Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/exlyKpMoOytm_uk01St7x967YK8.roa
File: exlyKpMoOytm_uk01St7x967YK8.roa (raw, json)
Hash identifier: uZPCocZSNB2+zG1weJuBCp9rX2KOQcEAWEHhA646FiA=
Subject key identifier: 7B:19:72:2A:93:28:3B:2B:66:FE:E9:34:D5:2B:7B:C7:DE:BB:60:AF
Certificate issuer: /CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
Certificate serial: 01856E6FB9125039769D59827486056FE4F2
Authority key identifier: EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/exlyKpMoOytm_uk01St7x967YK8.roa
Signing time: Sun 01 Jan 2023 17:44:53 +0000
ROA not before: Sun 01 Jan 2023 17:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 185.3.30.0/23 maxlen: 23
185.3.28.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:b9:12:50:39:76:9d:59:82:74:86:05:6f:e4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
Validity
Not Before: Jan 1 17:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b19722a93283b2b66fee934d52b7bc7debb60af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:b2:df:7d:69:8e:b1:93:72:c3:de:00:b7:
76:64:ee:e8:ac:8b:03:70:a7:b8:e4:de:4f:6f:af:
37:b9:5e:4c:ed:4f:84:46:65:96:e6:2d:94:e4:c9:
66:76:fd:70:c5:84:d9:2c:7d:a3:04:50:78:fe:e4:
fc:5b:fb:25:73:e5:18:98:f2:00:5a:ed:2c:d2:59:
25:9a:b3:a4:2c:a3:70:2f:b3:3d:c4:6a:df:6b:0b:
ac:d8:dc:2c:9f:5c:62:8f:e7:42:bb:88:ef:f0:9d:
ea:83:76:95:9a:75:af:5e:0d:92:6b:fa:37:23:37:
99:4e:90:40:27:f2:3b:82:49:74:44:69:98:49:01:
a9:b9:44:9c:bd:4e:55:1b:e2:53:cc:0e:0f:25:ae:
03:f6:32:d7:60:9c:32:fb:49:e0:85:24:4f:51:4b:
e6:ad:5c:ce:2f:73:87:59:ba:3f:c3:99:dc:63:c1:
29:1a:19:f0:68:83:2b:52:01:62:7b:74:b5:e8:8d:
94:f6:8d:53:84:78:d0:ce:25:a5:4d:0f:11:86:16:
68:62:88:96:c4:70:58:af:82:ec:bd:ca:29:77:45:
44:bb:d4:ce:84:8e:6c:13:8e:33:83:9d:32:cc:0a:
95:db:66:b5:8d:89:d4:12:fd:6f:a2:52:78:07:c0:
5b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:19:72:2A:93:28:3B:2B:66:FE:E9:34:D5:2B:7B:C7:DE:BB:60:AF
X509v3 Authority Key Identifier:
keyid:EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/exlyKpMoOytm_uk01St7x967YK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.28.0/22
Signature Algorithm: sha256WithRSAEncryption
72:92:68:e9:75:63:ca:07:44:03:33:67:84:51:07:6f:5f:b1:
b3:dc:ff:73:f2:61:d8:65:1a:67:0d:40:9f:d8:b1:5f:3d:b7:
6f:53:93:c9:fa:8f:e7:a0:47:3c:26:73:f3:82:ee:02:97:7c:
57:43:87:08:ca:c2:a1:b3:42:f4:b8:b9:c5:a5:74:d9:60:8f:
a4:e3:dc:0f:74:59:7d:d3:73:45:c0:d2:35:5b:c7:70:e1:51:
d0:6c:fd:7f:38:0d:06:1e:6a:d6:5b:2a:42:ca:c9:5a:c2:eb:
77:fa:29:ae:d4:3c:73:1a:54:00:ef:43:90:ef:21:cb:b5:d5:
4c:46:4e:a5:ee:76:b5:8b:58:21:d7:dd:4b:3b:60:27:0f:34:
9b:a1:4c:60:0c:36:25:1c:07:45:13:e2:1f:f3:f9:51:7d:2a:
5d:6a:cd:5d:58:b8:d8:04:26:87:9e:57:c2:c3:3a:af:2f:76:
ec:f8:ce:c4:08:6e:c1:ce:cf:86:6b:0f:4c:e5:b1:a2:64:b3:
aa:0a:8e:da:9b:49:55:69:c6:a3:5e:1a:3d:88:23:f7:01:a8:
59:f4:74:e6:8b:44:f6:f1:08:23:d0:04:c1:f4:06:b0:23:04:
39:8d:d2:1a:aa:3a:7c:3a:60:6b:1f:93:fe:4c:ef:a1:52:02:
66:e1:f6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:53 2024 by rpki-client on console-ams.rpki-client.org