Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/4DYQ-Q4UgkkTpPIiH5YqzXW2yVc.roa
File: 4DYQ-Q4UgkkTpPIiH5YqzXW2yVc.roa (raw, json)
Hash identifier: 8bFs0zNAYnOaseYIqmnOgG7sUYW5BdPorSG/wdkRqoM=
Subject key identifier: E0:36:10:F9:0E:14:82:49:13:A4:F2:22:1F:96:2A:CD:75:B6:C9:57
Certificate issuer: /CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Certificate serial: 01856E0B083C2CE61CD87529DCD4DB7981D7
Authority key identifier: D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/4DYQ-Q4UgkkTpPIiH5YqzXW2yVc.roa
Signing time: Sun 01 Jan 2023 15:54:54 +0000
ROA not before: Sun 01 Jan 2023 15:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62061
IP address blocks: 185.180.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:08:3c:2c:e6:1c:d8:75:29:dc:d4:db:79:81:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Validity
Not Before: Jan 1 15:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e03610f90e14824913a4f2221f962acd75b6c957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:2d:f7:a2:35:ed:76:f6:f2:70:a3:d9:d1:
6a:dd:74:23:63:55:1a:7a:f9:02:7e:d5:39:4c:fc:
04:4b:50:5a:62:db:4c:87:00:16:76:0f:6e:18:28:
e5:40:06:41:7c:85:26:a6:8a:5e:0e:cc:2c:f1:2d:
f7:9d:ed:cd:2f:5c:33:65:f1:0e:3e:30:b7:a6:37:
85:bd:02:3e:10:71:f1:1a:38:47:01:34:c4:3b:93:
1b:5b:97:f6:69:4e:4d:91:f5:a0:1d:12:dc:ff:20:
77:51:5a:48:ce:df:e7:d4:9e:e6:f8:a0:c3:2e:4a:
ef:bb:a7:2c:b5:e8:67:d6:78:40:70:2e:9e:aa:78:
7c:3f:76:b2:c7:fa:f4:58:6b:06:da:2c:99:4a:d5:
22:b5:26:a0:5d:85:4e:ea:3e:46:57:63:e1:f4:00:
52:b9:65:96:68:40:bc:75:b4:1b:56:be:21:82:0b:
bb:af:00:cc:fe:c4:03:0b:9f:37:de:06:4c:5c:92:
6b:25:98:69:eb:2f:66:2b:14:86:f0:9a:6a:47:9c:
d3:e7:2e:71:8e:be:43:ca:48:93:94:ae:c6:d9:b9:
32:e6:01:63:5a:bd:f6:27:0d:9f:b3:84:37:f6:ea:
53:73:4a:b1:ff:ef:36:33:42:12:8e:a1:03:c1:db:
07:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:36:10:F9:0E:14:82:49:13:A4:F2:22:1F:96:2A:CD:75:B6:C9:57
X509v3 Authority Key Identifier:
keyid:D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/4DYQ-Q4UgkkTpPIiH5YqzXW2yVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.39.0/24
Signature Algorithm: sha256WithRSAEncryption
33:23:97:8e:b3:37:61:bf:55:e5:56:e9:4d:71:af:c8:0c:64:
02:89:63:80:2f:62:94:0e:20:30:52:b0:0e:54:cc:0f:a6:8b:
fb:a9:b3:ab:b7:48:20:9d:af:95:81:34:ae:e0:3f:b0:6b:3e:
c1:2c:a6:68:f2:f4:11:23:fd:c3:e0:1b:d1:98:24:76:31:22:
4f:0a:89:93:61:1c:34:71:e3:dd:22:7b:9d:07:85:cd:9b:fd:
77:c3:8d:1a:06:34:6c:e8:cf:da:1e:b0:48:d6:33:c1:e7:9c:
d0:58:17:97:8f:4b:ae:96:d2:d2:13:d6:86:0b:40:e2:93:d0:
8e:b1:7f:38:5b:f2:0a:29:e8:26:7d:d1:55:02:cc:37:17:4e:
0f:56:04:9e:82:73:67:88:a5:53:3d:aa:84:6c:db:42:9b:f9:
28:19:41:73:0e:e1:fd:7e:0c:89:eb:3a:94:c2:49:6f:20:4b:
30:58:99:d0:64:34:cf:9a:0f:e0:cb:9e:80:31:9b:5c:ae:81:
e0:0b:27:b8:b3:36:e7:7e:10:c2:74:c4:0a:30:d8:e7:9f:05:
45:94:38:82:c4:af:63:bf:76:c4:f5:8e:69:f7:2c:0e:73:68:
00:39:64:1e:c6:f2:b0:2a:77:fc:74:0a:20:41:f4:d1:d1:0a:
07:5c:f3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:48 2024 by rpki-client on console-ams.rpki-client.org