Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/gI_ae0TiEhOUmv4U3iPwD2sRnwI.roa
File: gI_ae0TiEhOUmv4U3iPwD2sRnwI.roa (raw, json)
Hash identifier: Ojp8D5rK8dWAQhzZxNpJXbs4sJeJLW+P+k949FXEAPw=
Subject key identifier: 80:8F:DA:7B:44:E2:12:13:94:9A:FE:14:DE:23:F0:0F:6B:11:9F:02
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 01856FD5306F74F931C6B83FA8BAF6DCC82D
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/gI_ae0TiEhOUmv4U3iPwD2sRnwI.roa
Signing time: Mon 02 Jan 2023 00:15:20 +0000
ROA not before: Mon 02 Jan 2023 00:15:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 185.228.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:30:6f:74:f9:31:c6:b8:3f:a8:ba:f6:dc:c8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Jan 2 00:15:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=808fda7b44e21213949afe14de23f00f6b119f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a9:96:b5:a8:56:ef:69:e9:69:7e:43:88:c5:
1b:ae:66:2c:71:6d:03:25:70:4b:48:e7:2d:cd:66:
4d:97:59:fa:d0:6f:f8:71:c1:b8:f3:d9:ec:55:db:
c2:e0:36:d1:79:c1:f8:f2:3d:27:40:d6:09:d4:d0:
87:dc:c9:bb:79:28:69:57:39:89:0d:4a:61:bc:a8:
b3:58:cb:60:ae:e8:22:d5:16:04:a0:65:22:4c:bf:
9f:15:1b:0d:12:15:1f:2b:d3:7d:0a:0d:4c:48:db:
45:58:1d:7d:a4:6d:89:a8:a8:f5:cb:d2:e1:63:ee:
eb:17:4a:6c:86:5d:15:f5:3a:fb:7f:5c:13:43:94:
31:62:6d:d2:f6:a5:4e:3e:fb:73:2a:a4:b5:66:e7:
91:ec:70:76:60:d3:41:53:ae:af:26:5f:6f:bb:ba:
15:7d:61:df:34:f8:5c:51:31:f9:14:d3:a2:fa:47:
e9:35:64:d1:4a:f7:06:75:24:00:6f:6f:26:36:76:
05:9f:9e:23:af:de:98:ff:21:81:76:2c:71:ec:92:
8e:1e:09:6a:b6:7d:8b:77:91:10:cb:c4:e7:8c:03:
e8:50:60:86:8d:ba:dc:95:ad:80:1a:d5:e8:08:92:
14:f4:e9:bd:c7:1c:9c:36:cf:b6:54:2d:0e:d6:da:
28:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8F:DA:7B:44:E2:12:13:94:9A:FE:14:DE:23:F0:0F:6B:11:9F:02
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/gI_ae0TiEhOUmv4U3iPwD2sRnwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.3.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:b5:1d:58:17:1b:5e:8f:fe:2d:bb:ad:5d:f8:74:cd:b4:4c:
99:8f:12:e6:45:a8:0a:1a:06:69:46:f3:52:48:34:bc:ce:79:
5e:94:83:95:e6:d3:39:93:4c:7b:a3:b8:05:e9:11:6d:32:01:
48:12:6e:17:ce:49:44:45:00:eb:92:a5:2e:ff:ee:e9:2d:cb:
63:3d:cc:29:18:f1:42:0d:8f:3c:e0:88:3e:46:e4:36:8c:c7:
66:fb:ff:1d:9c:26:8f:32:29:31:7a:52:d4:da:7c:fa:e6:2b:
76:a0:0b:69:e6:34:20:84:d9:1d:d3:6d:4d:18:a1:fc:2e:60:
6b:d6:15:02:01:7b:b4:2e:4d:11:c8:7b:12:3c:87:ad:af:11:
67:af:fa:94:f3:b4:fb:06:23:5e:8a:df:16:e6:4d:ef:ff:fd:
1b:cb:bc:ab:a6:c4:5c:08:d5:89:b5:22:2f:ed:0e:a1:6f:66:
ee:74:5e:1a:90:f0:e2:70:7c:0f:43:e1:ab:42:2c:88:67:d8:
28:4b:d7:9c:73:a3:a8:c0:d5:03:e3:da:e0:8d:00:65:1d:59:
b1:ea:a1:0e:48:ba:72:40:9b:64:63:00:a9:92:2f:7d:3f:10:
43:67:b5:31:ec:f6:2d:ec:1d:22:77:74:d7:74:67:f2:50:82:
90:71:44:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 4 11:08:39 2023 by rpki-client on console-fra.rpki-client.org