Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/aplL5fHMFbaqffVvp7lRgYqYr5o.roa
File: aplL5fHMFbaqffVvp7lRgYqYr5o.roa (raw, json)
Hash identifier: 6gNqFlDpsnOEPcI58Qr7jkRFKBcSrEYEgzmzfSLjoAw=
Subject key identifier: 6A:99:4B:E5:F1:CC:15:B6:AA:7D:F5:6F:A7:B9:51:81:8A:98:AF:9A
Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585
Certificate serial: 018573839EDB581918746ABAC352AB361773
Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/aplL5fHMFbaqffVvp7lRgYqYr5o.roa
Signing time: Mon 02 Jan 2023 17:24:43 +0000
ROA not before: Mon 02 Jan 2023 17:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206530
IP address blocks: 185.180.146.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:83:9e:db:58:19:18:74:6a:ba:c3:52:ab:36:17:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585
Validity
Not Before: Jan 2 17:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a994be5f1cc15b6aa7df56fa7b951818a98af9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:10:5a:59:48:89:9b:4a:55:d0:52:cb:96:48:
8a:5a:0e:b8:77:31:d8:62:64:df:38:9b:3d:1b:96:
cb:a0:06:17:8c:cf:da:6f:f0:9b:b3:69:6a:8a:a8:
b2:35:54:0d:11:29:ac:07:cb:43:41:25:74:5f:73:
d6:08:29:5c:3e:c8:00:3f:df:65:55:56:7d:d2:16:
e9:be:ae:0e:00:9e:7e:5a:95:32:94:91:cf:6c:ed:
f5:3c:06:01:1e:7b:8a:ba:e9:cd:5d:b8:b4:ec:bb:
b7:66:57:26:ed:8a:22:cd:63:6f:fe:d1:f7:3b:c2:
c2:f8:1c:aa:34:59:e6:e7:e2:2b:e4:9c:16:f2:85:
7e:77:d3:a0:42:8b:44:6c:a0:d4:51:1b:2b:fd:2a:
6b:12:01:7f:68:5f:a2:b6:c0:eb:91:3a:a8:49:33:
3a:08:a4:b2:5d:d7:05:b6:cf:b7:74:a1:5b:77:03:
e6:88:83:b7:b2:21:82:dd:0a:1e:bb:17:8c:85:21:
95:60:cf:27:c2:e0:55:39:97:af:c9:0e:63:96:b2:
fc:07:e2:4b:1d:cd:52:35:62:a0:0c:49:6e:b5:5b:
45:1b:13:3d:82:4e:e1:d4:43:53:29:a7:1d:c6:46:
ea:49:11:87:e1:de:2e:df:ec:56:01:f0:3d:64:48:
6e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:99:4B:E5:F1:CC:15:B6:AA:7D:F5:6F:A7:B9:51:81:8A:98:AF:9A
X509v3 Authority Key Identifier:
keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/aplL5fHMFbaqffVvp7lRgYqYr5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.146.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:51:9f:b8:2e:1f:04:bd:05:2b:41:70:58:6c:10:ac:ac:d5:
12:7e:73:04:bc:2f:fd:a3:be:3b:2c:0e:6c:a2:f9:3f:09:3e:
0f:ad:59:6d:21:89:53:6a:a8:1d:cc:06:29:3c:14:3c:9c:ae:
4e:9b:bb:3f:86:a2:9a:4a:31:aa:45:3d:ef:30:d4:24:a2:34:
f7:1b:b1:7b:29:f1:06:1e:d2:5a:ca:51:45:aa:e3:40:a7:46:
65:7d:49:1a:35:1c:01:b8:f2:b4:d5:5f:0d:2a:c6:be:f0:e3:
7d:0a:2b:36:49:44:59:20:c6:a1:7a:93:b6:4a:cc:7c:6f:00:
5f:ff:bf:e0:e1:37:39:4b:5b:7f:e7:2b:a6:63:07:2d:c1:c4:
eb:bd:05:0e:d6:80:2a:f9:63:2b:e1:ee:e0:cd:c7:18:b5:55:
c2:c8:db:26:7c:e9:f3:96:e6:65:fa:de:fe:33:b1:60:7f:77:
a5:fa:70:1e:d2:5d:15:bd:99:74:81:1a:b8:04:34:f3:75:4d:
bb:97:06:7a:5b:9a:7e:3a:54:c4:03:3f:2a:c6:09:20:0f:01:
20:01:0d:92:93:b7:a3:bb:96:18:f5:93:b1:98:a8:7b:04:b0:
69:ca:a9:40:b0:ef:eb:03:a8:e1:43:bd:f2:9c:99:55:7e:e0:
b4:d2:55:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:20 2023 by rpki-client on console-fra.rpki-client.org