Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/42VGoqZ7W9L5X-IVfLkNgaN_E0s.roa
File: 42VGoqZ7W9L5X-IVfLkNgaN_E0s.roa (raw, json)
Hash identifier: 5nb7SDyNhg5Uswvck76DcHgoqrGa1316EyILGVu3NnU=
Subject key identifier: E3:65:46:A2:A6:7B:5B:D2:F9:5F:E2:15:7C:B9:0D:81:A3:7F:13:4B
Certificate issuer: /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial: 01856FCB9401C0FA3AF82FF44236D61A7977
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/42VGoqZ7W9L5X-IVfLkNgaN_E0s.roa
Signing time: Mon 02 Jan 2023 00:04:50 +0000
ROA not before: Mon 02 Jan 2023 00:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60155
IP address blocks: 185.55.200.0/22 maxlen: 22
2a04:d640::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:94:01:c0:fa:3a:f8:2f:f4:42:36:d6:1a:79:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
Validity
Not Before: Jan 2 00:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e36546a2a67b5bd2f95fe2157cb90d81a37f134b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7b:13:9d:ac:9a:33:a6:34:56:d3:5a:04:34:
2d:ee:2f:56:6f:a2:c9:11:67:fc:9e:48:47:73:5a:
23:35:c5:1b:44:49:ca:3f:66:86:c8:c8:9d:9e:81:
c7:43:4f:f8:93:a2:b5:78:3a:38:a8:a4:3a:b6:e0:
f5:c9:04:2d:72:0f:5e:c1:86:36:d3:dd:00:45:92:
fc:28:65:10:75:85:5b:0d:77:fa:c9:ea:b4:1d:4c:
a3:fe:68:71:a5:7e:fa:76:a0:0d:3e:b0:62:83:65:
b1:4e:23:e5:52:58:71:7f:87:c2:3f:9a:19:05:d9:
fa:01:b1:77:42:86:f5:e3:ac:1a:ea:dc:ad:74:3b:
2a:c2:9c:60:f4:be:31:45:fd:a4:bb:e1:d2:95:12:
f3:68:ae:da:b3:f1:fa:f5:5b:75:bb:d6:2f:ca:5d:
c2:57:1d:a6:e9:ac:7a:74:80:a9:71:0e:c2:f1:a0:
b0:28:9d:c7:7d:d9:2c:f7:9f:d5:43:f7:66:75:4f:
84:26:14:c1:d8:9f:de:82:33:90:66:b9:77:42:d8:
12:62:17:05:88:87:64:e3:c7:f9:97:0c:1a:7a:a3:
a9:8a:3d:b2:c3:de:54:30:c7:4f:f0:62:6e:2e:09:
71:b5:7c:11:51:49:28:5f:0e:ae:78:89:76:5e:4b:
21:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:65:46:A2:A6:7B:5B:D2:F9:5F:E2:15:7C:B9:0D:81:A3:7F:13:4B
X509v3 Authority Key Identifier:
keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/42VGoqZ7W9L5X-IVfLkNgaN_E0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.200.0/22
IPv6:
2a04:d640::/29
Signature Algorithm: sha256WithRSAEncryption
60:f4:df:c2:7d:68:e0:c1:69:10:02:fd:72:3e:11:27:da:18:
19:79:ef:95:2e:22:35:ec:21:00:61:fb:61:ac:a2:00:a4:18:
ef:9d:ca:37:14:dd:63:8b:22:e2:07:84:16:00:8b:8d:a8:cd:
54:5a:55:f8:9c:9e:fd:bd:fe:dc:8d:03:85:67:49:3d:f0:43:
00:b1:ad:e4:a0:c1:6f:96:0f:cf:cf:00:75:2f:58:d7:1b:60:
28:af:40:cd:96:4f:9b:03:06:07:1e:83:f7:4b:40:fd:0f:b3:
71:4d:ae:c1:e5:dd:05:21:72:88:a2:55:d9:b7:12:45:a7:e9:
01:1e:2a:82:3b:dd:a0:7d:60:32:2d:2b:5f:e6:59:51:8a:04:
34:98:b3:85:99:65:2a:a3:e8:37:06:21:4d:fb:1e:9b:31:c9:
20:a5:47:66:1b:80:27:9c:86:d9:79:b8:cc:5e:e3:59:a8:5f:
e3:4c:18:61:e3:45:05:5e:48:05:73:d0:e1:1b:ee:ab:c6:1d:
e2:8a:91:a8:7e:4e:a8:7d:e0:ff:36:53:f8:49:fa:d7:f6:52:
fd:f6:0d:2a:d6:53:9d:61:b0:04:1b:a9:3c:b3:12:56:02:da:
aa:00:7f:8d:b8:fa:54:40:91:df:71:82:70:95:eb:f5:ae:a6:
d0:40:e9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:16 2024 by rpki-client on console-fra.rpki-client.org