Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/eQQgxO2JmWrWM-rD-PzIpK9xNWs.roa
File: eQQgxO2JmWrWM-rD-PzIpK9xNWs.roa (raw, json)
Hash identifier: KfD9jbT10yg38KoIDlOXCsw9lW6/PjPupWT5BwkzB8Y=
Subject key identifier: 79:04:20:C4:ED:89:99:6A:D6:33:EA:C3:F8:FC:C8:A4:AF:71:35:6B
Certificate issuer: /CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Certificate serial: 018B51419C3FD635B7EBA0D1D5493F198D29
Authority key identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/eQQgxO2JmWrWM-rD-PzIpK9xNWs.roa
Signing time: Sat 21 Oct 2023 08:02:16 +0000
ROA not before: Sat 21 Oct 2023 08:02:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25400
IP address blocks: 185.3.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:51:41:9c:3f:d6:35:b7:eb:a0:d1:d5:49:3f:19:8d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Validity
Not Before: Oct 21 08:02:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=790420c4ed89996ad633eac3f8fcc8a4af71356b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6b:99:83:74:29:b3:9f:31:79:a0:01:72:ad:
a1:81:3d:3d:4b:a4:a8:de:93:98:c3:07:63:24:82:
9a:cc:4b:b3:65:43:48:f8:c2:7a:45:08:08:8e:41:
79:a4:29:91:9f:60:3a:ed:35:f5:73:ab:a8:a3:b2:
42:7a:9e:f3:80:28:3c:e5:1a:b0:0d:1f:8c:3a:45:
e4:5f:77:8a:42:16:b2:61:5f:dc:f5:56:d5:92:f4:
e4:0c:1e:d7:6e:25:98:34:e3:1d:93:99:0d:ee:9e:
23:bb:d5:54:7a:e7:f0:a6:53:3a:c0:75:15:2d:de:
2a:f9:1b:87:ed:76:57:64:da:4d:b5:b6:19:3c:68:
5b:87:81:bc:d2:e0:8e:33:1f:c8:74:ce:d6:3c:79:
a1:d2:08:33:9c:c2:80:b5:23:b2:a3:af:8d:73:d8:
f9:4b:f4:be:09:c6:95:90:eb:32:ad:ae:fc:15:80:
03:c0:f7:88:9a:43:5c:16:00:d5:f0:c6:69:5f:65:
cd:85:e5:f7:f2:3d:0e:99:2d:b5:07:fc:4a:6e:42:
6b:90:11:60:fb:09:3b:5d:5a:39:48:85:a5:cd:84:
b4:08:b9:99:2d:5f:c6:b1:de:f6:e2:77:76:ba:bb:
3a:56:34:a7:50:6a:c4:9f:cd:9b:1e:c9:8c:ca:8e:
36:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:04:20:C4:ED:89:99:6A:D6:33:EA:C3:F8:FC:C8:A4:AF:71:35:6B
X509v3 Authority Key Identifier:
keyid:4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/eQQgxO2JmWrWM-rD-PzIpK9xNWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.7.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:66:6e:21:bd:83:1a:e9:8c:61:2d:00:31:f4:2c:c4:f4:9d:
fb:8f:7d:a6:fb:d1:94:7a:47:35:94:0e:f6:5e:7e:36:db:d2:
ad:20:69:75:d0:b7:f6:60:7b:e9:7e:c9:21:d2:00:ca:c2:50:
70:2d:cc:83:94:82:a5:15:9f:63:fb:a0:06:3f:f9:4f:d5:ab:
1c:9e:dc:bb:3e:56:d3:14:ba:c9:0f:47:43:0c:3e:06:ce:2b:
ca:12:71:ca:a0:34:79:2f:b0:15:27:65:5e:f6:fb:82:ed:21:
db:ac:9a:2e:50:9f:d3:98:2d:58:3b:c5:bf:23:9c:d4:0f:ed:
5d:1c:40:9e:67:7d:dd:8e:12:c0:16:2e:62:30:ba:f3:e3:7c:
46:37:ce:52:da:89:61:6e:8a:ed:f9:ff:48:c2:88:7e:4e:db:
de:eb:0a:1f:c3:d7:2f:fa:f3:44:c2:b2:d5:0a:15:49:d8:57:
72:75:41:2f:44:11:0f:7f:89:44:11:89:24:86:2a:3e:17:8e:
a6:ca:22:d3:ca:4f:af:dc:59:9d:30:1f:62:b1:64:7b:01:72:
af:68:ee:c9:c0:6c:f5:f9:4f:35:36:92:d9:20:0f:10:7a:d1:
84:5d:52:81:12:8a:2a:15:93:a1:64:f6:17:7d:ba:70:e7:c1:
fc:82:63:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:15 2024 by rpki-client on console-fra.rpki-client.org