Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/hCIrX0D_s4Dm4Sfn51SAz3SCDAw.roa
File: hCIrX0D_s4Dm4Sfn51SAz3SCDAw.roa (raw, json)
Hash identifier: R1s7zN1MS2L3/8lN87JQ+wu0tAoFDSTF630OYjrTPDQ=
Subject key identifier: 84:22:2B:5F:40:FF:B3:80:E6:E1:27:E7:E7:54:80:CF:74:82:0C:0C
Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial: 018570C2DF4751E6C662292020B3988F594A
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/hCIrX0D_s4Dm4Sfn51SAz3SCDAw.roa
Signing time: Mon 02 Jan 2023 04:34:57 +0000
ROA not before: Mon 02 Jan 2023 04:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6282
IP address blocks: 185.168.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:df:47:51:e6:c6:62:29:20:20:b3:98:8f:59:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Validity
Not Before: Jan 2 04:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84222b5f40ffb380e6e127e7e75480cf74820c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:af:c8:43:fb:5b:5f:19:0b:79:40:d4:12:a7:
1b:a1:e5:6c:fc:c0:0d:30:d6:48:ad:5a:7f:2f:20:
d3:9e:dc:d5:7f:96:a8:3a:ba:43:3f:cf:c1:30:b3:
b6:64:14:a3:a8:76:cd:0b:09:7b:72:22:53:9e:63:
4e:2b:6c:66:c3:b4:02:dc:f3:f4:cb:c7:7a:21:46:
f1:64:ff:2e:31:12:e3:aa:df:86:b0:3b:5c:b8:1f:
74:7d:65:9a:50:86:a7:ce:93:2c:c0:4e:fc:16:36:
27:6a:dd:18:c7:84:73:4b:09:2c:51:57:62:2f:c5:
96:77:c6:f9:6a:8d:d5:88:d4:1c:2b:e8:cd:25:09:
e6:45:74:ad:ea:f0:b3:85:8f:8c:ec:d9:0d:d8:3d:
b2:41:95:44:12:ad:2c:6c:53:30:4d:59:38:67:54:
1f:4b:de:11:d5:cd:f3:14:1b:a8:46:e8:95:fd:44:
5d:57:36:a4:fd:7e:7b:d7:34:94:c8:ba:6e:da:25:
b5:b8:42:b0:1e:66:aa:e7:02:d8:ae:6e:4c:ba:40:
be:67:16:3a:24:f2:ba:6f:c5:a4:95:e5:08:ff:ae:
74:44:0e:58:08:db:b3:25:99:5d:a6:60:f5:0a:cd:
ca:26:5e:d8:bf:4f:bc:fd:21:6f:72:b7:43:3a:ed:
cf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:22:2B:5F:40:FF:B3:80:E6:E1:27:E7:E7:54:80:CF:74:82:0C:0C
X509v3 Authority Key Identifier:
keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/hCIrX0D_s4Dm4Sfn51SAz3SCDAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.157.0/24
Signature Algorithm: sha256WithRSAEncryption
14:56:08:5b:33:5a:cf:51:0e:46:1c:dc:25:bd:8f:f3:48:e7:
a0:0d:ab:30:24:1f:04:2c:e4:1f:1a:40:da:3d:3e:c4:af:95:
54:5b:c1:e1:35:96:26:2c:d8:66:d5:6d:44:91:32:4a:fb:f4:
e1:ed:14:4c:37:92:b8:3a:c8:ab:c9:04:a2:12:5f:83:ef:9f:
17:97:ec:3d:c2:59:c0:3a:7b:70:cc:64:6c:8d:2c:34:aa:d3:
04:e5:da:3c:e0:5f:90:cb:99:d8:52:7f:1e:2f:59:a2:2d:77:
3c:5f:93:a8:1c:56:b8:bf:4d:c4:fc:36:d1:6d:39:11:14:0d:
93:29:68:1e:78:34:0f:d7:67:77:a5:90:f5:e4:43:3c:97:58:
52:a2:4b:06:e2:b1:c6:30:a9:94:c4:de:e7:ec:c6:5c:c1:f0:
84:d0:ca:9b:b1:cf:b9:dd:f9:f2:31:ae:08:cd:6c:28:95:1b:
9f:35:93:49:68:07:9c:46:4b:5f:aa:9b:b7:22:49:a0:a9:66:
8e:ef:94:69:9a:ff:19:87:3b:26:32:60:ff:f4:ef:61:90:fc:
64:7e:e1:37:3f:44:09:20:7b:e0:6a:f1:93:97:b4:95:f2:18:
c8:7c:00:ba:6a:0d:89:e0:59:51:3d:8f:af:ae:36:a9:3c:04:
17:87:f9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:15:03 2024 by rpki-client on console-ams.rpki-client.org