Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/H5LWkH_Ef2AF2URdAaWQ4wSIYnE.roa
File: H5LWkH_Ef2AF2URdAaWQ4wSIYnE.roa (raw, json)
Hash identifier: tRHdU4a7PkynIfXvytRhxryefshFMuFGBLVgUA6sq9s=
Subject key identifier: 1F:92:D6:90:7F:C4:7F:60:05:D9:44:5D:01:A5:90:E3:04:88:62:71
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 0189C0210C958F1C56BAA069E8084F62DD1F
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/H5LWkH_Ef2AF2URdAaWQ4wSIYnE.roa
Signing time: Fri 04 Aug 2023 10:38:58 +0000
ROA not before: Fri 04 Aug 2023 10:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.228.1.0/24 maxlen: 24
185.228.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c0:21:0c:95:8f:1c:56:ba:a0:69:e8:08:4f:62:dd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Aug 4 10:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f92d6907fc47f6005d9445d01a590e304886271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cc:91:5b:85:87:12:fa:d2:3b:bf:d0:c3:17:
f0:08:35:0d:31:90:8b:e1:a7:40:cd:5c:5f:72:8d:
29:9d:36:d9:87:a5:cb:f3:4d:ec:70:77:42:98:4a:
e5:b3:69:75:bc:42:43:0b:1c:be:c7:98:d2:88:98:
cb:75:7b:5d:7d:98:3a:b5:9c:18:33:d1:ef:1b:8b:
e8:da:45:f4:cd:b3:3e:d8:03:be:5d:58:c0:88:2a:
d4:6e:b0:b3:0e:c1:79:d2:dd:b7:f6:59:80:05:b5:
91:c5:ee:58:27:61:5c:eb:cd:7d:de:0c:97:d6:aa:
2d:e1:62:23:1d:9c:c5:98:a6:4b:19:f7:90:c9:3c:
24:5f:ce:bf:12:b4:5a:d3:a9:a9:2c:0a:e7:67:cd:
80:8b:8d:4f:0b:91:80:9b:f5:01:f3:44:63:b3:5d:
de:84:8c:a3:71:cb:3c:ea:eb:29:0b:dc:d6:bf:07:
42:6e:1e:e4:53:21:d9:f7:4b:21:45:d7:f6:9e:64:
1d:e7:b1:a3:1b:66:a3:41:bd:17:0a:0b:3c:50:e2:
66:01:27:cf:48:8d:a1:f9:f0:cd:d1:00:c3:54:fd:
dd:65:5a:e1:6d:44:d5:20:99:6b:a7:23:9a:0a:be:
c5:1a:ab:bd:9e:1b:9e:df:71:33:47:4b:fe:c0:f4:
dd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:92:D6:90:7F:C4:7F:60:05:D9:44:5D:01:A5:90:E3:04:88:62:71
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/H5LWkH_Ef2AF2URdAaWQ4wSIYnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.1.0/24
185.228.3.0/24
Signature Algorithm: sha256WithRSAEncryption
64:37:00:ce:30:db:67:e8:81:d3:13:c8:fe:62:55:b5:ec:f2:
16:51:34:95:74:fb:e4:42:45:45:d9:23:a8:dd:de:57:e5:d7:
41:4c:8c:d5:e1:82:14:d3:02:34:5b:b3:7f:bc:5b:d7:d6:3d:
26:e2:1f:2e:22:95:62:9d:df:3a:66:b7:c9:53:dc:1f:61:81:
fc:26:5a:95:90:1e:23:85:aa:24:88:dd:9b:58:7d:f7:f6:f1:
a1:4f:50:d9:e2:ec:23:f7:4b:bc:67:e1:36:aa:58:fd:06:f2:
4c:af:7b:a0:ab:f3:4c:de:2c:93:28:5d:db:00:79:e1:53:a0:
ea:c6:13:5d:1d:b2:55:90:ef:0c:03:e5:ef:a6:f3:7f:68:4b:
ae:17:74:75:a2:11:73:38:52:cf:d3:ac:d2:14:c2:09:5e:66:
9f:78:6a:77:6b:77:dc:e1:6f:8a:d6:22:b0:63:89:a7:68:c0:
55:7f:a6:9e:47:17:7a:5e:08:69:ac:c7:a0:65:3d:85:6e:bc:
ff:47:bf:4d:ab:96:d6:16:ea:b7:17:ad:88:49:75:0b:6e:14:
9c:a6:30:8c:33:89:90:ef:af:9c:6d:fd:b1:14:70:0d:d1:fa:
7b:2d:a3:b3:94:9f:fe:cb:43:2d:07:6a:18:ca:e0:9a:6d:b6:
df:1e:65:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 11 11:31:42 2023 by rpki-client on console-ams.rpki-client.org