Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/0Qa5GPrL74z70vSubBtPVL7bW5c.roa
File: 0Qa5GPrL74z70vSubBtPVL7bW5c.roa (raw, json)
Hash identifier: ZrJsW7/g1RC0oVyM7OKjuf7YUFj+kcrGNs7lSYsl3kk=
Subject key identifier: D1:06:B9:18:FA:CB:EF:8C:FB:D2:F4:AE:6C:1B:4F:54:BE:DB:5B:97
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 01857246BE8D066104914FBF148853735345
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/0Qa5GPrL74z70vSubBtPVL7bW5c.roa
Signing time: Mon 02 Jan 2023 11:38:36 +0000
ROA not before: Mon 02 Jan 2023 11:38:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.180.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:be:8d:06:61:04:91:4f:bf:14:88:53:73:53:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Jan 2 11:38:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d106b918facbef8cfbd2f4ae6c1b4f54bedb5b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:1c:ea:72:dc:0d:04:6c:92:2d:ba:3e:a4:
39:2e:64:c2:4c:24:19:f0:d4:f3:79:35:9a:3f:6e:
a1:22:05:c7:52:c3:90:f0:45:b3:27:36:71:9f:a6:
4d:b1:f7:48:da:ee:7f:12:9c:78:5e:b5:49:2f:2f:
66:fe:7f:8b:61:f5:3a:b2:0d:a6:80:fe:4e:b6:33:
e7:14:64:7a:02:fc:7c:de:5a:23:27:22:0b:2d:c0:
25:3b:93:b1:91:6f:9e:a7:68:15:41:cf:03:1b:01:
08:69:66:dd:fe:50:7d:ed:eb:d0:00:9a:c1:18:da:
e8:f5:1b:34:40:a5:14:37:3b:d2:38:bc:60:11:77:
ca:24:3a:34:8a:0b:fd:32:13:13:bf:08:6a:5b:97:
93:69:63:3d:b3:69:00:0d:fd:a3:c4:e5:d5:e9:a7:
45:fa:3b:ef:1a:f2:04:2a:19:d9:c2:bb:36:4f:93:
3d:46:48:f7:a8:62:f1:4e:3b:82:ab:c9:6c:7b:3b:
a4:f1:5f:da:e2:a5:95:d4:8a:04:6f:8c:e6:f2:ef:
b6:a7:49:b6:17:9d:a6:24:4d:7c:c9:89:0c:3c:4b:
de:b7:d7:9b:56:c4:a3:4b:79:86:99:de:40:20:f8:
65:62:27:94:52:cc:6c:38:c1:d5:be:95:a6:9a:e4:
ea:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:06:B9:18:FA:CB:EF:8C:FB:D2:F4:AE:6C:1B:4F:54:BE:DB:5B:97
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/0Qa5GPrL74z70vSubBtPVL7bW5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.144.0/24
Signature Algorithm: sha256WithRSAEncryption
57:76:05:2f:6e:db:cb:b0:06:4d:4b:79:e2:11:76:52:7d:26:
9b:92:ea:73:22:30:08:db:6a:c7:5c:fc:ed:8d:74:e7:a9:9d:
c0:c1:d3:db:2a:51:df:b1:d2:c6:74:a1:32:9b:ee:e6:0a:30:
d6:26:23:74:8a:40:89:7b:8b:a4:60:c8:2b:40:89:ff:05:5b:
a0:b2:28:5f:b1:be:c6:c7:fe:7d:8c:b7:e9:86:d8:c2:10:4c:
a7:d0:38:0c:a8:1c:be:70:61:74:b5:15:90:b8:67:5c:7e:05:
1d:72:8b:db:b0:f9:2d:e6:4b:df:67:a7:94:cc:cf:1b:84:fc:
e5:dc:c2:c8:d1:49:6d:70:6e:46:c3:59:36:f6:3c:11:1e:a6:
cd:45:d7:1b:2d:80:f4:29:59:f4:7c:d5:80:87:5b:78:95:50:
2b:13:4e:c6:cb:9a:bb:0b:28:08:af:cd:eb:e5:ff:8b:47:eb:
5d:9a:19:8d:8f:6a:98:5e:41:23:d8:f7:47:2c:ab:f7:9f:3b:
93:35:8e:47:1b:39:2d:51:37:cf:d1:eb:cd:07:92:9e:fe:3c:
64:af:a9:59:9e:e1:de:8c:b6:e7:52:e9:91:4c:c0:ba:46:9f:
b6:11:e0:be:f5:36:80:cc:fd:f4:b0:e1:26:90:af:42:fd:92:
df:43:a5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:06 2023 by rpki-client on console-ams.rpki-client.org