Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/t-e5t25dkSrZDr7s1GKiSx-0k0A.roa
File: t-e5t25dkSrZDr7s1GKiSx-0k0A.roa (raw, json)
Hash identifier: jDy9sIGppCwA2iBn9QgP9it4oA18mfMy7CBihlPV7Nk=
Subject key identifier: B7:E7:B9:B7:6E:5D:91:2A:D9:0E:BE:EC:D4:62:A2:4B:1F:B4:93:40
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01870EB443DCE39558E75344FA387FE7E78D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/t-e5t25dkSrZDr7s1GKiSx-0k0A.roa
Signing time: Thu 23 Mar 2023 13:41:47 +0000
ROA not before: Thu 23 Mar 2023 13:41:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197674
IP address blocks: 185.252.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:b4:43:dc:e3:95:58:e7:53:44:fa:38:7f:e7:e7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 23 13:41:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7e7b9b76e5d912ad90ebeecd462a24b1fb49340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:80:b5:e6:d7:bc:4a:b7:53:ed:a6:03:f9:c0:
29:d7:dc:a0:9b:46:8b:46:c8:80:88:3f:7e:b9:26:
ed:18:22:ac:c9:2d:f3:f2:dd:f4:88:5e:70:28:47:
87:5e:c4:cd:a7:32:56:e1:e0:dd:02:7f:69:30:91:
94:51:a4:bc:c6:01:bb:67:d7:71:5e:c4:57:58:b6:
0b:e8:52:4f:6c:ab:e7:5f:bf:ad:b7:f6:c5:d8:f6:
f7:35:64:4e:b2:e2:40:b5:0b:f8:a5:1f:38:90:3a:
b7:f4:08:4d:1a:e9:2c:a2:2d:8d:a3:12:7b:b1:77:
5b:75:95:2f:72:d6:2b:f5:17:7f:e6:fe:ee:6e:ef:
96:a0:e7:cb:e5:87:80:af:51:8b:d4:8b:50:9e:85:
d0:c5:07:7e:4c:6b:a5:a4:53:9c:a7:56:43:ca:b2:
1d:76:66:a2:2c:80:1a:15:8a:82:69:2e:56:5d:51:
73:bb:bd:70:33:8f:72:95:d9:52:50:9a:a4:ab:d2:
72:ba:58:75:b6:e3:da:36:37:21:27:55:ef:2d:34:
f3:6e:4a:df:23:fe:08:76:07:c7:a2:52:54:07:b4:
ba:13:3f:24:0e:b1:dd:21:72:5a:7c:62:31:87:44:
34:74:40:55:41:c8:ac:23:59:7d:a6:c3:e4:28:f7:
3b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E7:B9:B7:6E:5D:91:2A:D9:0E:BE:EC:D4:62:A2:4B:1F:B4:93:40
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/t-e5t25dkSrZDr7s1GKiSx-0k0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.176.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:90:69:1d:46:9b:8f:fd:9f:31:76:9c:f4:79:80:c1:8a:7e:
bd:34:cd:3e:56:ed:25:e2:df:eb:a2:62:25:08:a6:fd:b7:44:
95:34:c7:15:b0:70:21:fb:2b:20:92:f6:28:66:30:46:2c:7b:
9d:10:5a:1e:1e:9b:2c:7b:b3:cc:0f:67:dc:aa:1b:ce:de:7f:
c6:31:7d:67:e0:6d:cf:89:cb:10:7a:1b:68:83:db:d7:04:7d:
9a:97:55:d6:e0:55:d4:78:4b:fa:e4:d1:83:d9:48:f4:33:44:
a2:0a:fb:13:19:a4:50:2b:58:01:6f:82:28:65:c4:56:98:c5:
09:3b:20:ac:8b:1b:8e:96:93:62:e2:a7:35:14:4c:d8:59:08:
6b:01:a8:0b:1b:ae:29:66:95:62:6d:77:75:38:43:79:85:e3:
6c:0c:d5:3c:4c:38:7b:c6:5a:45:fb:79:92:17:9f:d4:84:28:
79:76:58:24:43:1d:5b:2b:0c:81:2b:24:2f:78:45:ce:c2:34:
e6:7f:fd:a7:f4:93:02:78:ff:64:02:a5:a7:d5:7b:81:9f:5c:
09:26:99:d4:ba:72:30:d3:dc:ae:ef:18:40:3a:f3:fc:92:89:
aa:6f:a1:ae:fe:b7:c6:96:a5:cd:5e:4e:9d:ea:e5:7b:24:d9:
a7:be:88:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:49 2023 by rpki-client on console-fra.rpki-client.org