Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/NsvAMvFlGR-0AHfBAP45NKExwjw.roa
File: NsvAMvFlGR-0AHfBAP45NKExwjw.roa (raw, json)
Hash identifier: mctKi5VCTuNRZ3+Z4GHjSDlyc/Q9BmWRAfwOF38vtOQ=
Subject key identifier: 36:CB:C0:32:F1:65:19:1F:B4:00:77:C1:00:FE:39:34:A1:31:C2:3C
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 01856E266B27825D31689C407ECD3FD620D1
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/NsvAMvFlGR-0AHfBAP45NKExwjw.roa
Signing time: Sun 01 Jan 2023 16:24:49 +0000
ROA not before: Sun 01 Jan 2023 16:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.183.244.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:6b:27:82:5d:31:68:9c:40:7e:cd:3f:d6:20:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Jan 1 16:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36cbc032f165191fb40077c100fe3934a131c23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0c:b6:93:94:53:c5:29:3c:d8:28:b5:6c:18:
12:cc:ed:64:97:1c:6d:21:69:12:6c:d8:83:08:d4:
ae:85:b0:c6:e4:8e:34:90:d8:0d:fd:cb:43:03:93:
8d:28:a4:7c:6f:9f:2b:b3:40:8c:7e:9b:f5:9c:a8:
7f:74:25:39:cc:85:bf:6f:9e:a5:d0:72:30:7b:c7:
fd:f5:22:e8:36:a2:65:b7:87:81:c8:a3:6b:1e:0d:
9f:72:03:42:e5:87:19:51:8d:60:99:5f:ca:65:83:
96:f4:bf:0a:5c:cf:04:a5:c9:55:44:88:ca:e3:e1:
08:e9:44:9c:79:ab:b1:da:0c:f7:25:c1:bc:16:a4:
1e:75:7f:4a:24:98:19:54:a8:04:9c:ff:aa:ec:6c:
c2:41:ec:13:99:6d:e0:04:d8:b3:8e:91:1a:e1:35:
e8:21:86:ae:e3:6c:c4:72:f3:d5:02:e5:09:1e:10:
49:d0:e8:58:ee:f1:f5:62:f6:38:bd:17:c9:68:c3:
46:d6:54:1a:b4:6a:b8:65:b1:c0:c2:a8:d0:be:76:
5a:d1:e1:d3:26:a1:c8:a5:f6:3d:80:2b:23:18:80:
60:89:55:7a:7d:ac:2a:d1:9b:2e:41:bf:6f:05:5b:
22:4b:8d:b8:99:d8:d5:72:fb:ef:30:a9:fd:fa:b5:
91:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CB:C0:32:F1:65:19:1F:B4:00:77:C1:00:FE:39:34:A1:31:C2:3C
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/NsvAMvFlGR-0AHfBAP45NKExwjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.244.0/22
Signature Algorithm: sha256WithRSAEncryption
52:b5:53:fb:dc:c6:bc:f8:fd:29:f3:a3:38:0f:93:93:a5:97:
d8:8c:d5:64:f5:81:b7:d3:65:92:a8:5f:7a:10:8d:2b:6f:2c:
ab:d9:2d:59:65:0c:28:39:e3:f6:93:66:e7:b5:fe:c2:95:5b:
21:6f:0c:d7:f9:79:25:d0:5b:cf:54:21:e3:eb:80:6b:2e:1f:
41:19:33:7a:48:6d:4d:dd:e1:86:16:10:d5:9b:e6:26:5a:b8:
e9:36:9c:f0:ab:3f:fb:83:08:e9:4a:f2:74:05:ef:a7:96:46:
43:02:24:dd:ef:b9:83:69:8a:82:25:41:69:ec:88:3b:29:50:
7b:dc:2c:b8:ff:e2:b5:42:16:1f:08:f6:fd:7d:bb:50:1d:4d:
d6:55:ea:58:d8:ca:cd:a9:cf:65:7c:60:e4:d3:10:e2:65:c8:
b3:57:aa:5c:f0:c7:4a:84:0c:4d:76:01:28:8b:5e:db:ab:65:
bc:62:a7:77:41:fc:94:79:76:f9:95:b6:93:f9:f0:de:0d:d7:
f9:0a:10:97:0c:71:13:d0:5e:cf:1d:1f:5e:f5:32:58:79:63:
d3:09:c4:b6:5c:d8:a2:53:91:0c:31:47:76:86:14:1e:69:37:
7d:8e:a0:e5:2a:a0:97:f3:a1:39:cf:63:b6:8c:3c:c2:d9:1f:
d3:94:f7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 01:12:08 2023 by rpki-client on console-ams.rpki-client.org