Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/2n5KGnDZxBQP23uIuIV8D-dfVfE.roa
File: 2n5KGnDZxBQP23uIuIV8D-dfVfE.roa (raw, json)
Hash identifier: 3HdONC/KxWRBhB/OZOrNNeea4sZnoeaCJJO/EO0kOoQ=
Subject key identifier: DA:7E:4A:1A:70:D9:C4:14:0F:DB:7B:88:B8:85:7C:0F:E7:5F:55:F1
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01856C4171A9B384FC957867596D572A2EEB
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/2n5KGnDZxBQP23uIuIV8D-dfVfE.roa
Signing time: Sun 01 Jan 2023 07:35:06 +0000
ROA not before: Sun 01 Jan 2023 07:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210083
IP address blocks: 185.244.29.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:71:a9:b3:84:fc:95:78:67:59:6d:57:2a:2e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 07:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da7e4a1a70d9c4140fdb7b88b8857c0fe75f55f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:67:d7:20:66:c7:5f:0c:01:f8:e8:06:50:
65:68:57:8c:3a:9a:c1:43:48:95:dd:6a:e0:9a:3b:
b3:2d:bb:8a:20:44:73:bb:67:be:c7:74:ea:65:67:
9c:41:32:e2:2b:e6:d0:08:b0:b7:c3:51:05:52:1b:
16:4e:c5:a7:c3:4d:39:61:5a:ef:27:16:81:67:85:
66:60:a7:97:60:47:61:f9:62:67:bc:21:cd:b1:93:
86:44:44:18:5d:b6:0c:ab:5c:c9:b6:32:71:41:29:
6c:7b:ca:99:21:45:36:49:f4:44:2f:17:00:9c:60:
41:9f:7e:99:7f:a5:0d:4e:5c:18:ff:e2:84:42:c4:
8b:c4:4f:07:3d:cf:0c:d2:75:fc:8b:71:e3:c8:b2:
9a:d9:11:2e:34:b5:e5:08:80:2e:ac:bc:66:de:45:
92:ee:74:11:93:ed:31:f5:2c:13:be:67:79:90:9b:
f6:1c:48:b3:ee:60:1a:f7:f8:bb:56:f6:a9:12:66:
6e:4d:e5:b4:92:a3:6c:c8:59:a2:82:4e:56:fd:a0:
7f:98:c4:a6:43:84:1e:ee:30:3e:b8:b5:eb:e3:b5:
d4:78:b0:5c:25:e9:a0:42:0e:56:7c:5b:c3:e9:c5:
da:59:b4:5d:dc:47:e0:98:23:9f:52:28:34:49:c2:
a0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7E:4A:1A:70:D9:C4:14:0F:DB:7B:88:B8:85:7C:0F:E7:5F:55:F1
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/2n5KGnDZxBQP23uIuIV8D-dfVfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.29.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:27:30:97:a1:ca:99:01:ed:86:ae:03:6f:96:a5:d7:f2:f9:
58:6f:b6:73:ac:15:61:13:b1:25:89:08:e5:fb:d3:6d:1e:c3:
30:87:11:bb:3a:80:1c:d8:d8:37:b5:49:ad:91:dd:32:2b:fe:
b1:b6:28:25:0f:1c:32:94:ab:d5:e8:a4:ea:5c:90:93:de:4c:
0e:dc:48:55:45:39:2c:6a:4e:ac:af:a9:de:3e:37:3e:c4:4d:
2d:aa:3e:c0:39:36:54:9f:04:0b:8d:70:ee:79:96:ec:58:08:
44:c1:86:e0:23:eb:b0:9e:43:be:88:4c:b5:e0:86:bf:ca:53:
a8:a5:1c:7d:29:e6:03:e8:20:b1:c9:2b:32:15:af:35:17:8d:
22:e0:35:b5:0d:8f:90:31:a3:79:e8:8a:07:24:fb:9b:31:10:
79:af:20:aa:5b:c7:de:7f:81:77:61:d0:d0:81:d7:dd:70:df:
c4:69:90:89:26:5d:8a:80:f6:9f:5b:29:ac:c1:e9:2e:b3:c9:
57:73:58:a7:1f:f9:62:df:73:69:5e:6e:f3:08:db:44:e8:34:
5d:61:cb:da:50:08:b1:07:50:04:7f:92:07:de:82:cc:87:8c:
3b:e3:90:98:46:a9:7f:7c:16:04:e8:be:80:e3:4b:5b:37:89:
ca:93:6b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 15:41:34 2023 by rpki-client on console-ams.rpki-client.org