Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1-my3055Bvou_X5Re66pVzzc7-bs.roa
File: 1-my3055Bvou_X5Re66pVzzc7-bs.roa (raw, json)
Hash identifier: a/j/O2am8g66iA600w6mCd4lXDe6FXO1IlY8jlRPZHQ=
Subject key identifier: FA:6C:B7:D3:9E:41:BE:8B:BF:5F:94:5E:EB:AA:55:CF:37:3B:F9:BB
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C54022FB221B640CB0EB8DDC5CC85F5
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1-my3055Bvou_X5Re66pVzzc7-bs.roa
Signing time: Sun 01 Jan 2023 07:55:22 +0000
ROA not before: Sun 01 Jan 2023 07:55:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61049
IP address blocks: 185.177.83.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:02:2f:b2:21:b6:40:cb:0e:b8:dd:c5:cc:85:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa6cb7d39e41be8bbf5f945eebaa55cf373bf9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:62:1d:54:a4:97:fd:49:1d:55:dd:ce:ef:a6:
cf:b1:31:27:8f:01:99:a5:bf:fe:19:e0:69:b2:3e:
c4:27:4f:e1:61:45:12:08:dc:40:05:82:4f:d9:7a:
72:93:1c:77:6c:55:f6:93:6f:1d:42:b9:cb:75:ed:
4a:21:f0:c4:31:58:5b:05:9e:65:95:f7:7c:bc:5f:
c5:1d:8f:cd:0a:ee:3f:66:74:d7:6f:92:17:14:0b:
02:10:2f:f8:50:42:e3:f1:f5:3e:db:fe:a0:f2:af:
bb:85:06:ef:d2:c7:6f:be:2a:d5:3f:f2:dd:ec:f7:
fa:7e:39:dc:04:eb:93:14:4a:6c:d1:ec:a5:3e:8f:
a7:0d:c8:db:ed:85:65:e8:37:ee:ab:23:df:03:57:
59:76:23:66:63:1a:20:ff:40:fd:5e:8f:2c:e1:9c:
8c:89:b5:43:54:40:45:6e:c6:4c:6e:20:f6:88:a4:
6d:bd:6e:cb:17:cb:98:ae:37:46:79:3b:1d:45:68:
4a:40:44:c3:f5:54:34:bd:41:9e:60:08:8b:c3:1a:
7f:eb:4a:c9:5a:90:32:23:a4:e0:57:b4:37:21:93:
73:ff:e7:51:2b:67:dc:aa:95:b7:b7:62:e3:3c:34:
da:a6:98:f5:88:69:00:27:c7:e1:5a:e7:9e:3e:69:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6C:B7:D3:9E:41:BE:8B:BF:5F:94:5E:EB:AA:55:CF:37:3B:F9:BB
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1-my3055Bvou_X5Re66pVzzc7-bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.83.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:3a:26:b1:bf:d5:c0:b3:4c:6b:fb:18:7a:24:3e:fa:f7:9f:
09:1d:66:7d:6b:a6:b0:1d:4d:64:da:12:df:6a:c8:5e:d6:c9:
01:8c:b7:bd:4b:e5:ad:9f:e0:ea:75:2d:8e:2c:31:ac:be:c8:
9f:e5:61:df:53:af:1e:3f:5f:b2:48:78:18:1c:75:da:36:fc:
52:3d:9a:24:17:47:30:4c:81:26:ca:7e:bf:27:4a:9a:23:57:
07:56:5c:24:d2:ac:50:ab:77:38:8a:b2:cd:c0:31:4b:44:c2:
c7:01:11:bf:52:bf:fc:29:d8:c2:b8:b6:5a:9c:3c:ee:1f:7b:
ec:5c:d4:42:1c:c4:96:3f:e1:dd:e0:ed:19:d2:11:c4:03:95:
60:cf:b8:97:c0:db:b4:aa:c0:5f:a6:d0:43:25:49:ae:e9:f6:
3a:c6:1f:bc:9e:03:af:60:fd:a6:b6:9b:f1:82:86:b3:8a:9c:
0b:94:ba:56:ce:81:f9:9e:04:b8:f5:f5:72:b0:2b:8c:30:73:
f8:6e:2a:a9:f2:d8:ad:95:66:9d:3e:d8:89:51:30:38:f5:e4:
76:f0:62:34:80:df:70:3f:0b:f1:ba:4d:23:4e:e0:69:ff:93:
08:c5:75:e9:65:2c:43:06:80:5c:0d:a7:7e:70:07:b8:06:f0:
d8:8e:b5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:55 2024 by rpki-client on console-fra.rpki-client.org