Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/uAk0dUjLn7xCoLuhqm5dbXS79J0.roa
File: uAk0dUjLn7xCoLuhqm5dbXS79J0.roa (raw, json)
Hash identifier: r+6p6OVdTeKyMAQXOHri1XqPF6Q69FUw9075TqSTeHI=
Subject key identifier: B8:09:34:75:48:CB:9F:BC:42:A0:BB:A1:AA:6E:5D:6D:74:BB:F4:9D
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C541313040D1ADF5C0A069C84C3BBE4
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/uAk0dUjLn7xCoLuhqm5dbXS79J0.roa
Signing time: Sun 01 Jan 2023 07:55:27 +0000
ROA not before: Sun 01 Jan 2023 07:55:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209669
IP address blocks: 185.251.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:13:13:04:0d:1a:df:5c:0a:06:9c:84:c3:bb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b809347548cb9fbc42a0bba1aa6e5d6d74bbf49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:28:ac:a7:fb:c6:00:e6:3f:8f:10:b5:34:c6:
44:b9:bf:7d:fe:41:8c:b2:ce:48:d3:16:47:61:ef:
be:51:15:5f:fd:37:ad:07:70:c3:a0:82:27:cf:25:
74:b2:e3:32:c6:43:c4:4c:5d:14:30:3a:47:4d:d6:
c7:c6:db:67:46:20:8b:54:89:3c:1c:6c:a5:b8:61:
6e:c0:a9:7c:03:50:ed:1c:f4:d1:aa:b1:c9:e4:38:
fe:ad:e4:c4:91:98:95:53:4b:22:15:2e:d9:b0:f2:
04:7c:ce:ea:cd:6e:02:b3:b3:20:b2:15:f7:69:84:
42:ba:9b:a5:ba:e7:51:f5:6d:41:3f:bd:6f:dc:1b:
01:36:18:24:60:0c:88:1c:d0:03:ae:d4:3c:62:b7:
a5:c4:3a:17:ac:77:d7:23:84:75:b7:0b:e2:17:df:
fa:ff:15:48:ab:d9:8c:29:90:aa:6b:12:96:82:93:
e0:37:cc:e4:74:91:79:71:f5:61:14:e4:f5:1d:5a:
21:4b:59:45:3f:56:c1:2d:1a:b0:3d:de:01:09:f2:
74:5f:99:4a:94:23:f1:db:d8:00:db:30:7f:12:6a:
76:5e:85:8b:4b:65:c8:2b:42:26:47:80:0b:1e:a2:
f6:25:45:1f:db:20:1e:c8:d1:5a:17:cb:44:be:08:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:09:34:75:48:CB:9F:BC:42:A0:BB:A1:AA:6E:5D:6D:74:BB:F4:9D
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/uAk0dUjLn7xCoLuhqm5dbXS79J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.232.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a3:b3:b4:6e:2d:b8:61:21:d2:bf:e3:a4:da:77:9b:63:23:
62:23:98:78:2d:0a:2b:ec:9a:be:ef:6c:6a:63:46:56:52:a6:
dc:7b:5c:05:66:e8:75:20:e3:06:a1:fc:b2:aa:65:63:1c:95:
3a:5e:0c:30:d6:30:a5:74:58:34:84:d6:98:30:02:b2:d4:e5:
ba:5d:f2:c3:7d:11:fb:b5:bf:3d:c5:04:a4:8c:e8:b7:7a:c9:
c4:ff:c5:b0:30:f9:0f:63:8a:cd:e8:90:42:e4:9a:ca:21:e5:
73:70:b2:0b:f5:9e:c3:74:0c:f3:9d:bf:52:01:69:3b:da:82:
3d:3b:94:7f:a8:6e:b0:4e:5b:a8:41:8d:f1:7b:25:c5:19:83:
57:83:b4:ce:10:91:0a:f8:e3:5e:50:a1:f2:b1:82:87:2f:b3:
13:64:ef:9c:53:c7:d5:61:57:85:c9:74:95:99:cc:f9:a7:1a:
22:41:5b:bd:fe:97:71:05:49:0a:30:d8:43:c8:8d:28:c4:95:
0a:9a:f6:8b:32:07:b0:5d:0f:5f:fb:9d:0c:0c:9c:70:06:8f:
e3:23:ab:23:f2:3c:4c:c3:4a:06:39:cc:5c:bc:0e:63:b7:6f:
83:3a:d6:fe:3e:a3:4e:dc:55:aa:af:87:d4:62:6c:54:42:0c:
67:09:7f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:00 2024 by rpki-client on console-ams.rpki-client.org