Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/7PbBE8RA3AktvmDQYO0AdUuZ7HY.roa
File: 7PbBE8RA3AktvmDQYO0AdUuZ7HY.roa (raw, json)
Hash identifier: vAQrhAFNGMSI8owfsQncXa1l8QXFS9jBz9m2Xc4L6so=
Subject key identifier: EC:F6:C1:13:C4:40:DC:09:2D:BE:60:D0:60:ED:00:75:4B:99:EC:76
Certificate issuer: /CN=d44de659759b0274124a7b481d0976840b7ade06
Certificate serial: 01856CAF37548D6079A9EC1309F23901907D
Authority key identifier: D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/7PbBE8RA3AktvmDQYO0AdUuZ7HY.roa
Signing time: Sun 01 Jan 2023 09:35:00 +0000
ROA not before: Sun 01 Jan 2023 09:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205087
IP address blocks: 37.143.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:37:54:8d:60:79:a9:ec:13:09:f2:39:01:90:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44de659759b0274124a7b481d0976840b7ade06
Validity
Not Before: Jan 1 09:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecf6c113c440dc092dbe60d060ed00754b99ec76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f7:a9:2e:2a:fa:c5:2b:b3:3f:9f:45:85:41:
b6:00:cb:b1:0e:05:17:8b:1d:1f:53:e1:73:f4:f3:
5c:8c:54:dd:d5:a0:da:47:51:c8:7a:c1:ed:9e:11:
9a:29:f3:5c:3e:43:e1:e9:59:08:3e:7e:4c:73:dd:
15:12:98:aa:2b:de:86:ca:9d:8a:38:d4:f2:bd:5c:
83:99:b8:54:35:0a:3f:0b:7a:5f:0d:a4:55:f6:f0:
21:b7:17:84:8d:b2:e4:bb:28:e3:06:e5:2f:97:fd:
80:b8:f2:4e:41:e7:4c:1d:fd:b8:02:85:8c:2e:c2:
bc:3c:13:76:ba:37:ce:84:7b:9d:4f:3d:10:fa:43:
b5:ff:c2:a9:8b:c3:26:93:82:dc:3c:c6:c1:78:2b:
e9:9e:e3:8a:f5:09:8c:dc:4d:4f:02:5f:e7:68:1c:
e2:fe:6e:c9:27:73:22:6a:da:d6:6d:a4:00:00:cf:
d4:bc:61:92:cc:50:c5:32:c0:f0:e9:61:12:9a:14:
d7:aa:95:8c:f0:dc:26:8b:73:6a:b8:23:36:9e:a8:
08:4c:d7:8e:25:06:b3:62:7e:4b:d4:c5:40:28:95:
8d:39:4d:e2:ba:b7:1e:37:4c:c6:24:70:0d:bd:4b:
57:ab:cd:d5:5b:9a:a1:3c:d8:9e:d7:63:38:0e:eb:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F6:C1:13:C4:40:DC:09:2D:BE:60:D0:60:ED:00:75:4B:99:EC:76
X509v3 Authority Key Identifier:
keyid:D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/7PbBE8RA3AktvmDQYO0AdUuZ7HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.169.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:21:4a:97:06:e8:02:24:3f:6b:39:8a:62:70:92:64:07:4f:
bc:5f:da:48:63:62:e2:b4:57:25:4d:84:81:8f:e3:50:9e:35:
97:4d:84:23:04:af:aa:73:af:4f:51:0e:7c:c1:bd:73:aa:7e:
0b:35:7c:42:d1:9a:cd:65:d6:81:32:e9:9d:4f:76:b5:22:14:
c9:00:68:1b:5a:4f:8c:80:14:5b:b2:44:a1:fa:e6:61:fe:d0:
b9:ba:c8:27:05:7a:14:99:27:70:a6:7e:79:49:e5:2a:39:5d:
8d:35:c9:44:3a:58:f3:b1:f0:d3:11:d9:a6:9c:c9:f2:e6:81:
64:08:d9:72:18:7a:c3:05:0c:60:ce:8f:23:c0:a3:97:dc:34:
d5:d2:68:dd:02:4b:29:e8:45:fd:49:1e:27:b8:d3:2c:af:b4:
f7:55:74:77:3c:ba:a5:ad:fa:e8:22:41:32:65:fc:be:60:58:
5e:6b:13:ff:07:37:b7:42:8f:1d:7c:99:7e:9c:1c:44:81:66:
9c:22:62:c8:72:b3:51:91:77:c2:c3:9a:e0:68:55:58:2e:2d:
da:cd:76:53:b9:e9:ce:71:3e:e8:5e:50:51:2b:47:60:41:c1:
46:ae:7c:1f:5f:14:37:fd:75:4e:dc:b9:c6:d3:6f:de:ee:86:
1a:7a:25:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:35:56 2024 by rpki-client on console-fra.rpki-client.org