Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/EmtVuMLUL1onFpLvfmalZcAwdqI.roa
File: EmtVuMLUL1onFpLvfmalZcAwdqI.roa (raw, json)
Hash identifier: 4yc/8roZrVvC9p5VSNYnBt2a+FPw4IDjkZw2hOaAVVo=
Subject key identifier: 12:6B:55:B8:C2:D4:2F:5A:27:16:92:EF:7E:66:A5:65:C0:30:76:A2
Certificate issuer: /CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Certificate serial: 01856D2F5891A1066C218C52C26BF1C2F22B
Authority key identifier: 24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/EmtVuMLUL1onFpLvfmalZcAwdqI.roa
Signing time: Sun 01 Jan 2023 11:54:57 +0000
ROA not before: Sun 01 Jan 2023 11:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15395
IP address blocks: 185.75.60.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:58:91:a1:06:6c:21:8c:52:c2:6b:f1:c2:f2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Validity
Not Before: Jan 1 11:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=126b55b8c2d42f5a271692ef7e66a565c03076a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5c:a5:9f:fe:41:df:37:53:21:36:77:6d:f7:
b0:f3:36:b4:1b:10:c8:41:b0:b6:78:43:b2:4b:f4:
dd:cc:88:8c:96:1a:9b:3f:71:8f:99:d1:12:7a:0c:
56:7d:46:a0:66:23:de:96:15:c6:61:44:8c:89:1d:
e2:88:fe:f8:34:1c:b3:b0:b6:02:e3:b4:04:e7:00:
ea:4e:a6:b4:0e:7f:96:90:1f:7e:61:51:e4:09:af:
b7:23:bb:59:0c:09:db:d4:9d:b0:67:82:80:d7:92:
3e:ba:7a:9b:67:45:b4:bd:4a:58:54:c2:01:e2:6c:
ee:66:cf:25:86:2e:8b:0a:9c:73:0f:95:e3:76:27:
94:bd:0c:d9:9d:8f:99:67:41:35:9d:e0:90:98:aa:
ac:54:ea:97:43:c7:e9:a3:c9:0d:a2:9d:a5:c7:88:
48:84:f1:76:ef:7f:4b:b5:e3:67:cb:0d:af:a6:b2:
3d:83:13:5d:52:21:3f:a0:6f:00:5f:75:00:97:31:
c2:dc:88:e4:91:2b:5b:28:8c:11:e2:04:d5:88:07:
d5:86:4a:df:a4:9d:02:46:03:4c:3b:4a:01:e2:14:
f9:85:94:d2:64:e2:30:c7:76:21:0a:a9:a4:a4:4c:
cf:43:93:8e:69:af:12:26:20:7d:b9:53:9a:1c:cf:
cf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6B:55:B8:C2:D4:2F:5A:27:16:92:EF:7E:66:A5:65:C0:30:76:A2
X509v3 Authority Key Identifier:
keyid:24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/EmtVuMLUL1onFpLvfmalZcAwdqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.60.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:df:80:de:47:a6:eb:ce:5a:6c:81:8d:81:9f:50:a7:61:f9:
bf:05:17:88:a9:45:c9:de:c4:d9:17:1b:07:7c:cd:e3:e5:ad:
30:9c:15:da:87:73:8f:88:42:dd:8a:5c:83:d4:1b:b4:ed:10:
33:5d:d9:2c:90:27:bd:5f:ef:4c:e0:95:c8:a8:b9:d1:b5:a5:
62:74:9e:8a:b7:e0:6b:88:52:ca:25:e6:8e:62:87:28:b8:4d:
57:bb:cc:1e:64:ca:6b:b4:d4:01:88:79:3a:df:ef:eb:e5:d0:
de:b6:2e:d8:b1:f1:3f:18:aa:c3:b5:67:f9:28:fc:4f:5f:21:
1b:d9:e2:d9:73:ac:4c:6d:96:ae:5a:5d:9d:cd:aa:fa:b3:18:
03:3d:b4:da:81:83:43:e3:70:27:3c:19:70:fd:73:22:45:36:
fa:f0:07:0d:1b:37:ed:b6:42:63:38:86:6e:c8:73:38:61:97:
ec:e4:8d:c8:54:8c:2c:22:de:3f:27:44:37:68:68:7f:27:8b:
95:f2:25:9e:12:90:2e:88:64:ce:af:cc:1f:69:28:3b:ad:13:
c2:c3:2b:7a:67:0f:ab:e0:ad:31:4b:8e:7f:49:eb:11:61:63:
ab:5e:2c:89:64:7d:d0:d1:4b:21:7d:1a:cb:72:08:56:51:ab:
a0:69:42:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:19 2024 by rpki-client on console-fra.rpki-client.org