Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/3cHSIRRt6BySXgKZjWWYYtOJPt8.roa
File: 3cHSIRRt6BySXgKZjWWYYtOJPt8.roa (raw, json)
Hash identifier: WgsrItMDTzK1vQ5Wan/0O4n+h1sZVG/NV96qkTem8GY=
Subject key identifier: DD:C1:D2:21:14:6D:E8:1C:92:5E:02:99:8D:65:98:62:D3:89:3E:DF
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 018570153E23625F9B7A8A4AE3CCAC68F6AE
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/3cHSIRRt6BySXgKZjWWYYtOJPt8.roa
Signing time: Mon 02 Jan 2023 01:25:18 +0000
ROA not before: Mon 02 Jan 2023 01:25:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42337
IP address blocks: 185.110.28.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:3e:23:62:5f:9b:7a:8a:4a:e3:cc:ac:68:f6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Jan 2 01:25:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddc1d221146de81c925e02998d659862d3893edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:91:6d:5a:1f:cb:8f:b8:7b:09:ee:d3:1d:db:
66:ee:5c:b9:0d:38:63:bb:cb:43:ff:a1:62:e9:b4:
00:ce:05:f8:59:58:6f:a5:2b:92:7a:a1:0b:5e:ed:
bc:61:e3:a3:d1:32:b8:ef:57:76:54:d6:ea:5f:81:
f3:33:e3:82:bf:66:6b:3a:6d:0a:57:11:2a:2d:58:
9b:85:36:ce:be:30:91:a6:04:6e:b6:d6:0a:ab:b7:
af:ff:2a:bd:bc:88:fc:b5:a5:7b:5c:2d:ff:54:cc:
e2:0a:4c:21:db:4e:ab:60:5e:5f:5a:87:ac:86:27:
61:95:63:e5:ff:53:f5:3b:3b:c4:f5:c3:5d:a0:72:
61:db:51:68:85:9a:9a:55:01:92:71:e0:b3:97:a7:
73:da:23:70:3a:2f:fe:dc:c2:2b:8b:ab:e6:d1:98:
68:d3:d3:a6:40:fe:f5:0a:38:47:20:d8:65:1a:2b:
a4:b5:5b:56:ba:8d:0e:73:73:b9:02:78:2e:5c:51:
58:eb:44:2f:60:0f:a2:94:38:b4:02:9d:d5:ca:fc:
fc:30:a8:03:18:2e:8d:de:f9:06:48:21:14:5d:96:
41:65:92:0e:d3:ab:9f:ac:5c:5d:3c:e2:4d:c0:4d:
0d:40:73:f7:cc:81:96:9b:48:60:4e:99:c2:4d:82:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C1:D2:21:14:6D:E8:1C:92:5E:02:99:8D:65:98:62:D3:89:3E:DF
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/3cHSIRRt6BySXgKZjWWYYtOJPt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.28.0/22
Signature Algorithm: sha256WithRSAEncryption
be:e2:09:93:a4:e8:62:84:11:b3:42:6d:61:ae:40:6e:f0:d6:
14:2b:12:ef:8b:99:1f:3b:ed:a2:8d:60:d4:12:12:83:c4:41:
88:fb:84:d0:00:4d:4b:fc:18:95:7b:4d:6a:a1:62:6b:ca:67:
0d:37:4f:46:3c:00:49:f4:7c:d5:e0:6b:25:12:4a:cc:ac:6d:
64:f7:27:dc:c0:2f:c8:99:38:cc:e5:bc:a4:dd:72:74:b9:f8:
5b:19:7d:2d:3c:4e:c1:de:03:97:a5:a0:4c:7c:c4:24:18:86:
c5:5f:00:b0:eb:ba:2d:66:7f:3b:22:8f:3b:84:03:23:8c:73:
3b:16:04:b7:2d:24:3f:3c:f0:7f:ac:13:42:08:f4:fb:cf:12:
39:4b:b7:db:1a:38:1a:25:21:9e:52:8a:3b:1c:c3:d3:f0:f3:
e9:73:c5:cd:00:58:b0:b2:9e:87:ca:2f:9b:fb:2c:a6:d5:9f:
09:3a:7d:a3:ce:ac:0a:24:af:5c:c8:1c:5e:84:62:ac:0d:60:
6c:fd:4c:7b:33:03:17:2e:0c:cf:e8:85:a7:f2:d2:28:3a:cd:
dd:00:43:0e:dd:e0:59:e2:b6:d5:bd:38:35:d4:fb:dd:4b:e7:
a9:e0:2b:ba:5b:4f:94:6d:8c:33:8b:79:9b:06:f1:20:0c:29:
b5:ce:ea:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:53:03 2024 by rpki-client on console-fra.rpki-client.org