Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/dL6iwH1Jpd54llre0aZ4s9noF9Q.roa
File: dL6iwH1Jpd54llre0aZ4s9noF9Q.roa (raw, json)
Hash identifier: ss36gMibxtJ8m2eIqAcOjDLgVmte/Wo4uqRMbZTfPOY=
Subject key identifier: 74:BE:A2:C0:7D:49:A5:DE:78:96:5A:DE:D1:A6:78:B3:D9:E8:17:D4
Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial: 01856F14AB456E34BC375946D89D24C63474
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/dL6iwH1Jpd54llre0aZ4s9noF9Q.roa
Signing time: Sun 01 Jan 2023 20:45:03 +0000
ROA not before: Sun 01 Jan 2023 20:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47987
IP address blocks: 185.141.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:ab:45:6e:34:bc:37:59:46:d8:9d:24:c6:34:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Validity
Not Before: Jan 1 20:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74bea2c07d49a5de78965aded1a678b3d9e817d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:10:8b:67:cc:af:90:08:8d:28:8c:8c:c0:e6:
cb:e5:b0:e6:fe:e4:77:b6:71:f4:b3:3d:90:16:46:
1a:15:d5:15:2b:eb:48:48:37:4e:07:f1:55:ce:b3:
3f:b1:51:b8:ea:00:96:88:9d:07:83:1a:ac:e5:3a:
4e:d1:b1:ec:06:85:b1:40:81:14:19:52:dd:a3:35:
52:58:73:5b:a6:d0:74:df:39:ac:24:52:c1:82:2f:
c1:0b:14:d6:f7:c5:1f:86:02:e9:68:6d:e4:bb:39:
67:71:2e:61:1c:72:4d:7f:16:a0:fd:1e:f1:0a:a3:
9c:87:ea:34:93:b9:58:a3:2d:38:a3:b6:a1:37:47:
5c:9b:2b:7e:86:ff:a1:47:e4:b5:00:ed:3e:39:0b:
1d:eb:11:16:d3:d6:71:5f:ca:ff:ae:8e:42:03:1f:
d8:6e:20:cc:61:de:38:40:77:3b:4f:b9:01:29:17:
3f:f8:04:e1:66:24:2e:d7:9a:ba:17:16:ac:f1:36:
ea:6a:9a:e1:a5:53:48:6f:09:84:8b:d8:62:0b:aa:
35:c6:d8:18:f3:6f:be:ea:96:97:1b:9a:36:fc:ea:
89:14:eb:cb:09:4f:0e:af:c7:c9:37:f8:0b:0c:c7:
77:89:e3:68:4e:fe:0f:e9:20:47:95:8d:9a:d1:99:
a6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BE:A2:C0:7D:49:A5:DE:78:96:5A:DE:D1:A6:78:B3:D9:E8:17:D4
X509v3 Authority Key Identifier:
keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/dL6iwH1Jpd54llre0aZ4s9noF9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.252.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:8e:76:2b:0c:5f:72:dc:d8:80:91:9b:51:c4:1b:86:b1:ea:
e9:e9:c5:15:6e:e4:ed:ed:e5:8f:09:70:d3:c1:28:8a:3c:e2:
8a:41:90:59:05:f5:dc:55:05:58:c9:c9:4d:41:c8:49:bf:27:
93:79:da:98:fb:4d:4c:5e:ef:a6:ea:0d:c9:e9:f5:2b:ea:18:
7a:0c:5e:2e:8a:9b:30:3e:4b:b5:79:9e:fb:cc:6f:a8:e9:f8:
32:e1:e6:40:8a:a4:70:7a:07:fb:c7:e0:b5:1d:c7:21:c8:f5:
f4:50:4c:46:85:45:82:91:ab:37:d5:cc:0f:63:aa:bb:ad:dd:
76:66:70:05:68:3f:5a:84:83:da:06:22:b8:0e:6e:0c:11:b5:
2e:f9:16:fb:e2:c9:bf:3a:01:f2:8b:45:6a:40:73:5d:d7:98:
0b:ce:98:d9:c8:a2:84:de:b6:c2:0d:3b:34:07:1f:84:a3:fe:
ef:bf:89:1e:86:4a:3f:23:ac:34:1a:6f:84:b3:c0:5a:46:1a:
02:34:31:c6:d5:b3:ae:fe:97:91:42:b9:4a:44:de:c4:0d:99:
ec:7a:ab:f2:31:af:d5:72:68:33:ef:f1:eb:a6:00:10:36:f8:
83:27:50:1c:78:c8:f1:38:b6:28:5f:d7:cb:2f:50:76:ce:47:
2f:71:96:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:20:16 2024 by rpki-client on console-ams.rpki-client.org