Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/upQXhktlsOwLfiww0gfUZ1dRaQI.roa
File: upQXhktlsOwLfiww0gfUZ1dRaQI.roa (raw, json)
Hash identifier: HVX8Ag5WClkbiBibY+HT9cwLfimU7iHHJdR+xuE5fQo=
Subject key identifier: BA:94:17:86:4B:65:B0:EC:0B:7E:2C:30:D2:07:D4:67:57:51:69:02
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B63F437A86B481A3F427C073FD0A40
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/upQXhktlsOwLfiww0gfUZ1dRaQI.roa
Signing time: Mon 02 Jan 2023 09:00:47 +0000
ROA not before: Mon 02 Jan 2023 09:00:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 185.206.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:3f:43:7a:86:b4:81:a3:f4:27:c0:73:fd:0a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba9417864b65b0ec0b7e2c30d207d46757516902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:22:89:87:11:9c:70:39:59:99:be:c6:e8:
2e:49:16:60:0d:c8:9b:03:01:c0:f5:a7:f3:73:32:
5c:61:eb:aa:89:bc:ff:ca:24:2f:30:07:66:11:45:
32:66:03:26:cd:19:6a:b4:06:1a:d4:45:e0:df:44:
97:4d:87:d8:9f:c6:8c:e3:b8:04:2e:05:58:cc:94:
b6:ef:d6:92:39:4b:bb:a6:b9:22:e7:2f:f7:7d:86:
14:8f:46:94:50:e5:4c:22:e1:d1:de:c5:7b:5b:c7:
9e:60:b2:87:ee:19:4f:b5:0c:e5:eb:30:06:e7:e3:
4e:3e:8b:01:84:4d:6b:11:7a:5f:f6:41:93:fe:52:
8f:ed:de:1c:7a:bb:15:26:3f:01:7a:36:7a:da:b6:
40:87:86:1c:cf:c1:d5:5b:24:13:72:4d:b0:41:e5:
b2:f4:37:01:ad:66:1a:67:c1:06:3d:52:da:99:85:
fd:07:8b:0c:d7:d8:28:f0:81:4c:9c:a3:df:a8:db:
eb:d4:f0:70:58:c3:6a:59:01:94:84:74:b8:32:b5:
b5:63:69:36:e1:58:5a:2c:5a:c7:73:49:a4:90:35:
e3:67:bf:57:35:f9:e7:88:d8:3a:f5:8a:2b:be:17:
78:81:93:90:94:b0:d0:a1:35:ea:13:15:25:61:78:
59:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:94:17:86:4B:65:B0:EC:0B:7E:2C:30:D2:07:D4:67:57:51:69:02
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/upQXhktlsOwLfiww0gfUZ1dRaQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:56:f8:6e:b0:30:6d:de:96:27:60:69:a0:ec:35:b3:d7:e5:
a1:8d:ce:14:86:b3:ef:a6:f9:d0:4f:51:c8:dc:4a:99:d0:71:
bf:27:bb:46:e6:18:02:07:b1:a1:2d:72:df:14:81:e5:7d:60:
19:de:37:81:a8:46:00:0c:76:b4:a6:1e:78:99:e3:7c:91:6d:
04:9f:67:43:02:7d:f6:32:4b:40:eb:61:f2:7d:13:1a:41:ab:
ec:65:0d:b1:1e:d4:81:b3:98:05:c9:46:3f:48:73:d9:db:2e:
71:6e:91:4a:cc:4a:8e:c1:75:ee:de:5c:da:97:44:6f:66:ee:
6d:a7:dd:eb:92:86:c6:48:e6:f0:9d:9b:10:1f:cb:4b:49:66:
20:eb:ce:b9:7c:6a:e9:ab:cc:ad:9e:58:f2:71:f6:bb:13:14:
87:73:c4:b9:50:74:44:1c:86:26:4d:67:d8:0c:81:28:f8:c9:
dc:33:c3:2f:f4:52:dd:f9:0c:4a:a4:5e:63:a3:d4:b8:f3:5c:
9e:2b:31:bf:bf:14:37:4a:cc:5d:44:0f:95:6e:6d:ca:50:3e:
03:4c:1c:98:31:0d:5f:83:e2:75:65:92:25:50:0f:ac:f1:00:
75:8b:83:39:04:68:d5:cf:aa:32:7c:b0:97:06:d4:be:9a:40:
6a:50:6f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:44 2024 by rpki-client on console-fra.rpki-client.org