Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/ViFS6pOSxGP9rLW0QROEpHjNX-Y.roa
File: ViFS6pOSxGP9rLW0QROEpHjNX-Y.roa (raw, json)
Hash identifier: yEQ0xFGchza/PLnEvldZ0goB2zjNoCmgExSY6TCh2hY=
Subject key identifier: 56:21:52:EA:93:92:C4:63:FD:AC:B5:B4:41:13:84:A4:78:CD:5F:E6
Certificate issuer: /CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
Certificate serial: 01856FDDE47B4F6EDD9B0E34375263BFAD60
Authority key identifier: 52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/ViFS6pOSxGP9rLW0QROEpHjNX-Y.roa
Signing time: Mon 02 Jan 2023 00:24:50 +0000
ROA not before: Mon 02 Jan 2023 00:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211632
IP address blocks: 185.190.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:dd:e4:7b:4f:6e:dd:9b:0e:34:37:52:63:bf:ad:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
Validity
Not Before: Jan 2 00:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=562152ea9392c463fdacb5b4411384a478cd5fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:70:21:9a:ec:dd:c8:bb:a6:b0:ae:fa:3f:df:
eb:25:2f:24:71:a1:32:b8:cb:24:e0:78:ad:fc:5e:
0b:87:fc:83:29:e9:da:f8:6b:08:8e:e8:5b:11:8e:
84:91:76:a6:ae:ab:a7:be:6c:91:a8:d1:97:ba:7b:
67:cc:82:c7:c3:c9:b3:99:bb:ef:35:6a:3b:9a:6e:
d1:8e:75:fd:d1:7a:34:3a:b9:ab:6e:76:b2:bc:85:
21:b3:b7:de:94:a8:f9:dc:b1:15:38:39:98:ce:53:
7c:f8:f3:a0:3c:21:8a:52:d2:2f:85:a2:26:28:1f:
75:f1:4e:c9:d0:79:e1:b1:e8:0c:be:ca:47:c3:06:
9c:c8:af:69:e4:58:00:d9:14:de:9c:8b:0c:cb:e1:
d3:43:55:15:d2:cd:f3:14:75:dc:0d:a4:5f:26:10:
af:bb:fb:9a:74:52:71:12:1c:9e:95:ab:d3:18:a6:
c0:33:c4:cd:e7:92:d2:b9:06:59:46:32:4b:39:69:
b0:95:85:e1:83:b7:f1:be:15:ab:a0:95:76:25:20:
a2:76:ee:80:4e:db:a4:53:1c:b0:c4:f9:ed:5b:53:
ed:af:76:23:8c:cd:16:2c:11:19:b4:25:00:7e:92:
81:e8:af:22:ae:02:23:6b:f5:10:37:94:3c:3a:35:
a9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:21:52:EA:93:92:C4:63:FD:AC:B5:B4:41:13:84:A4:78:CD:5F:E6
X509v3 Authority Key Identifier:
keyid:52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/ViFS6pOSxGP9rLW0QROEpHjNX-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.24.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:88:3a:20:3f:4f:b6:1b:c2:e5:4f:59:77:63:03:35:f5:13:
ec:c8:64:e7:a7:9e:4d:92:f6:20:b9:bc:7a:fa:7a:a3:06:0d:
e9:a4:57:d5:52:6d:9c:fa:5b:6b:46:80:89:bb:b2:bd:fc:98:
82:92:6a:b3:fa:ab:58:5c:ac:f4:df:e8:c4:c0:33:07:0f:0a:
ad:2d:1b:69:90:32:6a:55:69:dc:8e:0a:cd:b1:d4:84:f9:6e:
0e:2a:c9:2d:d9:47:fa:b4:46:d3:e1:48:7a:72:9e:c3:12:eb:
18:16:b9:15:d9:1c:54:a2:a4:a3:cd:74:f7:6d:23:43:00:aa:
ff:dd:ac:aa:81:a4:68:75:2d:47:76:b8:3c:e0:3d:26:f2:4d:
70:4e:06:1e:55:92:a0:f1:36:53:cf:a1:ab:42:d1:91:4c:85:
96:47:8e:62:6b:8e:88:06:01:79:07:ea:72:43:bf:ff:55:3b:
6e:eb:48:04:91:d4:e7:14:17:9f:0f:17:6e:7b:22:c3:4f:2b:
37:c5:ad:ff:ec:a9:6d:1b:52:a3:7f:8e:f6:69:94:5f:b2:49:
bf:b8:8f:4d:3e:b4:4f:8b:7d:85:2c:f9:89:6d:1b:49:0a:a4:
c2:9e:c2:53:0d:54:3b:18:12:de:f4:46:a5:4e:ad:64:0a:01:
df:f0:d3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:49 2024 by rpki-client on console-ams.rpki-client.org