Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/tv7-motQwd2PGtc6yhaA_x3Enao.roa
File: tv7-motQwd2PGtc6yhaA_x3Enao.roa (raw, json)
Hash identifier: gKFL9kOcEn0bQHOtz7kdR3WNmuw4d/ATmY+UcGiepuw=
Subject key identifier: B6:FE:FE:9A:8B:50:C1:DD:8F:1A:D7:3A:CA:16:80:FF:1D:C4:9D:AA
Certificate issuer: /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Certificate serial: 01856FC28C5F11196670537A7F0AFFE34A1C
Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/tv7-motQwd2PGtc6yhaA_x3Enao.roa
Signing time: Sun 01 Jan 2023 23:54:58 +0000
ROA not before: Sun 01 Jan 2023 23:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213035
IP address blocks: 185.126.34.0/24 maxlen: 24
185.28.37.0/24 maxlen: 24
185.28.39.0/24 maxlen: 24
2a10:1440::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:8c:5f:11:19:66:70:53:7a:7f:0a:ff:e3:4a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Validity
Not Before: Jan 1 23:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6fefe9a8b50c1dd8f1ad73aca1680ff1dc49daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:87:8f:5c:e6:b1:2f:be:e5:7f:b6:f8:bb:
dd:a1:b8:4d:b0:ce:6e:08:46:70:e2:c0:ac:1a:dc:
d5:64:ac:11:7b:a6:5a:c2:af:7b:1b:8e:5c:8b:1f:
5c:68:9d:31:f6:40:7a:59:0c:2c:97:be:50:14:32:
54:95:68:8c:34:ec:18:d7:ca:9d:b5:d4:5a:78:77:
92:42:60:8e:56:62:b2:a5:d6:cc:00:47:a5:7e:06:
7b:5d:43:e3:53:ee:bc:7b:c0:c8:09:8a:ba:28:03:
a0:71:c5:1e:e5:31:07:5c:0e:83:c2:ab:9d:e2:dd:
60:7b:a4:a7:a2:48:23:f6:1c:75:91:77:e8:1d:f6:
19:8d:28:1c:02:37:b3:63:df:11:6e:16:71:43:0c:
df:a1:a6:30:f9:0b:80:14:c7:16:50:61:28:25:7a:
fb:40:54:af:52:87:e5:d7:1f:db:e6:0e:3c:f5:51:
35:bb:b5:06:a8:c9:16:69:f9:f7:f8:85:c3:7f:cc:
9b:4a:26:62:f0:7e:1a:7e:0f:e9:5d:3e:56:a2:61:
3c:fc:a0:ad:86:73:bc:27:dc:ef:4b:40:7a:f5:9f:
fb:08:ad:bf:c4:0c:ea:48:90:23:69:4a:19:e6:f8:
2b:b8:23:d7:70:bf:d7:cb:42:ef:b7:69:18:80:4f:
ea:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FE:FE:9A:8B:50:C1:DD:8F:1A:D7:3A:CA:16:80:FF:1D:C4:9D:AA
X509v3 Authority Key Identifier:
keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/tv7-motQwd2PGtc6yhaA_x3Enao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.37.0/24
185.28.39.0/24
185.126.34.0/24
IPv6:
2a10:1440::/29
Signature Algorithm: sha256WithRSAEncryption
83:e5:51:37:f1:38:2e:58:73:7e:e6:ea:cc:1c:ee:f6:28:16:
de:a0:7a:66:61:d6:5a:d5:b5:13:ea:8c:76:8b:28:ae:98:0d:
58:d6:9e:a5:33:39:32:ad:ec:f3:31:13:02:1b:66:87:32:4f:
3a:79:f3:0e:38:c6:de:1d:eb:01:5a:e6:df:ae:88:32:0e:6a:
88:58:22:23:e9:88:dc:0f:b8:4c:fe:12:39:1f:b0:07:bb:26:
db:37:f4:a1:6c:3e:cf:9a:4e:bd:ff:b4:be:ed:b5:52:dc:9b:
e7:bc:b6:82:02:49:5d:d9:40:87:fb:8a:12:e6:27:82:66:d8:
10:cc:7d:1f:a5:1c:9f:b6:9c:db:8a:c5:3f:37:73:26:b4:24:
fd:40:5c:a2:a5:23:8a:51:45:7c:24:c2:b0:d7:92:29:61:47:
e5:72:25:ae:4b:61:e5:e4:3d:e9:85:12:df:c8:32:03:da:e4:
31:ca:6c:8a:7c:68:fc:36:68:27:ce:16:a5:43:f8:ad:3c:b2:
a7:62:03:8f:2d:fa:e8:68:3c:39:df:85:62:e0:42:7a:10:7a:
17:a8:ca:dd:56:eb:53:f7:10:3e:06:e8:35:c7:63:9e:5a:09:
ca:08:67:db:65:87:ac:03:bf:b3:e3:72:a5:4a:be:a4:05:e8:
0d:e7:1b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:40 2023 by rpki-client on console-fra.rpki-client.org