Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/pByoDoQ0K60z-tjip0lbtnf7Xik.roa
File: pByoDoQ0K60z-tjip0lbtnf7Xik.roa (raw, json)
Hash identifier: XqEGM6ixjqSVdvb0RZ8fzW5205pyh+7fUSg/yPGZkQg=
Subject key identifier: A4:1C:A8:0E:84:34:2B:AD:33:FA:D8:E2:A7:49:5B:B6:77:FB:5E:29
Certificate issuer: /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial: 01856D53FDB8EF9F0D9B72DCD2BC94E399F6
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/pByoDoQ0K60z-tjip0lbtnf7Xik.roa
Signing time: Sun 01 Jan 2023 12:34:58 +0000
ROA not before: Sun 01 Jan 2023 12:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39888
IP address blocks: 185.75.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:fd:b8:ef:9f:0d:9b:72:dc:d2:bc:94:e3:99:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Validity
Not Before: Jan 1 12:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a41ca80e84342bad33fad8e2a7495bb677fb5e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:48:61:cd:ef:26:84:1d:3b:02:41:b9:50:92:
49:42:50:43:84:d6:a9:1b:93:ec:aa:84:26:90:14:
9f:c6:5b:d8:09:e5:c6:1d:d3:0a:dc:d6:6a:76:29:
b3:b5:38:30:af:01:0b:9c:e3:1c:40:59:8b:f0:a0:
59:b0:05:0c:fa:ec:e6:dc:e1:bc:ce:bb:5d:1b:e9:
10:c7:a3:ea:f0:d4:7d:6a:e2:33:3f:83:49:fa:f7:
94:d0:63:2d:29:14:03:da:f1:80:73:c3:43:7b:cb:
7e:91:db:70:11:ab:bb:15:cb:79:96:90:97:a9:4f:
3e:b3:ab:a7:9b:51:01:8e:18:ee:57:e7:b1:76:fe:
e2:6c:f1:14:14:39:e9:73:d3:8e:d3:ed:54:9e:7b:
45:a4:05:cc:71:8e:47:49:31:b5:ba:fe:ac:76:e2:
57:5a:30:cc:2c:31:f6:55:7f:7d:b0:d5:37:01:41:
c6:8b:88:7f:38:99:1e:89:80:51:17:d4:c8:e4:42:
a3:14:9f:bd:60:53:b7:48:6f:33:32:a6:1f:f8:ad:
6e:82:b5:d7:65:fd:de:1b:c8:4f:69:e9:65:5a:2b:
68:9a:c4:70:b7:8a:14:c2:46:b1:00:90:bf:24:8e:
a9:3d:ba:0d:47:60:73:35:c7:be:f6:39:66:aa:3c:
48:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1C:A8:0E:84:34:2B:AD:33:FA:D8:E2:A7:49:5B:B6:77:FB:5E:29
X509v3 Authority Key Identifier:
keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/pByoDoQ0K60z-tjip0lbtnf7Xik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.53.0/24
Signature Algorithm: sha256WithRSAEncryption
52:79:9a:ce:59:6b:7b:f5:de:e6:ac:73:e3:e9:72:ed:34:79:
eb:80:fb:dd:8c:12:18:83:03:83:15:89:6d:55:10:a5:70:7e:
5e:42:d1:a8:82:0a:f7:5f:ad:8c:24:e5:46:9c:b3:f5:08:5f:
8b:be:09:8f:a6:9f:68:c4:1a:2f:93:67:c4:b0:5c:a8:05:e8:
ef:ab:e0:83:bd:00:13:23:85:a8:a7:45:7d:b1:67:d9:21:0a:
8e:20:5e:a3:aa:81:ec:e3:de:e1:b9:33:a2:d3:db:b1:c2:a2:
14:c6:4f:fd:c4:f2:4a:0d:70:f7:03:8b:2d:fe:7b:f6:8c:51:
c0:51:48:b8:c2:e9:b1:46:04:15:a5:b4:4e:ba:bd:43:b9:85:
c1:a2:37:f4:0d:40:8b:33:73:26:b5:d3:91:a4:11:2d:4d:b2:
be:ce:79:f7:23:0d:e8:03:89:fc:51:1c:55:a8:46:57:90:2e:
73:4c:c4:e9:b9:6f:42:89:e4:d2:fc:19:76:15:57:0d:a7:de:
3c:ff:da:85:46:9a:57:43:57:8b:ab:9e:68:b7:49:31:9d:48:
07:d7:e1:eb:4c:e5:75:53:d8:cd:45:8a:ba:1b:22:37:1c:e7:
18:86:9e:16:36:c8:87:9e:8a:c2:88:12:86:1f:58:f5:26:1c:
d9:7f:2b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:45 2024 by rpki-client on console-fra.rpki-client.org