Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/1hG5xiUQhfK7zTErFYyZUWzuZ0o.roa
File: 1hG5xiUQhfK7zTErFYyZUWzuZ0o.roa (raw, json)
Hash identifier: yWTbsT56ccqauwKTzDnXWY4uL2qQYRjqMf6fxR8nkW0=
Subject key identifier: D6:11:B9:C6:25:10:85:F2:BB:CD:31:2B:15:8C:99:51:6C:EE:67:4A
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0185710C378604AD24CAD59E49D18594D98D
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/1hG5xiUQhfK7zTErFYyZUWzuZ0o.roa
Signing time: Mon 02 Jan 2023 05:55:04 +0000
ROA not before: Mon 02 Jan 2023 05:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400486
IP address blocks: 185.161.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:37:86:04:ad:24:ca:d5:9e:49:d1:85:94:d9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 05:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d611b9c6251085f2bbcd312b158c99516cee674a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:81:60:a7:fb:84:f3:61:12:6c:3e:72:d6:f7:
c8:c1:fa:df:fd:84:85:5e:19:c8:88:0b:99:a6:0e:
9b:53:fb:c7:4c:dc:18:34:59:24:69:27:b0:b1:f8:
05:53:be:e1:24:18:a1:9d:93:6a:e9:75:83:b5:fd:
f0:ca:ce:73:05:70:80:a2:e2:c8:96:fb:c5:86:fb:
de:14:6d:36:13:a7:74:aa:64:3e:6a:09:ef:bd:c9:
0f:c7:b2:de:dd:de:ed:41:f5:81:d5:14:a9:31:9d:
d7:99:a0:b2:40:74:0a:4f:62:07:1f:13:26:53:8d:
dd:2b:94:2d:be:f3:33:a8:2f:d6:48:49:9c:10:d5:
eb:86:d3:3e:ab:69:6a:83:66:6a:60:65:44:8e:a4:
64:ae:69:6e:29:af:1c:18:55:18:2e:c3:16:5e:3a:
0f:10:aa:48:28:de:27:1e:ca:87:f3:61:1b:db:e8:
58:11:0f:84:55:ec:94:61:3f:96:7d:80:85:44:f1:
32:b2:a5:47:8e:7a:da:d1:13:69:db:a1:27:b2:8a:
36:cf:3f:4d:a2:13:94:7c:99:14:2f:f0:37:6a:d9:
99:6c:69:a1:04:70:98:5c:0c:44:56:c3:9e:5e:a7:
c0:3e:6c:39:da:12:27:ee:1b:0b:ec:7f:97:2a:77:
21:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:11:B9:C6:25:10:85:F2:BB:CD:31:2B:15:8C:99:51:6C:EE:67:4A
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/1hG5xiUQhfK7zTErFYyZUWzuZ0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.189.0/24
Signature Algorithm: sha256WithRSAEncryption
31:13:f6:2b:af:86:2c:b0:5f:cd:c7:81:b6:a8:bd:58:c3:d4:
eb:80:8b:94:64:c0:b8:e2:9a:50:69:dc:b5:ce:f4:73:9b:d5:
06:06:08:20:48:9b:f9:4f:48:85:e1:d1:a6:8c:64:65:c3:3a:
a2:3e:bb:5e:75:54:85:97:88:f4:ea:11:c5:83:94:74:dc:ea:
b5:8d:cc:47:53:fd:39:67:69:65:62:79:4a:97:bd:f8:ec:b0:
e5:f9:8a:e4:87:67:29:a3:0b:31:83:32:0a:1c:aa:be:95:73:
f3:c2:6b:a8:fa:7c:8f:dc:24:fd:da:9b:ae:eb:7b:60:b4:71:
06:2f:3f:de:85:cf:2e:d3:4a:ab:97:0c:af:aa:1a:4a:e4:19:
98:f7:04:4f:de:78:37:f8:a0:ba:97:ff:0a:b7:2e:ec:8b:14:
52:f9:f7:22:3f:2d:35:b0:92:c0:a6:85:23:d8:ff:69:46:f1:
34:d9:af:77:7f:91:b9:fe:93:0c:10:41:08:94:5d:f8:a5:21:
f7:92:55:18:e6:06:57:91:05:19:79:06:b9:19:59:94:c7:4b:
9e:71:f8:b1:11:a0:85:81:8f:49:18:ff:54:3c:43:4f:c4:ff:
fd:da:33:35:8d:20:98:97:ba:b7:b6:9c:c1:96:35:e4:02:02:
46:49:b2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:40 2024 by rpki-client on console-fra.rpki-client.org