Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/5iAQe4mYH-IzqGiWdrxYmQ8KL8M.roa
File: 5iAQe4mYH-IzqGiWdrxYmQ8KL8M.roa (raw, json)
Hash identifier: oEpg7wr5im3BsjCptfPX5XZgXucu9jYlogbzNDLRVgc=
Subject key identifier: E6:20:10:7B:89:98:1F:E2:33:A8:68:96:76:BC:58:99:0F:0A:2F:C3
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 01856F2FFAF4A73605F7A5A3C026AC8F115C
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/5iAQe4mYH-IzqGiWdrxYmQ8KL8M.roa
Signing time: Sun 01 Jan 2023 21:14:53 +0000
ROA not before: Sun 01 Jan 2023 21:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.150.179.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:fa:f4:a7:36:05:f7:a5:a3:c0:26:ac:8f:11:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Jan 1 21:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e620107b89981fe233a8689676bc58990f0a2fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:59:ef:d9:3f:1c:9a:be:ab:55:b3:e4:0d:
ac:d1:ba:a7:4a:ab:e1:12:df:65:ca:38:7a:3d:84:
77:f0:9c:27:f3:f2:1f:e8:29:2a:ff:28:c3:03:94:
4f:ca:23:fc:72:f2:38:84:ae:c8:6d:f4:1e:22:00:
69:ba:6f:5f:35:16:c3:63:2a:7f:d4:e1:f2:f9:e7:
3d:2a:8b:62:ae:85:3b:c6:63:40:fc:b5:7e:1f:d3:
15:6f:89:85:8f:b5:a5:99:2f:18:53:50:d2:ef:9b:
f3:11:e9:f5:60:52:54:3d:92:d6:7f:e5:95:a9:ee:
40:a9:e3:2f:96:b1:35:95:45:65:40:06:25:0d:91:
34:36:af:22:f5:4d:6c:b6:7d:41:66:3d:78:8a:f3:
c8:4c:d2:ff:a6:c6:24:ea:9f:71:9d:62:ad:72:5f:
2b:d9:45:c0:8e:be:86:72:a2:85:a3:fd:21:12:38:
46:18:8b:34:69:81:0a:12:a7:cd:99:25:e5:c9:ca:
e4:a1:a3:ee:df:d3:d6:f8:25:c2:4a:b8:80:2d:e9:
d9:21:3c:e2:4a:8e:a6:b9:1a:4a:b7:c3:27:58:17:
54:c9:d2:15:c7:68:77:2f:34:dc:7e:08:3a:01:b2:
4f:a9:52:6b:11:5c:7b:7c:01:87:03:19:1b:7a:48:
1f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:20:10:7B:89:98:1F:E2:33:A8:68:96:76:BC:58:99:0F:0A:2F:C3
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/5iAQe4mYH-IzqGiWdrxYmQ8KL8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.179.0/24
Signature Algorithm: sha256WithRSAEncryption
66:48:85:a3:84:a8:f9:45:51:11:81:77:e0:ac:22:b6:59:e8:
8a:df:3c:f8:ae:6a:2b:f3:43:d2:3a:ef:6e:32:b9:b2:f6:4a:
7a:f5:02:45:33:0f:93:d9:33:18:f8:8a:9d:82:6c:bd:8e:0f:
7b:2e:28:6f:c1:24:45:e3:ab:a1:bf:b8:fd:df:ac:9f:5a:44:
73:15:1b:ad:23:b5:be:e2:50:39:5e:a3:e0:90:ef:8f:a3:03:
3d:53:02:c7:c7:af:c6:b6:eb:e4:2c:30:89:43:51:de:5c:e9:
2a:57:55:87:65:71:b4:e1:46:83:34:42:fd:ce:26:8d:67:2c:
ee:6f:38:10:ae:a1:02:87:bd:ae:3b:3f:2b:88:ae:b2:90:74:
c4:84:f9:31:e0:78:e5:03:07:4e:2d:d7:25:bd:9a:78:5a:34:
08:80:23:16:da:df:ce:44:c6:27:83:db:14:95:28:62:34:5a:
b2:9a:3b:f2:a5:d1:eb:50:1c:34:a1:bd:08:c0:6e:21:d3:91:
bc:7e:2a:a3:82:9d:ef:2a:84:0e:22:63:ea:85:65:e5:e9:93:
7f:4e:4c:b3:0b:97:45:bd:ee:8b:e2:9f:54:57:c3:d4:41:18:
da:b7:a2:84:8c:3a:68:58:bf:98:08:fc:e0:e5:10:5c:25:66:
6e:b0:f0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:41 2024 by rpki-client on console-ams.rpki-client.org