Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/rirsvI4EBfS723xT1OcUxJ3OxY0.roa
File: rirsvI4EBfS723xT1OcUxJ3OxY0.roa (raw, json)
Hash identifier: EpBLavYFsRjiMMo3QTJe3EiPm5bXQ5jxc14Mm2SfB5w=
Subject key identifier: AE:2A:EC:BC:8E:04:05:F4:BB:DB:7C:53:D4:E7:14:C4:9D:CE:C5:8D
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C54165252BC9043FA549C3295F556D2
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/rirsvI4EBfS723xT1OcUxJ3OxY0.roa
Signing time: Sun 01 Jan 2023 07:55:28 +0000
ROA not before: Sun 01 Jan 2023 07:55:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212351
IP address blocks: 185.120.34.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:16:52:52:bc:90:43:fa:54:9c:32:95:f5:56:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae2aecbc8e0405f4bbdb7c53d4e714c49dcec58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:54:6b:bf:24:a4:57:f8:f6:ff:f7:34:b3:10:
ee:81:b3:08:ea:0b:18:9f:b8:4b:a2:f8:e5:f3:2a:
a2:b9:da:b8:ce:c8:ff:98:c7:17:05:66:38:db:e7:
4f:57:e1:80:62:38:9e:6b:21:ff:12:a8:82:6d:f7:
89:fb:20:fc:a6:33:8a:c5:bc:5d:68:bc:32:c2:7b:
f6:b7:3b:cd:35:28:fe:74:62:60:bb:f1:5b:fb:d4:
79:5f:21:01:19:7a:e7:81:34:e5:9e:2b:b5:62:e0:
5d:b6:dd:0e:b4:81:c4:c9:3a:62:f0:9e:7f:22:49:
be:db:9a:45:d8:6e:aa:3f:32:b0:0c:c9:fe:0c:a6:
61:06:83:c1:21:9a:27:98:d8:79:0e:a3:cf:a3:73:
47:db:f3:e8:ce:10:ea:b4:53:ae:61:2f:94:0e:52:
77:8c:2c:77:cb:90:b2:b6:2d:a0:70:bb:3f:5d:2f:
16:aa:14:e3:dd:17:c3:a8:5d:f2:af:b9:d7:b3:f4:
3e:f5:44:4f:4d:74:f2:c9:01:32:be:a3:04:a0:5d:
33:9f:14:46:a3:e6:1f:88:65:8d:59:39:8d:0d:b7:
38:89:4a:4e:94:16:ee:0f:d4:52:e2:9f:ef:5b:4b:
d2:1a:fd:72:59:f9:95:00:b7:a7:66:3a:34:73:e0:
b0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2A:EC:BC:8E:04:05:F4:BB:DB:7C:53:D4:E7:14:C4:9D:CE:C5:8D
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/rirsvI4EBfS723xT1OcUxJ3OxY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.34.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:82:af:7a:a1:af:44:56:dd:c2:72:0e:ec:37:6a:d1:d9:2c:
f1:28:ed:7a:e5:d1:0b:5b:ae:6f:10:a4:ed:7d:6c:1d:3d:9c:
da:28:fb:37:ca:04:61:93:a3:c5:ad:0a:a5:11:cd:71:a1:ca:
a9:5f:cb:0f:ad:35:2a:85:f6:e5:94:ad:f8:c1:d1:48:4c:e1:
f7:c5:35:0c:99:50:87:77:b9:ec:b6:7b:bb:e8:43:64:20:e9:
24:2b:d7:b0:76:38:01:0f:7c:b0:20:bf:06:42:ca:f0:8b:d1:
ef:c9:f4:80:a5:7a:5b:65:b6:99:7e:41:c0:0f:80:50:32:bf:
42:c4:fa:0a:b1:29:08:1e:ff:31:a0:ca:2e:5c:9f:a2:8c:71:
01:75:11:9b:74:bc:f6:4d:9d:89:81:55:3b:38:cb:5c:92:c6:
50:85:53:b6:61:bb:dd:3c:c2:a9:7d:1e:8a:84:57:bd:78:2e:
ec:09:35:5e:60:b6:33:49:03:fd:39:8a:38:3e:c0:59:a4:78:
6a:f8:1e:47:ac:48:ec:96:35:cb:b1:39:b8:92:c5:55:82:be:
3c:2e:db:ad:0c:18:66:01:0b:fd:85:96:d3:64:56:11:9f:31:
35:7d:e2:63:2b:99:ce:95:3e:12:0a:09:fd:b9:ba:ea:7f:23:
41:cd:ac:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:55 2024 by rpki-client on console-fra.rpki-client.org