Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/l6xoSrrN0UoRkiQeNdo2cTarxac.roa
File: l6xoSrrN0UoRkiQeNdo2cTarxac.roa (raw, json)
Hash identifier: 8YAJv2TRsyiX3Oz9IMV2cCbHbcE4B11LvYdhI3LlmcM=
Subject key identifier: 97:AC:68:4A:BA:CD:D1:4A:11:92:24:1E:35:DA:36:71:36:AB:C5:A7
Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial: 01857030310F2300447A98B28A2718F9B044
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/l6xoSrrN0UoRkiQeNdo2cTarxac.roa
Signing time: Mon 02 Jan 2023 01:54:44 +0000
ROA not before: Mon 02 Jan 2023 01:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64472
IP address blocks: 185.162.182.0/24 maxlen: 24
185.162.180.0/23 maxlen: 23
2a0a:9000::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:31:0f:23:00:44:7a:98:b2:8a:27:18:f9:b0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Validity
Not Before: Jan 2 01:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97ac684abacdd14a1192241e35da367136abc5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:24:ba:1e:c6:79:1c:d1:f5:ca:b5:7d:e8:be:
c0:b9:fe:f6:9b:d3:37:e5:9f:2a:71:15:a0:81:18:
ba:d9:0e:ad:f6:3a:7f:ab:92:9e:5d:ed:c9:49:7c:
3c:28:0c:cf:25:3f:0f:0f:fa:c3:94:f6:78:15:b8:
48:45:ae:ae:3f:68:75:78:ce:18:88:ee:30:12:fc:
1b:db:18:e6:1e:77:14:af:dd:1d:aa:c7:46:b4:be:
c1:b3:db:58:15:5d:fe:79:bf:d7:ed:45:6e:30:00:
32:ce:6b:f5:10:fa:32:cb:63:85:4f:82:f5:ff:fb:
75:11:00:71:2d:72:4a:65:a8:c6:e0:47:be:de:ad:
6b:b2:54:8d:a0:c2:37:79:c2:28:5a:82:30:14:d1:
3a:b2:45:2f:ba:5c:74:70:de:5d:ef:a9:36:88:05:
34:7b:8f:ed:9a:28:54:c2:a2:8a:d9:37:ee:4a:f7:
ff:6d:82:2e:87:68:75:e0:dd:1c:bf:3b:c4:41:b7:
37:cd:7a:19:40:c8:94:a9:f4:88:da:40:c0:66:e2:
d3:ed:6c:7b:ec:80:51:f7:a2:bf:5e:4e:da:b5:a0:
45:57:ac:7d:c1:96:8b:b2:fc:c3:9c:47:b3:00:02:
4e:02:0f:bc:6a:9e:cf:66:21:82:94:5b:db:01:d6:
ae:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AC:68:4A:BA:CD:D1:4A:11:92:24:1E:35:DA:36:71:36:AB:C5:A7
X509v3 Authority Key Identifier:
keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/l6xoSrrN0UoRkiQeNdo2cTarxac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.180.0-185.162.182.255
IPv6:
2a0a:9000::/29
Signature Algorithm: sha256WithRSAEncryption
92:65:34:b0:5e:0e:71:b5:db:c2:e4:58:9f:69:89:37:a6:0f:
d1:fa:46:82:93:80:21:99:ce:58:4d:39:2b:62:ff:f5:9d:71:
92:c4:6c:7c:04:2b:d3:3a:37:2f:ee:61:b7:06:ba:9e:53:00:
70:cf:93:26:22:17:af:a7:47:c8:ed:e8:da:d3:a7:c4:9d:2c:
73:80:2d:83:19:7d:ad:bf:62:88:9e:26:90:a2:05:c1:1f:35:
fd:1a:a1:0b:b7:a7:40:38:7b:59:01:71:58:61:25:1a:95:35:
e2:ab:4c:a1:2a:66:bf:b1:4a:8c:fc:02:aa:a0:70:18:54:4c:
55:dc:99:ce:f0:b4:7c:a0:8e:e1:d0:99:8e:d5:e7:25:42:1c:
1d:c0:1c:8e:0d:1a:21:52:37:1b:13:8e:27:1d:c6:d0:00:52:
a2:16:49:19:c2:66:34:2f:9f:b0:15:a4:aa:14:26:b6:35:89:
75:c3:cf:7f:62:c2:02:8e:f6:11:06:42:3a:fd:24:71:ca:94:
d3:73:32:45:16:68:0c:98:4c:0f:dc:9b:ed:d5:ec:2a:c2:e6:
71:e8:28:a8:26:b4:a6:49:b7:ec:24:4a:c4:c2:73:17:f2:18:
48:5a:fd:59:82:f6:09:a2:c5:88:4f:5b:8b:93:c5:35:fc:d9:
7d:7f:60:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:45 2024 by rpki-client on console-ams.rpki-client.org