Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/uF3_T5aC44iTevNRHkxN0EOwis0.roa
File: uF3_T5aC44iTevNRHkxN0EOwis0.roa (raw, json)
Hash identifier: uxa8o6OxKNGyRHpZT9Lo4BCPNO8zPwjJZf6nph3u4HQ=
Subject key identifier: B8:5D:FF:4F:96:82:E3:88:93:7A:F3:51:1E:4C:4D:D0:43:B0:8A:CD
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C54149930E9C438A780AE5E572496DD
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/uF3_T5aC44iTevNRHkxN0EOwis0.roa
Signing time: Sun 01 Jan 2023 07:55:27 +0000
ROA not before: Sun 01 Jan 2023 07:55:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211041
IP address blocks: 185.172.167.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:14:99:30:e9:c4:38:a7:80:ae:5e:57:24:96:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b85dff4f9682e388937af3511e4c4dd043b08acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:50:ab:34:0b:7b:12:a0:d3:4c:0c:24:57:13:
11:6c:4d:87:f1:f2:c3:0d:1d:3c:e0:e1:a8:33:d7:
8b:c6:56:8e:21:e7:d1:15:54:19:74:7b:f5:31:d1:
1c:44:b6:b1:41:19:e1:e1:15:f4:dc:fa:95:9a:b1:
0d:b3:30:bb:ac:ca:32:46:bc:d6:3e:ec:d4:3c:82:
d3:2b:62:97:2a:66:f3:26:ae:e3:51:6c:56:89:a8:
05:b4:a5:38:5c:da:fc:e8:19:b2:8d:83:3e:36:c2:
07:57:a4:9d:6f:47:4a:5e:b5:15:cd:43:56:65:71:
a4:69:42:f9:68:32:89:d0:b1:64:15:51:80:03:24:
0b:c5:df:49:3e:98:59:05:09:eb:76:82:be:8f:18:
f7:fc:ce:80:88:d9:b1:6f:4d:b6:fa:d8:2e:aa:bc:
43:73:aa:94:59:5e:2c:4c:ea:4a:3e:28:cb:0c:07:
93:64:88:9f:46:9b:58:50:04:a6:66:5d:e8:18:7c:
c0:64:a9:6d:3f:82:c0:a6:2c:6f:35:68:71:00:3b:
c4:60:1d:39:7a:fc:be:31:95:30:9a:ae:7e:b5:b2:
00:6d:e8:7f:4b:0e:12:60:75:58:61:0e:cf:c0:0d:
a8:31:fd:8c:6d:3e:8b:df:00:db:94:56:e1:d4:3b:
2c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5D:FF:4F:96:82:E3:88:93:7A:F3:51:1E:4C:4D:D0:43:B0:8A:CD
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/uF3_T5aC44iTevNRHkxN0EOwis0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.167.0/24
Signature Algorithm: sha256WithRSAEncryption
13:28:ee:1c:ae:a3:5c:a0:a4:e4:5d:0c:bd:6b:79:2e:a6:3d:
2f:22:b7:3d:76:d5:51:93:63:8e:44:6a:6d:de:14:69:20:b0:
b6:76:2e:00:c0:61:c9:be:6c:d3:d6:23:50:7f:2d:0a:5b:9b:
6d:3f:eb:e7:07:9a:e5:01:f9:eb:a9:b4:16:30:8b:9b:47:d5:
73:a9:37:b4:fb:74:76:35:76:d3:ab:cb:51:73:58:0c:c4:91:
c1:f6:40:90:e0:3d:24:a8:b2:b7:2b:e6:69:b3:30:0f:06:62:
72:1c:7a:ca:18:2c:b9:7e:a4:8f:0d:7f:2c:4b:4e:15:f5:2b:
4f:ca:55:da:c1:b4:48:3d:7b:a7:37:b5:39:b6:51:4c:c0:93:
85:8e:f7:39:40:d1:c1:bb:0e:45:ad:5c:cc:d9:f6:d8:be:ad:
16:34:62:d5:58:3e:8b:b0:0b:11:dd:fc:70:4e:09:df:f9:ed:
20:ff:33:f1:d6:2a:a8:9a:86:cf:52:75:dc:f6:3c:f0:6f:a6:
8b:6a:b4:10:3f:73:f6:66:6d:41:e9:d0:0e:38:6e:ca:cb:a5:
f4:16:62:a6:98:c7:52:2f:86:f3:c7:69:77:ff:15:cf:f6:b8:
d5:d6:2a:a6:fb:fe:1c:6f:e5:9e:08:a5:5b:1d:84:ab:9a:22:
b4:f2:04:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:55 2024 by rpki-client on console-fra.rpki-client.org