Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/saQQhPavqptkGjHwb3HE7aw1_uM.roa
File: saQQhPavqptkGjHwb3HE7aw1_uM.roa (raw, json)
Hash identifier: 04oXWt9rEB0QlWBqdeMWxatPolCVU2loPjfHrsG51nw=
Subject key identifier: B1:A4:10:84:F6:AF:AA:9B:64:1A:31:F0:6F:71:C4:ED:AC:35:FE:E3
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 01899694E355CAC2091839DD921EA9047C3F
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/saQQhPavqptkGjHwb3HE7aw1_uM.roa
Signing time: Thu 27 Jul 2023 09:01:27 +0000
ROA not before: Thu 27 Jul 2023 09:01:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.228.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:96:94:e3:55:ca:c2:09:18:39:dd:92:1e:a9:04:7c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Jul 27 09:01:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1a41084f6afaa9b641a31f06f71c4edac35fee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d2:9a:77:ec:e2:35:94:4d:6f:9b:17:29:df:
6d:2f:b9:83:8f:42:35:62:a9:3e:27:ef:f3:ba:31:
e3:31:11:d7:81:d5:90:66:ca:57:81:4a:15:89:10:
83:be:0b:5c:7f:a2:e5:ec:09:c3:bb:10:aa:56:f9:
b6:29:f2:2e:2f:e8:5b:f3:69:4c:12:29:6e:0a:cf:
fb:87:7a:ae:73:7e:7d:5e:1b:cc:f0:87:72:35:86:
6e:a0:80:c9:7c:41:ff:fa:82:08:dd:a7:02:5b:58:
21:b3:90:ce:f6:bb:92:fe:ea:0b:70:c2:8b:11:02:
02:30:b1:a0:30:ad:55:1b:0a:d6:55:ea:e7:1b:54:
3f:6e:42:99:44:84:58:9e:a0:6b:6f:09:74:db:f9:
f7:37:10:18:bd:e1:9e:e4:cc:17:4a:3b:cf:26:e6:
2c:00:a3:cb:66:b5:9b:32:73:ab:74:7d:53:ff:6b:
49:63:94:2f:1b:56:e0:8f:ac:77:9d:f2:95:39:df:
e7:25:73:d4:98:af:3d:67:aa:ea:dc:89:f2:07:f3:
75:0a:42:b3:38:7d:35:e5:a2:b2:73:ae:67:68:1e:
a8:f1:fc:d0:eb:27:c3:88:2c:e0:80:ea:0b:bb:63:
16:6c:fd:29:6a:bb:c1:7c:86:18:77:9c:01:ab:9a:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A4:10:84:F6:AF:AA:9B:64:1A:31:F0:6F:71:C4:ED:AC:35:FE:E3
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/saQQhPavqptkGjHwb3HE7aw1_uM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.2.0/24
Signature Algorithm: sha256WithRSAEncryption
38:1a:3b:30:4a:bb:eb:b9:3a:c9:98:20:b4:f3:41:1e:f0:fa:
78:93:8b:1b:96:3e:b3:d4:31:1b:92:17:ee:b5:a3:4c:3a:8a:
fa:ec:9b:5a:eb:b9:f7:f9:c3:90:62:2e:3d:4f:c8:f7:82:56:
62:5a:cf:4d:61:3f:70:3c:a8:d0:e0:76:ee:c9:c5:45:ee:73:
2e:68:35:50:ba:08:29:18:2e:ae:ad:6c:bd:8e:62:02:73:ab:
a1:d0:4f:7e:50:4e:bb:71:3e:77:97:a3:f5:10:90:98:1d:a5:
07:9a:68:c5:09:c4:de:51:cc:ad:34:5f:37:ae:3b:48:49:75:
b1:bc:3e:04:27:70:65:bd:82:24:06:07:f8:be:b2:19:ce:fa:
9b:11:c3:51:dc:64:19:54:15:28:32:93:15:3e:e2:4c:fd:bf:
a1:26:dc:a3:be:7e:88:94:1a:96:2a:82:6a:81:65:37:dd:00:
51:a3:6b:44:0f:ca:15:df:09:52:38:c0:2f:39:32:6d:72:20:
ae:f3:ae:e6:42:5a:4a:f8:4e:40:6f:e8:2c:9f:eb:70:5f:43:
e7:e6:95:04:65:1e:f1:82:50:3a:9f:d2:38:a8:78:4e:2f:11:
11:cc:4f:65:59:11:9b:68:2e:0d:2f:4f:34:85:d2:17:05:9e:
ac:03:04:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:02 2024 by rpki-client on console-ams.rpki-client.org