Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1c7481-e6a0-4a1c-87e6-4027423aa38c/1/syqDGK1LkP1MnnqeK7oh-48WUJY.roa
File: syqDGK1LkP1MnnqeK7oh-48WUJY.roa (raw, json)
Hash identifier: TnENfeUYU5u7QqwsP4d4VuT1HLu4RM7WOh/ub3Ft4Yo=
Subject key identifier: B3:2A:83:18:AD:4B:90:FD:4C:9E:7A:9E:2B:BA:21:FB:8F:16:50:96
Certificate issuer: /CN=913f4c9c6388f0a0342762009e324ec13271337e
Certificate serial: 01857014FB694C8CB3FA9FFE3ABA6203ED4F
Authority key identifier: 91:3F:4C:9C:63:88:F0:A0:34:27:62:00:9E:32:4E:C1:32:71:33:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kT9MnGOI8KA0J2IAnjJOwTJxM34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1c7481-e6a0-4a1c-87e6-4027423aa38c/1/syqDGK1LkP1MnnqeK7oh-48WUJY.roa
Signing time: Mon 02 Jan 2023 01:25:01 +0000
ROA not before: Mon 02 Jan 2023 01:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.151.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:14:fb:69:4c:8c:b3:fa:9f:fe:3a:ba:62:03:ed:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913f4c9c6388f0a0342762009e324ec13271337e
Validity
Not Before: Jan 2 01:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b32a8318ad4b90fd4c9e7a9e2bba21fb8f165096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:92:eb:63:58:44:10:7d:08:7a:4e:c3:1a:
02:d4:2d:e6:48:03:57:8c:e5:f5:74:53:e5:e4:05:
09:9e:b0:f8:36:f2:68:6c:1c:84:11:eb:49:0a:b5:
df:8b:e5:da:d5:95:2d:16:38:97:9c:db:09:72:f2:
3d:d9:6b:77:f7:20:34:13:a7:04:ea:c9:63:6a:3d:
9b:f3:f1:b4:3a:bb:11:58:ac:10:e2:55:fe:de:76:
5c:70:58:4a:bc:4b:85:74:93:a7:0d:c6:38:42:50:
76:34:37:18:b3:e5:bc:dd:15:69:c8:a0:fe:01:8e:
95:10:97:8e:fe:7b:a1:04:f5:0f:d1:b4:56:86:88:
34:bb:dd:0d:aa:f3:ce:36:25:0e:16:76:84:e4:28:
77:dd:dd:6d:a5:8f:80:fb:a1:22:63:19:c3:40:7a:
1e:54:11:16:b6:11:30:2e:6f:7c:1c:6d:68:bb:0a:
e1:bb:8f:e6:71:82:36:c0:88:d2:5a:17:ac:5b:6d:
c8:78:2c:2d:6d:1d:48:c4:82:26:90:1b:cd:7a:7a:
68:c2:5f:22:6d:af:71:de:4d:6a:25:6f:9b:5c:ff:
7a:e4:1a:41:e1:23:bb:b0:8d:72:f9:31:3b:c6:0a:
cd:1b:58:64:cf:84:5d:bd:92:0d:a1:af:b7:c3:ea:
24:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2A:83:18:AD:4B:90:FD:4C:9E:7A:9E:2B:BA:21:FB:8F:16:50:96
X509v3 Authority Key Identifier:
keyid:91:3F:4C:9C:63:88:F0:A0:34:27:62:00:9E:32:4E:C1:32:71:33:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kT9MnGOI8KA0J2IAnjJOwTJxM34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1c7481-e6a0-4a1c-87e6-4027423aa38c/1/syqDGK1LkP1MnnqeK7oh-48WUJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1c7481-e6a0-4a1c-87e6-4027423aa38c/1/kT9MnGOI8KA0J2IAnjJOwTJxM34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.144.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ab:16:ad:07:48:2c:11:fd:8c:2c:3f:b2:2e:32:44:24:8a:
0f:83:be:a0:ca:f4:14:78:55:1c:0a:8c:3a:59:65:66:22:aa:
b5:3e:e3:b7:92:36:19:85:e8:40:06:da:0d:d7:b6:d2:26:dd:
dd:0b:62:7a:78:54:e8:eb:82:3e:e7:b4:5d:92:31:40:ec:a4:
51:02:8d:f7:e0:cd:c3:8b:33:45:de:1c:88:69:50:d2:69:13:
50:b1:55:7d:ad:ad:84:91:ff:aa:da:26:9e:7f:29:a8:4b:08:
5b:c6:d8:7b:a4:3e:8e:b7:6d:1b:a1:ce:20:a4:99:45:5e:51:
ea:87:27:e7:bb:f4:04:d6:88:62:fe:2f:20:36:4c:ec:9f:e4:
73:d5:11:ca:48:6c:4d:e5:c9:3a:fc:90:bf:18:f3:d4:f7:21:
3a:7c:95:82:8e:9e:a3:e0:8b:22:73:85:23:f3:09:c7:26:ce:
ce:f3:07:de:cf:62:57:46:eb:a8:9d:9b:e1:8d:4b:1a:9f:0d:
e9:5e:05:28:31:37:a4:41:c3:89:14:d3:dd:94:2e:ec:ed:78:
b1:81:ce:5b:54:89:b3:a5:0d:23:c3:3c:30:8e:3b:9c:cf:02:
6b:bb:3e:8c:4e:0a:27:a1:8d:e1:76:ab:29:7e:c7:bc:91:51:
69:c2:3e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:43 2023 by rpki-client on console-ams.rpki-client.org