Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7dyvkjxa946DzMWfcXiwPFvzdA0.roa
File: 7dyvkjxa946DzMWfcXiwPFvzdA0.roa (raw, json)
Hash identifier: F/NNT0QvfbeZr1s6scs+9rgt/GGjBnrv8nSq2K0yjT0=
Subject key identifier: ED:DC:AF:92:3C:5A:F7:8E:83:CC:C5:9F:71:78:B0:3C:5B:F3:74:0D
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018B38107C2DCB205CE49C23A6DDC49FC027
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7dyvkjxa946DzMWfcXiwPFvzdA0.roa
Signing time: Mon 16 Oct 2023 10:38:06 +0000
ROA not before: Mon 16 Oct 2023 10:38:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205965
IP address blocks: 204.11.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:10:7c:2d:cb:20:5c:e4:9c:23:a6:dd:c4:9f:c0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Oct 16 10:38:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eddcaf923c5af78e83ccc59f7178b03c5bf3740d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:56:5c:b8:aa:44:be:98:06:0e:05:ad:f0:0c:
ee:4d:81:3e:a9:e8:b9:b3:b4:35:3a:54:71:9b:90:
6f:08:6c:1f:78:33:8f:40:0f:47:2b:cd:0b:2f:fc:
5d:88:44:52:e0:53:62:bd:c5:0e:ae:a0:d2:3e:57:
ac:2a:49:6c:2f:5c:3a:aa:fe:de:84:8a:86:ee:74:
f3:c3:d6:fb:b9:5f:f8:16:bb:8d:f3:6c:9b:26:39:
c6:be:87:0c:38:f2:c4:cf:be:01:03:30:fc:49:5e:
80:73:66:c1:72:a3:dc:8b:cf:0e:cb:ff:29:7a:14:
0c:c8:bc:d2:cd:76:0e:ce:6b:73:3c:04:3a:3f:bc:
09:4d:bf:15:e4:7c:9b:9f:4b:a3:ee:75:99:60:09:
ad:7b:43:fb:3f:11:ee:e9:ee:bf:5a:3c:d7:3b:40:
34:e0:f1:53:7e:1e:3b:da:23:70:4c:f6:3e:90:f1:
32:ec:75:7b:8d:88:dd:92:15:b1:de:5e:9c:e7:e3:
f2:06:db:d2:15:78:be:5e:cf:b8:60:7b:f0:0d:21:
ac:4e:cb:a1:9a:50:3e:0b:69:b5:3a:a6:e2:48:36:
6a:d3:82:46:3a:0f:01:10:e8:ed:05:38:dc:f5:6b:
ff:c5:e8:0f:b0:ae:d6:d7:3d:f4:b7:8f:08:c2:34:
e9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DC:AF:92:3C:5A:F7:8E:83:CC:C5:9F:71:78:B0:3C:5B:F3:74:0D
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7dyvkjxa946DzMWfcXiwPFvzdA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.11.1.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d7:63:b5:bc:d5:7a:97:9c:52:bb:e1:85:51:73:41:6e:43:
57:a9:66:7b:fd:0c:61:49:de:d9:2c:89:06:8b:23:7c:3d:a3:
f5:e4:45:98:bb:bf:b9:09:5d:49:a3:1c:d6:51:34:24:f9:36:
e7:ae:a1:9d:e6:af:70:0e:da:e5:94:89:5a:db:eb:0b:e0:71:
5e:4f:18:66:a2:1b:a1:c5:cc:db:04:3d:1a:a2:44:89:1b:1f:
36:3c:a1:ba:ac:5c:3a:91:d4:18:18:c1:37:71:91:32:f8:3d:
f3:90:82:ac:92:15:0b:c3:5e:a0:53:3e:1d:f9:8f:92:96:45:
56:bc:96:a3:bc:7c:51:00:8f:42:53:58:69:f9:b2:d6:67:56:
fa:8c:ff:9b:6d:5f:31:c9:20:16:5b:a0:c9:50:6c:a5:7a:58:
5c:ad:71:5c:6a:d8:ce:83:61:d2:88:9c:f3:90:c3:37:40:03:
cf:9d:ac:3f:bd:07:9b:b4:ab:40:64:61:f8:58:d6:11:88:d3:
8f:20:be:a3:6b:46:41:91:95:ca:5d:de:13:8c:5f:7d:94:80:
08:04:aa:ea:15:3a:23:4f:86:9d:07:24:31:50:4d:4c:5f:c8:
9d:5d:fd:57:11:6a:ef:c0:b2:45:ab:2c:f7:90:09:32:7b:5f:
23:fa:8b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 11:00:54 2023 by rpki-client on console-fra.rpki-client.org