Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lLS02R8TwXf57YM7hT21htD6Kyo.roa
File: lLS02R8TwXf57YM7hT21htD6Kyo.roa (raw, json)
Hash identifier: 9iTVFX1IxhUYq9FqA6zLNXxoN7qcSTlYgo5nXlLoBb4=
Subject key identifier: 94:B4:B4:D9:1F:13:C1:77:F9:ED:83:3B:85:3D:B5:86:D0:FA:2B:2A
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C540065C44661BBA657CEFDBD252513
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lLS02R8TwXf57YM7hT21htD6Kyo.roa
Signing time: Sun 01 Jan 2023 07:55:22 +0000
ROA not before: Sun 01 Jan 2023 07:55:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60672
IP address blocks: 185.223.164.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:00:65:c4:46:61:bb:a6:57:ce:fd:bd:25:25:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94b4b4d91f13c177f9ed833b853db586d0fa2b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:f2:0e:a0:1f:65:9b:a3:03:79:7e:9a:6c:
e0:73:d6:7d:49:ea:cf:b3:64:68:9a:61:aa:39:eb:
ab:ed:b9:5a:aa:5a:01:13:28:16:33:0d:33:d4:d3:
46:46:bc:dc:bf:2c:a8:95:d8:ee:82:9c:99:03:d1:
aa:26:f4:58:34:45:68:f4:19:f3:a2:4f:5b:6b:46:
2a:80:bb:9e:74:5f:0c:42:46:d3:bc:a9:00:e7:4b:
4f:24:f4:37:ce:f0:78:5e:6e:3b:39:e1:92:85:74:
0d:cc:a4:aa:9b:d1:ef:a1:b9:c5:90:01:1d:97:2f:
46:a3:6b:e7:19:9a:17:fb:2c:cb:1b:cd:51:1f:37:
43:08:1b:03:fc:0c:3f:04:02:87:7a:4c:04:dc:b0:
9a:50:4f:b6:22:d7:67:97:4c:70:5e:3d:6a:7f:ca:
23:d7:14:2f:dc:ec:c9:49:62:80:ee:e5:b6:7a:81:
a8:19:81:cc:18:41:07:1d:eb:9d:3e:54:15:75:cb:
4f:38:5a:3c:b6:63:d7:e8:db:ac:21:d3:fb:1a:a3:
0d:f1:4a:8a:51:46:4d:19:d1:6e:ef:24:0a:30:5b:
c8:b5:5e:59:da:fe:eb:13:56:c8:df:eb:14:05:2d:
a4:57:28:61:22:4a:fb:4f:c1:e7:3f:9d:1c:d9:66:
e7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B4:B4:D9:1F:13:C1:77:F9:ED:83:3B:85:3D:B5:86:D0:FA:2B:2A
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lLS02R8TwXf57YM7hT21htD6Kyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.164.0/24
Signature Algorithm: sha256WithRSAEncryption
02:f5:81:65:02:29:d7:57:5c:1e:1a:af:b8:e9:b7:12:94:3b:
9a:80:03:64:ae:f5:b5:96:02:29:49:58:2e:f4:d2:d6:04:85:
61:8e:4c:b4:d8:f5:8b:3f:63:ee:87:f6:cd:f4:1d:3b:0c:13:
e3:07:8c:bc:fd:45:58:da:d8:c5:9f:1c:5c:18:a9:72:44:61:
32:0b:96:a1:db:ca:31:42:7a:ac:04:a4:b2:fb:10:3a:d1:f3:
11:f2:4e:3c:99:91:88:07:77:35:7f:68:f5:ea:95:f2:6a:1d:
8e:8b:c7:d9:1c:a8:31:9c:0f:38:1e:5b:39:ba:cd:44:de:b0:
24:a9:2f:ab:84:2e:86:3f:66:8b:9d:a4:dd:e4:94:cc:17:85:
b2:18:7b:29:6e:e4:bb:29:4b:14:26:69:af:15:08:0e:c8:6e:
5a:3c:5d:ef:28:f4:f1:a6:ad:c5:4b:76:a0:3b:09:23:8d:de:
da:af:e8:98:bb:9a:61:10:21:17:e4:0e:a0:60:57:eb:e8:a2:
55:2d:99:b9:94:2e:5a:b9:03:37:42:dd:bc:2c:c0:a5:0f:bb:
f4:14:e9:f7:df:94:81:86:ab:c3:9c:b6:71:88:0a:71:cf:f7:
5c:51:b1:33:e7:fa:17:d8:29:7e:38:11:31:2a:40:ce:a9:55:
b1:34:a2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:00 2024 by rpki-client on console-ams.rpki-client.org