Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/SXYxbIiRQ28MVbUJzxjr1aTzdnE.roa
File: SXYxbIiRQ28MVbUJzxjr1aTzdnE.roa (raw, json)
Hash identifier: Qb950FZjy73JdA0JLoWmLzXKUuGodI6TYudjKzumS+0=
Subject key identifier: 49:76:31:6C:88:91:43:6F:0C:55:B5:09:CF:18:EB:D5:A4:F3:76:71
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 018BD4B472B2B511F590B46E03FEF4C7459B
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/SXYxbIiRQ28MVbUJzxjr1aTzdnE.roa
Signing time: Wed 15 Nov 2023 20:37:57 +0000
ROA not before: Wed 15 Nov 2023 20:37:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201079
IP address blocks: 185.23.72.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d4:b4:72:b2:b5:11:f5:90:b4:6e:03:fe:f4:c7:45:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: Nov 15 20:37:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4976316c8891436f0c55b509cf18ebd5a4f37671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:88:ea:7b:4e:b4:3a:f8:82:57:f9:86:e9:
31:e1:c9:6f:d3:78:33:14:b1:ab:10:ed:74:b6:d8:
43:34:c9:e4:46:3b:d6:e9:8b:74:68:67:22:d3:27:
a0:ae:90:62:e5:d0:a3:f1:35:e0:a5:8b:50:99:03:
bf:74:27:e4:da:a7:04:06:a3:1b:31:e7:2c:dc:e3:
f4:ff:f6:22:d8:c0:a3:7a:4e:bb:f5:0d:9f:0f:2c:
4d:20:b7:7b:e3:ff:d0:9d:b2:01:dc:a0:4c:a0:0c:
20:29:06:bb:9f:35:65:cc:f1:6f:9c:09:27:46:90:
02:bd:10:46:39:e0:44:d4:4b:27:aa:07:22:88:3c:
5a:71:09:7e:d8:c8:11:83:db:d7:47:d7:f7:52:75:
79:49:f2:75:97:14:8d:56:4a:cf:7d:52:1e:4a:bc:
4b:f0:20:c3:23:a1:58:70:87:ab:87:54:a4:5d:e2:
c5:2b:f6:4b:00:c1:10:4a:f4:2c:24:5d:61:a2:ba:
9f:8c:f0:9e:89:3c:4e:1d:79:ad:c0:63:a9:1c:ae:
e8:44:58:46:81:ed:d2:b2:9d:f0:81:11:4c:cd:bc:
79:da:69:f6:56:92:8a:96:eb:9e:1d:42:39:41:20:
eb:97:19:31:1d:74:25:ce:c9:3b:ca:7e:c8:c3:7e:
c3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:76:31:6C:88:91:43:6F:0C:55:B5:09:CF:18:EB:D5:A4:F3:76:71
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/SXYxbIiRQ28MVbUJzxjr1aTzdnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.72.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:af:23:8a:21:65:74:08:03:79:f2:b1:d2:b0:38:fc:0d:e1:
33:f4:0c:58:41:7f:5b:2b:d7:a9:75:7c:5d:5c:0e:74:d1:a2:
bb:d8:07:8b:eb:89:8d:66:5c:e1:bf:7d:73:d3:c0:91:4d:ad:
bb:66:28:52:df:53:56:65:41:b0:05:b8:03:69:76:b6:73:29:
2c:c7:3a:dc:71:39:43:13:22:d1:f6:41:3a:44:dc:a3:70:6b:
b4:57:d0:71:0d:de:bc:29:11:57:81:49:64:9b:dd:3e:96:af:
3f:b6:4e:4d:20:98:c2:ce:f5:e0:32:58:32:01:35:16:9a:b1:
28:85:af:32:da:64:38:c7:b7:75:1a:a9:2a:fa:85:d1:cb:c3:
48:4f:33:0c:b8:15:a7:40:49:61:6c:fb:ad:c6:65:ab:b6:82:
e9:62:7f:a0:c2:a6:ac:cf:d4:26:85:22:61:03:39:57:bc:1a:
94:5d:d6:29:2f:db:c5:75:38:07:7f:fc:32:05:db:b1:07:59:
61:a4:85:66:a7:77:1e:be:94:4c:b0:1e:4f:88:0d:89:fb:32:
9d:28:59:90:1f:c1:ca:53:a8:cf:61:2d:cc:8c:30:f6:67:fe:
d8:10:7d:63:d8:90:79:fe:17:cd:16:b3:7c:13:40:78:d8:d9:
27:b8:c5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:33 2024 by rpki-client on console-fra.rpki-client.org