Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/oYRW8RsoLDWxC3dVvYMQ2u5n8Ys.roa
File: oYRW8RsoLDWxC3dVvYMQ2u5n8Ys.roa (raw, json)
Hash identifier: ssflU+gc7Qp4aU8gBg2nuUcfiSPiixBBnpo/XlaFMBk=
Subject key identifier: A1:84:56:F1:1B:28:2C:35:B1:0B:77:55:BD:83:10:DA:EE:67:F1:8B
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 018572C375DC9920E2EBC7BE306F0FD1C86B
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/oYRW8RsoLDWxC3dVvYMQ2u5n8Ys.roa
Signing time: Mon 02 Jan 2023 13:54:50 +0000
ROA not before: Mon 02 Jan 2023 13:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36040
IP address blocks: 185.225.248.0/24 maxlen: 26
176.126.58.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:75:dc:99:20:e2:eb:c7:be:30:6f:0f:d1:c8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Jan 2 13:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a18456f11b282c35b10b7755bd8310daee67f18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c0:d8:40:a5:61:87:d8:4f:cc:ec:57:7f:32:
86:56:fa:97:40:d1:66:4c:3a:ff:83:72:1b:7e:87:
39:b5:e0:36:0f:1d:38:a6:d4:70:7c:1f:d2:2e:68:
ae:72:0e:76:6a:4f:ee:59:ca:44:57:a4:2d:26:89:
4e:f0:59:98:b7:b2:fb:21:b1:a0:86:79:2f:eb:d6:
c1:e6:cc:6e:e5:7d:95:74:eb:95:11:39:10:6f:c0:
4f:cd:61:b1:28:51:a3:1a:f6:98:8b:37:d6:3d:52:
d0:c2:11:27:5f:77:a4:55:89:9a:7b:c7:23:d1:76:
7f:fb:d0:6b:a1:20:d3:39:ce:44:03:7f:4e:22:0c:
f5:3e:68:48:65:2f:ac:16:01:41:6a:cd:89:27:1c:
7d:6b:57:8f:a9:d5:48:2c:6b:a9:dd:4b:11:f4:a3:
57:3d:24:9a:41:8e:3d:9c:18:54:07:92:a6:c5:8b:
dc:eb:2d:29:42:41:57:29:a4:39:ed:ba:e2:fb:29:
96:65:44:1a:d5:14:fb:22:91:25:3c:a4:ef:63:26:
9c:ce:ec:25:78:45:92:b9:33:70:6a:b9:05:e1:e4:
67:e4:4e:78:ac:4b:d2:0e:f7:62:e5:e4:4a:7e:1d:
8c:26:6e:df:3e:76:7f:69:60:3f:e9:80:b3:17:5d:
65:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:84:56:F1:1B:28:2C:35:B1:0B:77:55:BD:83:10:DA:EE:67:F1:8B
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/oYRW8RsoLDWxC3dVvYMQ2u5n8Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.58.0/24
185.225.248.0/24
Signature Algorithm: sha256WithRSAEncryption
51:67:80:71:5c:c5:16:9d:70:5f:e6:af:7b:2e:95:58:49:c9:
f0:19:ac:92:5e:5a:ba:70:11:a0:d0:2c:18:a8:8a:27:01:59:
94:ad:60:5b:3a:d7:79:7e:c2:9d:55:54:1d:50:75:a1:7c:eb:
4b:70:1f:cd:1f:70:16:98:54:fa:0a:78:fc:ee:8c:68:6d:2e:
15:05:c8:e9:e3:e1:9a:95:5b:d4:2d:6d:ce:0e:38:a2:88:a4:
1b:e1:62:18:78:8f:af:8f:f6:e3:40:ff:10:ee:52:70:1a:e2:
9c:eb:6b:40:81:94:30:d2:83:4c:ea:05:a2:4b:b1:af:52:b6:
e0:3f:a0:71:a3:09:55:0a:12:aa:7d:5e:c3:af:18:2f:84:fe:
bf:43:a9:d2:c2:65:0e:8e:ae:66:a5:49:55:12:44:db:17:2f:
66:a2:1b:ce:f7:e3:3e:0a:d6:c3:b7:bd:8e:b5:3f:c5:0e:70:
6f:1d:c8:f9:e2:b2:69:bb:b6:41:9f:75:b4:44:bd:7c:4c:e4:
ed:37:46:66:05:40:e7:ed:07:47:ee:79:13:50:2b:a6:a6:3f:
e1:fd:98:f4:2d:b8:4e:07:36:be:2f:69:2e:ea:89:76:e2:6f:
8e:c3:61:f7:1d:c8:b1:98:4e:2a:54:2a:76:a5:e0:38:ef:3f:
8f:96:49:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:28:02 2024 by rpki-client on console-fra.rpki-client.org