Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/aM0LtdOHRMRiQVHjthM2WMSU388.roa
File: aM0LtdOHRMRiQVHjthM2WMSU388.roa (raw, json)
Hash identifier: S2C+cyhNVIZMBIWIHEGRq6g/MtxwaTyd1yu45Ev9Y6Q=
Subject key identifier: 68:CD:0B:B5:D3:87:44:C4:62:41:51:E3:B6:13:36:58:C4:94:DF:CF
Certificate issuer: /CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Certificate serial: 01856FA7055DF473500ECE7CEE7435CCEFF9
Authority key identifier: 0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/aM0LtdOHRMRiQVHjthM2WMSU388.roa
Signing time: Sun 01 Jan 2023 23:24:54 +0000
ROA not before: Sun 01 Jan 2023 23:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57112
IP address blocks: 185.242.52.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:05:5d:f4:73:50:0e:ce:7c:ee:74:35:cc:ef:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Validity
Not Before: Jan 1 23:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68cd0bb5d38744c4624151e3b6133658c494dfcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:a1:b3:05:9f:6c:9a:7d:43:7c:f9:5e:ef:
2a:1f:30:17:c8:0b:b0:dd:06:5e:20:28:58:92:42:
a2:77:53:39:af:79:b8:a3:77:a2:f2:3a:a6:c2:be:
5a:4c:6a:ed:ab:8d:91:9a:a5:2a:68:b5:06:65:42:
bf:97:ad:36:77:2a:02:31:9e:67:9a:59:3b:68:ec:
29:e2:71:e1:f0:96:33:84:63:6c:6a:01:c2:46:3b:
f7:50:ed:c5:66:12:1c:67:d5:c7:da:7e:b3:88:f7:
28:bb:0a:74:af:7f:97:a9:60:8b:43:62:dc:03:be:
06:9e:70:73:be:58:a6:07:1a:54:a5:b4:af:da:77:
b2:07:48:e5:27:da:24:03:75:db:0c:fb:97:78:9a:
4c:9e:78:63:b6:5a:e3:ae:57:ed:5c:30:ab:b6:21:
4e:b1:8b:e0:55:eb:63:fd:5f:8c:9a:b7:d0:dd:a6:
30:6d:df:c6:53:42:5b:1e:3f:5c:44:a6:1c:49:a9:
bb:18:d6:bc:5d:d6:16:6e:91:e4:36:0d:c3:54:e2:
2a:e2:55:53:e2:27:77:8d:e3:61:84:92:a1:bc:ce:
9a:39:3b:2f:0d:25:a7:7f:9b:e4:e2:7e:dd:e5:c3:
d1:39:ad:53:e9:73:17:44:44:10:d5:1a:31:28:65:
d4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CD:0B:B5:D3:87:44:C4:62:41:51:E3:B6:13:36:58:C4:94:DF:CF
X509v3 Authority Key Identifier:
keyid:0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/aM0LtdOHRMRiQVHjthM2WMSU388.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.52.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:48:d8:52:9b:d4:ec:b2:cb:37:ec:29:42:2d:5f:c9:76:d8:
d3:15:2f:71:e1:67:5a:e0:89:9b:8e:ee:9c:a0:c4:e7:e3:d1:
f5:05:69:92:6d:b0:4b:6b:65:d9:ce:cf:fe:d6:21:f9:c8:5a:
6e:ff:37:d0:3f:94:14:36:50:f7:d8:06:5c:6a:6d:4c:9e:8d:
1f:48:20:d0:2a:21:85:3a:97:c8:1e:c5:7c:c1:e0:bd:cb:c1:
44:87:ff:20:10:b8:0e:f6:ee:87:f2:32:0f:e7:25:80:ba:6f:
79:79:be:3d:a5:25:f8:c5:20:bb:11:21:69:d6:a8:7a:1e:55:
80:e9:c0:c4:cd:56:49:8b:88:bc:c6:2c:d3:19:e1:0e:9b:31:
8f:93:b2:1a:96:8d:29:9c:a7:7a:e1:a0:77:a0:9b:ff:86:1b:
10:52:de:15:45:3b:bb:ab:a9:6c:6a:fd:ab:26:c4:c0:07:85:
b9:6c:fb:2d:c1:a7:68:df:e2:e2:5c:67:e7:96:6e:09:a0:74:
0b:d7:92:37:20:bc:0d:2a:6f:2f:ee:88:8f:12:f6:4a:21:d8:
fb:59:82:ec:0a:1a:98:98:cc:80:0b:58:de:24:3e:e7:ff:52:
13:25:05:83:64:64:aa:70:84:96:60:a5:ed:c1:22:4d:40:17:
9e:b9:d8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:02:23 2024 by rpki-client on console.sobornost.net