Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/xE7pfMnGhhFDvrr9cOcnlZyUqHo.roa
File: xE7pfMnGhhFDvrr9cOcnlZyUqHo.roa (raw, json)
Hash identifier: 335uz7I58/ytz17S0GhIvi6b3qg51ECSNy0AjVS5WPI=
Subject key identifier: C4:4E:E9:7C:C9:C6:86:11:43:BE:BA:FD:70:E7:27:95:9C:94:A8:7A
Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial: 01856E542968E77B36AD6DF41CEE08310DB3
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/xE7pfMnGhhFDvrr9cOcnlZyUqHo.roa
Signing time: Sun 01 Jan 2023 17:14:47 +0000
ROA not before: Sun 01 Jan 2023 17:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59441
IP address blocks: 185.24.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:54:29:68:e7:7b:36:ad:6d:f4:1c:ee:08:31:0d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Validity
Not Before: Jan 1 17:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c44ee97cc9c6861143bebafd70e727959c94a87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e5:77:0c:11:48:54:64:33:74:96:ea:49:91:
d5:77:eb:b1:3d:d8:33:2c:e7:6c:62:92:e0:ec:f1:
e9:b1:2d:81:30:46:e1:e1:91:90:9f:31:8f:6c:f3:
f7:fb:f3:c0:2b:bc:3e:0d:a3:d6:40:a5:02:e4:a4:
66:3d:ae:5a:55:07:79:96:cc:7c:53:f8:54:44:b9:
88:b2:da:7b:72:a2:44:dc:12:5c:66:f1:a2:cf:c8:
3d:0c:2a:65:6a:9b:6e:cb:9f:fe:7e:56:25:26:3f:
b9:12:bf:1e:15:e0:b5:a7:d2:b4:6a:03:00:2f:b6:
67:6f:06:35:61:66:28:92:42:ae:8a:9a:3d:a3:60:
bb:47:4e:c7:8f:d1:be:b6:de:5a:ed:22:7c:78:90:
b0:ab:af:62:d3:00:b1:1e:0f:17:33:72:56:ea:a6:
69:53:45:9b:7c:2f:0a:0c:18:82:d6:82:e3:32:70:
6b:be:e5:27:3c:66:dd:29:5f:bb:6e:fa:56:55:81:
ce:91:d5:5a:5b:25:fe:f2:ba:d6:1c:08:c0:18:1c:
8c:d1:ad:c8:f9:9c:e8:a0:cf:7d:f1:4e:36:f3:9a:
9b:c7:b0:f4:c0:d3:a0:6c:d8:ec:e8:73:33:75:50:
f8:d5:bb:60:0e:3b:17:4c:74:80:0a:08:2f:73:8f:
ad:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4E:E9:7C:C9:C6:86:11:43:BE:BA:FD:70:E7:27:95:9C:94:A8:7A
X509v3 Authority Key Identifier:
keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/xE7pfMnGhhFDvrr9cOcnlZyUqHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.255.0/24
Signature Algorithm: sha256WithRSAEncryption
03:72:d7:75:96:cd:0e:54:c7:b0:bf:67:73:19:91:c3:8a:ec:
9e:3c:51:d4:3d:52:fe:f9:b7:46:2e:aa:70:3f:e6:82:e7:26:
4b:22:51:60:a1:43:aa:e0:6e:50:c6:3b:05:e8:94:48:fc:3b:
35:98:6f:e0:af:47:11:f6:97:72:08:9e:3a:70:45:22:de:97:
24:d4:64:bb:c3:5a:cc:26:40:7b:48:cc:9e:c1:62:a5:db:db:
5d:f8:8b:66:05:a2:65:da:41:6d:e6:19:cc:0f:2e:30:af:9f:
ad:df:3a:44:b6:0e:ca:61:97:1c:f2:e5:94:50:f5:dc:4e:36:
30:c4:c1:30:e3:a3:60:2b:f8:06:98:ab:3c:e6:40:8d:b6:59:
46:7d:5a:83:08:92:b8:4b:f8:e7:02:c1:dd:e4:76:72:6f:b4:
86:aa:f3:3c:4f:3b:1b:a5:ad:57:ca:3c:37:5e:ce:4c:9e:b4:
bb:7b:6f:f0:46:09:aa:1e:a8:6c:53:57:11:eb:c2:c0:42:00:
84:1f:78:64:e7:1a:3f:b6:02:c7:08:22:2e:3a:a0:86:e9:21:
10:f2:64:c5:6b:21:cc:b7:04:32:bb:c1:e9:30:ca:84:54:4b:
b4:20:01:de:a6:bb:39:43:7e:52:43:aa:93:96:f5:4b:74:a2:
02:c8:44:79
-----BEGIN CERTIFICATE-----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Generated at Sun Oct 29 15:09:04 2023 by rpki-client on console-ams.rpki-client.org