Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/aSSraygkgVIhGLMMonU_JZ5oQF8.roa
File: aSSraygkgVIhGLMMonU_JZ5oQF8.roa (raw, json)
Hash identifier: c4c6yGmG1e7iGK3DlHf8guSgm83veixIN02kWjuNEjA=
Subject key identifier: 69:24:AB:6B:28:24:81:52:21:18:B3:0C:A2:75:3F:25:9E:68:40:5F
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185738FE54527B8E9032F01C6AACF9A1BBA
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/aSSraygkgVIhGLMMonU_JZ5oQF8.roa
Signing time: Mon 02 Jan 2023 17:38:08 +0000
ROA not before: Mon 02 Jan 2023 17:38:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39192
IP address blocks: 185.234.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:e5:45:27:b8:e9:03:2f:01:c6:aa:cf:9a:1b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6924ab6b282481522118b30ca2753f259e68405f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:be:8a:4b:17:93:40:6c:20:c6:6a:00:35:28:
3c:23:92:97:f3:88:b7:d2:b0:93:b1:67:2c:c4:73:
ef:72:dc:cd:8b:9d:76:7c:96:08:76:66:7d:76:a7:
bc:54:0d:f9:d0:ac:de:b6:c8:fa:4e:c1:6d:a0:bb:
71:25:48:63:a4:2d:ef:c1:5a:b0:9e:86:e4:c3:ff:
bb:16:41:37:eb:1d:1a:53:df:a6:6b:fd:76:e4:8b:
76:b5:6c:c1:a8:70:2f:f2:03:df:35:9d:f4:0d:c2:
49:2f:e6:bb:43:d6:26:08:e9:46:6e:7d:32:e4:06:
48:62:70:ec:fa:8c:20:28:4d:bb:fd:45:a0:ea:5b:
3a:0b:14:8b:ef:51:10:68:7e:fc:df:14:7a:7a:94:
d4:d1:0a:5f:c0:56:53:b1:47:ec:f4:a1:29:d2:7f:
71:8d:d9:50:3a:63:33:0b:07:93:b6:7c:e9:40:12:
67:55:aa:58:ba:d9:21:0e:0b:03:f7:15:de:b0:fd:
b3:cd:a0:a5:01:df:67:7f:2c:b6:ea:72:12:10:8e:
05:d4:43:9d:6c:20:06:82:3d:35:01:1a:35:2f:db:
1b:ea:6c:d6:74:43:ff:1d:15:fd:c1:b5:fb:47:0f:
07:a5:57:17:51:fa:69:34:2a:d9:d0:e3:81:ea:08:
1e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:24:AB:6B:28:24:81:52:21:18:B3:0C:A2:75:3F:25:9E:68:40:5F
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/aSSraygkgVIhGLMMonU_JZ5oQF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.74.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:4a:c0:16:70:24:07:5f:f8:a6:8a:3d:93:97:6b:77:df:38:
c7:67:f8:81:cd:ee:8f:fe:b3:9f:d9:32:b6:a0:e4:60:58:69:
d4:0e:86:28:88:72:10:6f:e8:4f:f3:6d:0c:30:ba:12:c4:38:
46:15:e7:17:02:44:14:b9:99:01:e2:73:5d:f1:73:d7:61:29:
2c:14:6a:38:8b:3a:59:1c:3e:2f:d9:05:2e:16:ed:5a:e0:97:
7e:e1:2f:9f:68:1b:e6:15:5a:a3:63:ef:87:66:3f:3d:31:52:
56:6e:1a:a6:0b:d2:03:c9:b9:3a:37:a0:b7:14:73:08:f4:40:
d4:4c:41:2d:ed:b5:d3:a3:22:8f:54:e9:b0:a7:04:11:64:37:
35:35:a9:47:b7:c9:df:44:5f:af:1d:01:94:66:bc:71:d6:5e:
2b:64:26:64:6b:d0:cb:e2:da:58:c8:5e:ce:54:f7:f4:00:1e:
f0:9c:26:28:1d:30:30:77:15:05:e6:de:ce:9c:4e:9e:1d:e9:
6e:b5:9e:9d:d5:e4:7f:bd:84:2f:88:f6:ad:6a:e2:1e:65:db:
08:d5:df:1b:fe:fb:0c:48:14:5a:05:c5:51:9b:ca:55:7c:b5:
15:ff:c6:77:a0:4a:de:51:b3:11:06:be:2a:44:f7:87:fb:78:
a5:97:ac:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:27 2023 by rpki-client on console-ams.rpki-client.org