Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/7U7f1rvHf4dTCScysspycnKOYRg.roa
File: 7U7f1rvHf4dTCScysspycnKOYRg.roa (raw, json)
Hash identifier: H6Yul4VGR22/YCeNVtfmq9ZmdjVya7JKlk+IjSZXLqU=
Subject key identifier: ED:4E:DF:D6:BB:C7:7F:87:53:09:27:32:B2:CA:72:72:72:8E:61:18
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 018C7DC124CF666EF34ABEA83BB3214EABC7
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/7U7f1rvHf4dTCScysspycnKOYRg.roa
Signing time: Mon 18 Dec 2023 16:27:38 +0000
ROA not before: Mon 18 Dec 2023 16:27:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 185.69.44.0/22 maxlen: 24
2a05:2000::/29 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7d:c1:24:cf:66:6e:f3:4a:be:a8:3b:b3:21:4e:ab:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Dec 18 16:27:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed4edfd6bbc77f8753092732b2ca7272728e6118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:eb:b4:7e:8a:7e:45:c8:21:9e:5e:61:76:
db:49:3e:b2:a6:67:72:2e:2d:c0:b5:cf:9b:a5:b9:
54:f1:e0:b2:c7:2e:e4:26:a7:33:04:cf:f8:f7:ad:
d0:5c:cb:21:0b:bf:c6:f1:b6:c3:21:32:c7:30:d2:
02:1c:5e:47:3a:98:a5:1f:09:e1:92:63:44:dd:d1:
76:1d:82:f5:b6:ab:92:34:36:6a:d5:0a:4c:90:9b:
c9:f4:0a:3c:ba:8d:ab:67:df:eb:81:d3:79:b0:f9:
4e:49:55:ca:f3:73:9b:e4:10:3e:fa:67:3e:fc:9c:
aa:3a:a7:13:13:fe:c4:00:86:e7:ce:61:aa:ad:78:
55:14:5d:01:39:6a:2f:b9:dd:a2:70:31:05:ae:55:
f0:bc:fb:ae:1b:d4:65:6e:94:c0:52:94:c0:9a:f9:
b5:7e:1a:e8:83:da:cf:1e:de:c4:30:b4:96:e3:19:
bd:72:be:a8:4a:30:b3:64:1f:ed:96:d6:20:f8:92:
8b:b9:f1:f8:fb:39:5e:bc:f9:67:8a:d8:e2:5b:61:
c0:96:35:3d:88:39:62:72:74:b2:1a:2b:3b:d1:d9:
a0:74:f3:4a:bb:8a:ad:c7:63:da:cb:ba:8d:f9:77:
b9:25:ae:4c:79:89:53:7a:b1:97:bd:89:d6:4c:8b:
3c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4E:DF:D6:BB:C7:7F:87:53:09:27:32:B2:CA:72:72:72:8E:61:18
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/7U7f1rvHf4dTCScysspycnKOYRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.44.0/22
IPv6:
2a05:2000::/29
Signature Algorithm: sha256WithRSAEncryption
7b:c3:12:cf:10:c8:67:ed:d6:a0:12:71:9f:68:c7:8d:0d:cd:
6d:c7:c1:2a:bd:79:72:47:57:02:28:57:73:6f:87:89:e4:cc:
25:24:8b:53:ed:ff:66:30:94:a3:f6:6a:4b:7f:5c:1f:c2:9a:
03:cd:53:32:f6:1d:7d:4f:88:3d:64:46:0c:86:91:71:d3:43:
8d:56:e3:85:f1:bc:75:16:48:8a:35:68:b8:40:eb:ed:c7:c6:
56:f8:26:53:7b:2b:06:74:b5:ec:1f:c6:5e:6e:4d:43:c0:08:
ab:31:62:7e:2c:90:7f:31:7b:80:3c:17:b6:9d:27:36:0a:35:
0e:4e:e7:e4:74:fc:6f:ca:72:df:c6:4f:2f:71:ec:e8:8b:aa:
38:19:e7:2d:3f:e1:7d:39:ca:ee:c3:7b:d9:51:6e:9b:08:5a:
77:67:40:0c:dc:e2:f5:97:c2:0a:fd:83:e3:d5:a7:1f:6a:6f:
3d:96:91:ee:5f:0f:f6:b6:fc:50:da:a4:3e:c7:6a:1d:c5:02:
74:81:20:e2:db:6c:24:8d:d5:05:a9:1b:31:6c:07:fa:2e:2a:
b5:48:48:8b:f3:ea:12:5d:5d:9d:ea:59:d1:6b:78:bf:0f:2b:
49:71:d5:63:67:6e:37:91:c1:3f:e0:42:37:3b:32:85:44:66:
e0:2b:52:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:54 2024 by rpki-client on console-fra.rpki-client.org