Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/1-m5aEedosn2RHnWOQ2Zkl5rZTpg.roa
File: 1-m5aEedosn2RHnWOQ2Zkl5rZTpg.roa (raw, json)
Hash identifier: 6/50pvZL0EQEdRAmaybswu9nU6mZFmWHu1ko6qXzzi0=
Subject key identifier: FA:6E:5A:11:E7:68:B2:7D:91:1E:75:8E:43:66:64:97:9A:D9:4E:98
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 0188725EBFD3B1006F8BEA1474D31E2306C7
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/1-m5aEedosn2RHnWOQ2Zkl5rZTpg.roa
Signing time: Wed 31 May 2023 15:13:12 +0000
ROA not before: Wed 31 May 2023 15:13:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.180.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:72:5e:bf:d3:b1:00:6f:8b:ea:14:74:d3:1e:23:06:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: May 31 15:13:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa6e5a11e768b27d911e758e436664979ad94e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:13:95:02:8c:02:9b:af:d4:3c:d2:75:1c:d3:
6b:5b:ce:cb:7b:04:d8:97:b0:22:bc:32:e9:b7:78:
40:e6:fd:75:8d:4e:19:db:9d:09:c4:dc:40:88:18:
9c:b2:09:2a:83:ba:25:24:02:f7:71:d5:3f:a4:4e:
da:14:93:4d:a7:bb:bb:de:15:9a:e7:64:80:8e:c5:
75:de:29:54:70:f2:64:0b:ea:e9:81:19:0d:89:b8:
23:73:d9:4a:02:b8:c7:21:13:10:d2:b8:7b:b2:90:
a5:54:d0:0c:e0:77:c3:1c:c4:43:67:60:98:d2:36:
b9:5c:4e:c7:89:b5:2f:f1:de:f9:d9:c9:05:7f:c1:
61:e4:ab:ff:08:e9:2f:5b:3e:6c:9f:b2:b0:04:56:
f0:cf:f7:f7:9c:92:38:3d:ed:79:b4:25:02:ed:64:
fe:20:9e:6e:98:90:0e:67:6a:17:5d:ce:9c:28:2a:
db:d0:4c:81:b1:12:f9:dc:89:48:44:1a:f9:c8:d3:
12:da:82:b5:cc:36:dc:7f:7a:1b:a6:72:ab:47:61:
19:e4:36:59:ea:3e:10:2b:18:8a:2d:fa:ce:62:05:
39:1c:19:0a:48:16:be:01:b0:95:74:fc:e7:72:ec:
9b:67:c7:25:b7:40:a8:7b:82:15:f1:72:fe:ab:69:
5c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6E:5A:11:E7:68:B2:7D:91:1E:75:8E:43:66:64:97:9A:D9:4E:98
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/1-m5aEedosn2RHnWOQ2Zkl5rZTpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.144.0/24
Signature Algorithm: sha256WithRSAEncryption
24:2f:9f:48:92:85:23:5e:1a:8f:c2:a2:33:8a:28:a9:8d:11:
36:6a:1b:a6:35:a2:13:89:2f:ff:b1:88:f8:fa:e4:75:c9:f9:
24:39:f1:e8:d4:ca:df:17:62:1f:ed:c7:df:fb:9e:9c:6d:4e:
53:1e:2d:71:42:57:74:4c:c6:c1:9f:6e:b6:74:b4:02:44:c3:
1a:23:bb:d3:01:c9:a5:28:7b:12:81:c7:8f:f4:af:0c:fa:68:
f1:a4:1e:49:5a:32:7b:c5:b5:41:89:52:4f:10:ce:c0:52:ad:
89:dc:84:3f:49:65:9c:05:a3:c6:c8:5b:54:df:1d:82:9c:21:
83:bc:27:85:f1:3a:ba:26:ab:ed:4e:27:4b:f5:e1:2c:e1:d9:
dc:b8:46:73:8c:69:1c:57:f1:66:2a:e6:3e:49:d8:c5:35:a2:
bb:b0:32:24:e2:2f:0b:35:eb:60:e6:4c:d6:0d:99:eb:09:75:
6e:a0:e2:c5:ee:9e:f6:89:bc:53:59:64:f8:2f:a9:1f:ce:a6:
b3:12:04:44:d9:c9:52:0f:5f:e0:58:d8:0d:11:e5:3d:e0:f9:
0e:72:1c:33:25:9e:8e:18:fd:98:9f:3e:78:13:ed:8a:d3:cd:
dc:11:63:da:e8:06:ce:5d:b1:7c:51:f6:72:12:e4:c9:00:7f:
67:03:fd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:14 2023 by rpki-client on console-fra.rpki-client.org