Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/KstdvuVwDQzXXVbJMYpe7iqY7Qw.roa
File: KstdvuVwDQzXXVbJMYpe7iqY7Qw.roa (raw, json)
Hash identifier: I/fVQLpAkNvwLsaRSrSW1npSAAJ1xEdg3OQWShgiMhM=
Subject key identifier: 2A:CB:5D:BE:E5:70:0D:0C:D7:5D:56:C9:31:8A:5E:EE:2A:98:ED:0C
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 018B1EB36714533A3B6962751131BDD1AE8B
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/KstdvuVwDQzXXVbJMYpe7iqY7Qw.roa
Signing time: Wed 11 Oct 2023 12:25:55 +0000
ROA not before: Wed 11 Oct 2023 12:25:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 185.110.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:b3:67:14:53:3a:3b:69:62:75:11:31:bd:d1:ae:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Oct 11 12:25:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2acb5dbee5700d0cd75d56c9318a5eee2a98ed0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:77:b7:c2:02:1f:a6:e8:c0:e2:ee:7c:f8:fa:
55:d8:a7:dd:7d:c0:ff:0f:73:03:be:44:7e:ed:89:
8c:61:62:2e:40:95:91:d9:52:e4:62:97:f4:0e:13:
22:42:ab:2b:b6:bb:39:e8:f8:38:d5:86:13:42:bb:
cb:eb:3e:25:47:4c:39:4c:8e:12:49:a8:d5:af:03:
73:b7:2c:48:c5:f9:32:11:54:43:06:92:e0:b9:c1:
65:c0:13:67:c0:93:3a:2f:f9:f2:e7:19:da:22:76:
f6:de:f1:1e:41:6c:8d:52:ab:35:3e:94:2c:2f:4b:
c4:45:0d:ba:a5:4e:14:12:ce:85:eb:7b:17:f3:55:
50:1b:73:99:83:bb:87:19:76:c0:bd:2a:1c:1b:66:
5d:fa:de:57:b5:96:08:57:42:ed:35:94:af:6f:b3:
b1:38:bc:a4:1a:73:ad:e1:80:9f:58:fd:8f:a2:64:
1b:19:1a:db:67:c6:fe:42:b0:6d:18:cb:a2:5c:43:
1d:a3:f9:05:e0:25:8e:78:89:10:ba:6b:4e:a8:81:
6a:a2:ce:37:a7:05:09:22:1a:35:9b:ce:79:7f:5e:
d1:c5:56:b3:3c:d9:85:c5:af:d5:bf:f6:e1:81:58:
15:48:41:f0:39:33:23:bb:bb:3c:75:4c:95:2c:ce:
8b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CB:5D:BE:E5:70:0D:0C:D7:5D:56:C9:31:8A:5E:EE:2A:98:ED:0C
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/KstdvuVwDQzXXVbJMYpe7iqY7Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.62.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:2b:a2:87:0f:2e:16:d5:b2:39:55:cd:95:ef:20:26:9d:99:
b8:8e:af:34:30:a8:29:10:c8:c0:a4:8f:1f:62:97:1b:80:60:
a7:e6:bb:d0:d2:2a:dd:49:36:ce:8f:22:e7:c9:e5:66:13:45:
be:31:fd:e3:ed:e8:3a:f5:22:5d:81:a2:7a:29:70:49:c0:bf:
b8:42:79:2e:a0:61:41:e3:73:60:c8:ec:01:92:99:70:9b:11:
70:ef:cb:b8:e2:9a:2b:33:5d:c8:d0:be:90:6a:65:a9:a2:95:
98:42:c7:3c:8c:d1:23:00:82:1c:bf:e2:fd:e4:3d:92:19:3f:
91:a5:de:ff:3d:59:c9:78:f5:03:51:68:90:3e:57:ae:cc:84:
fe:11:96:cb:53:5c:64:86:0a:44:0e:11:ba:65:61:16:0e:9a:
0d:37:ef:25:07:ed:b7:66:9a:3a:86:30:a7:38:fd:7d:3c:fd:
30:1f:5e:ba:b6:7c:15:a2:f9:0c:d1:fe:e3:33:91:c9:02:16:
a7:38:c2:d5:fd:d2:98:39:fd:a5:61:f2:26:0d:80:3f:1b:a1:
0c:1d:d1:77:3a:2a:2e:09:9a:4b:f3:35:22:09:ef:e2:ea:63:
8e:bc:60:93:b2:5b:73:54:da:3c:83:c3:f2:31:df:96:d8:be:
2c:99:6f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:50 2024 by rpki-client on console-ams.rpki-client.org