Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/7s8Y08aBL20DSUX1GFWWpcHVIwY.roa
File: 7s8Y08aBL20DSUX1GFWWpcHVIwY.roa (raw, json)
Hash identifier: ecrtVxFXZ10yNroVOFuZNl5YH+h6413jBkkcR5RUTF0=
Subject key identifier: EE:CF:18:D3:C6:81:2F:6D:03:49:45:F5:18:55:96:A5:C1:D5:23:06
Certificate issuer: /CN=9bbc03f6c5a284fa00dbb5aa609c515b7c589969
Certificate serial: 01856F797E1D2A548D919A15DF03EB1757D9
Authority key identifier: 9B:BC:03:F6:C5:A2:84:FA:00:DB:B5:AA:60:9C:51:5B:7C:58:99:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/7s8Y08aBL20DSUX1GFWWpcHVIwY.roa
Signing time: Sun 01 Jan 2023 22:35:11 +0000
ROA not before: Sun 01 Jan 2023 22:35:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203812
IP address blocks: 185.122.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:7e:1d:2a:54:8d:91:9a:15:df:03:eb:17:57:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc03f6c5a284fa00dbb5aa609c515b7c589969
Validity
Not Before: Jan 1 22:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eecf18d3c6812f6d034945f5185596a5c1d52306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:90:d0:63:b2:18:9b:c9:96:7e:18:20:9e:0e:
e2:b3:58:44:6d:e1:39:7d:4f:54:b8:d6:ff:04:a5:
c9:5d:d3:2e:f1:85:53:25:ba:90:54:5d:4a:4d:12:
93:e3:8d:39:23:58:8a:4b:c7:c2:d9:c9:a1:c3:c0:
3b:c2:ba:55:b3:86:fa:3b:ba:a7:a8:a7:af:10:de:
01:70:7d:55:ea:b2:ff:e7:d0:d8:da:3e:1a:c6:e5:
ec:67:cc:54:b0:f9:8a:7b:af:52:94:77:7a:38:11:
a8:0d:2d:98:2d:d9:01:25:e0:fb:8e:4a:28:4f:a5:
6a:d4:5e:71:73:55:7c:82:85:b7:1c:da:74:f5:ce:
81:6e:1a:bd:5d:e8:73:17:56:f6:c2:a4:f9:8a:9d:
91:36:15:bd:ad:29:b3:82:13:5b:a8:d3:ba:ce:32:
7d:8f:13:2d:5a:7e:18:af:f4:75:f3:e8:b6:c6:c7:
72:5f:af:95:71:57:30:9e:29:ca:93:ad:40:a3:c1:
ec:25:de:a4:39:bc:da:31:20:71:a7:54:ec:7c:c1:
48:aa:fb:b4:9a:35:ac:94:bb:90:61:e6:6e:91:1f:
92:ba:da:01:1c:c4:c4:f3:a4:90:4e:d9:ac:2f:d6:
a9:96:ab:29:c0:08:92:fc:28:43:ba:84:18:68:03:
8b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CF:18:D3:C6:81:2F:6D:03:49:45:F5:18:55:96:A5:C1:D5:23:06
X509v3 Authority Key Identifier:
keyid:9B:BC:03:F6:C5:A2:84:FA:00:DB:B5:AA:60:9C:51:5B:7C:58:99:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/7s8Y08aBL20DSUX1GFWWpcHVIwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.214.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:6b:d9:9f:b7:cd:29:69:cd:26:ea:aa:6f:4c:7d:5f:78:1f:
7a:19:a3:20:04:c2:b7:ea:fe:70:b7:db:8f:45:57:3e:34:f8:
40:c9:78:65:1b:37:b4:fc:2c:b7:92:90:fa:d1:0f:f3:67:a8:
4d:c1:85:38:68:fd:ee:d1:71:72:b9:6b:32:06:f8:e8:cb:c4:
44:a7:92:7d:b9:05:d4:eb:a1:e8:15:3e:2b:92:e9:7b:c6:ad:
dd:37:3a:63:f6:ff:7a:02:8a:9f:c4:be:e2:1a:20:2b:fc:b0:
18:cf:8d:4b:92:2d:13:16:f0:7f:7a:7c:e8:d6:ce:3c:95:6d:
8e:16:df:3c:4d:63:62:7c:b1:c9:16:2a:90:36:b7:10:0d:49:
b4:b0:70:e8:f6:c0:46:86:b7:88:d0:86:69:dc:05:2f:9b:45:
48:7e:d4:d8:8b:31:5f:8a:09:02:5c:22:4e:86:88:38:69:0f:
c4:35:c1:ef:d4:44:79:ad:28:88:48:2b:97:01:91:41:d3:e9:
c3:0c:8f:bd:84:b6:5b:ae:8a:96:46:3b:51:0c:e9:f5:40:ec:
9b:38:90:93:c0:99:16:58:e4:f4:af:8b:d0:5e:b0:aa:d5:46:
43:54:0d:e0:db:dc:d9:c2:97:b2:a9:4d:be:94:0e:3d:e1:74:
b1:c1:52:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:00 2024 by rpki-client on console-fra.rpki-client.org