Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/sSStoH_8rvv5Cb-mRZmGbgXUXv8.roa
File: sSStoH_8rvv5Cb-mRZmGbgXUXv8.roa (raw, json)
Hash identifier: OVwApF3hQmE91sjtAZNYFSkvy1D7tMkJSiurA9XZlxY=
Subject key identifier: B1:24:AD:A0:7F:FC:AE:FB:F9:09:BF:A6:45:99:86:6E:05:D4:5E:FF
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 018572DF1FC8B2EBA9E18270412E127E27F6
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/sSStoH_8rvv5Cb-mRZmGbgXUXv8.roa
Signing time: Mon 02 Jan 2023 14:25:03 +0000
ROA not before: Mon 02 Jan 2023 14:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43944
IP address blocks: 185.96.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:df:1f:c8:b2:eb:a9:e1:82:70:41:2e:12:7e:27:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jan 2 14:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b124ada07ffcaefbf909bfa64599866e05d45eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8e:67:27:d8:60:39:a0:23:54:38:18:b4:e2:
61:74:fb:b3:a4:a3:36:ba:2d:9e:b3:49:aa:71:f7:
8d:d9:2d:f6:ab:0e:51:7c:51:47:aa:d2:dc:f7:48:
a5:fc:ad:f1:0e:8a:1e:af:1c:45:93:00:97:da:e0:
95:23:57:64:46:67:b8:a5:6e:57:6f:aa:98:8e:4c:
56:52:1a:c0:99:0f:fe:d1:1d:9a:77:6b:4f:f7:f0:
4d:93:18:b2:5f:1e:35:b7:6e:e3:da:ae:d3:30:cc:
f0:6f:c7:a0:92:5b:3a:1e:80:bf:3b:47:31:c8:d5:
19:c7:3b:03:2d:49:18:9f:84:4d:0f:aa:26:ca:3f:
77:90:77:0c:07:e2:74:bc:08:4a:48:ca:06:ed:2b:
01:65:90:8e:3f:91:24:97:57:d2:eb:79:4f:f3:9c:
fe:db:99:d6:71:d8:d7:44:79:ca:4c:c2:cf:4b:87:
64:c9:72:ff:40:3a:0c:27:81:56:e5:e9:03:25:45:
8d:3c:84:e4:3f:1a:ef:4b:7d:19:f3:40:77:65:cd:
14:50:c2:7f:87:0d:3d:64:ed:0a:7b:d6:6b:02:36:
53:73:53:9e:e1:91:73:cf:aa:bb:d0:22:15:10:d9:
be:3a:df:05:42:e2:43:f5:5e:72:66:66:b9:ee:99:
56:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:24:AD:A0:7F:FC:AE:FB:F9:09:BF:A6:45:99:86:6E:05:D4:5E:FF
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/sSStoH_8rvv5Cb-mRZmGbgXUXv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d0:ee:91:39:f4:22:b1:59:91:20:b5:b4:2b:e3:7a:5f:6f:
d7:08:87:16:a4:96:09:f9:ca:63:94:ba:9c:e0:aa:22:1d:63:
22:29:28:d4:ac:e6:de:46:4b:60:37:19:06:1f:e4:0d:de:5b:
dc:a3:e2:13:40:c7:0c:4e:dc:6d:a6:cb:68:7e:36:8e:5b:49:
31:65:ae:86:ce:63:d3:31:62:52:8b:76:25:2f:d1:1e:74:73:
44:61:e3:1c:6a:65:cc:2d:8f:6e:ed:85:a7:83:bd:44:9c:a8:
07:84:b5:7d:2f:87:42:bb:40:c2:e1:25:48:29:9b:96:79:d4:
b0:1e:2e:53:4d:75:78:26:5c:a4:1c:e1:c8:e2:08:67:34:9e:
1e:16:5d:39:76:eb:bc:0d:6d:1a:dc:31:7b:fb:b2:42:f6:e3:
27:2c:25:ee:9f:9a:fc:6a:40:f7:79:f1:a0:b1:ad:c9:92:5a:
bd:cc:cb:e5:52:74:57:9a:e0:cd:73:08:59:fe:c2:ef:de:46:
d2:fd:9f:a0:52:be:9f:41:49:71:a7:e1:e6:4c:0e:ce:b9:6a:
f3:31:6d:4a:1c:37:04:b8:34:76:95:0b:d6:1d:2a:2a:1c:92:
0f:bd:f3:4a:f3:b8:bb:31:f8:c9:1b:95:65:15:ad:8f:ed:4f:
dd:9b:90:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:59 2024 by rpki-client on console-fra.rpki-client.org