ef:fd:80:e6:ea:ff:01:fd:88:fc:57:b0:48:66:6c:
4f:97:e3:5b:47:74:c9:bb:a5:77:80:04:d8:65:12:10:ed:4a:
09:f6:05:96:b9:e5:22:7e:bc:ec:98:ea:46:0a:23:0a:1b:c7:
78:16:c9:73:90:cc:08:cf:98:99:9f:a1:0f:08:63:71:ed:39:
ae:52:c0:6e:86:99:e3:cf:aa:73:59:a6:a3:26:b3:4d:13:c0:
dd:7e:b5:0d:c0:c1:f0:2b:30:62:27:c6:30:d9:ed:27:4f:2e:
29:e5:52:dd:bb:a5:ff:b3:6e:b3:07:11:79:f9:31:78:07:0c:
a7:94:a6:cc:d8:1d:c3:c7:31:cb:7c:65:51:5c:30:d3:e6:6d:
ac:58:94:0f:af:fb:4b:75:5d:f2:79:b0:cf:70:16:75:66:3e:
a4:3e:8f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:23 2024 by rpki-client on console-fra.rpki-client.org