Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/dhrnRwYzN4IpeXdGS6NhDI74JWM.roa
File: dhrnRwYzN4IpeXdGS6NhDI74JWM.roa (raw, json)
Hash identifier: vwJRGcn67De0yn0CvrWrrLmn3Ph1PVJ6I5k0yewrFUI=
Subject key identifier: 76:1A:E7:47:06:33:37:82:29:79:77:46:4B:A3:61:0C:8E:F8:25:63
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 018B63B78F9073E3EF8B4164FEF4C3434062
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/dhrnRwYzN4IpeXdGS6NhDI74JWM.roa
Signing time: Tue 24 Oct 2023 22:04:16 +0000
ROA not before: Tue 24 Oct 2023 22:04:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62159
IP address blocks: 185.32.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:63:b7:8f:90:73:e3:ef:8b:41:64:fe:f4:c3:43:40:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Oct 24 22:04:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=761ae74706333782297977464ba3610c8ef82563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dc:6c:a8:ac:12:30:75:52:fe:5c:c3:1b:12:
92:2f:5e:65:24:36:e7:d8:f4:17:6a:4c:4c:20:a9:
9b:6d:d8:28:5c:f3:ce:cd:a0:78:e1:1d:c0:ef:45:
07:9b:0c:fa:f6:86:e2:1e:80:79:13:0f:07:1a:e2:
7e:0f:13:41:22:53:20:6f:31:66:ce:64:68:7c:c0:
1e:e1:2d:9c:ff:94:81:e6:9e:c2:b0:56:58:2f:96:
ae:26:d5:64:9a:f1:a4:b6:d7:4f:91:78:f2:80:57:
a8:cc:c0:c3:79:bf:e5:7f:c6:36:69:c2:4f:41:16:
6b:fe:bb:bc:83:30:a3:37:95:d3:65:c5:f3:71:02:
b5:65:f1:38:9a:12:91:1f:c3:8a:6d:09:cc:49:06:
fa:3a:09:03:4a:7c:00:26:da:79:57:59:49:3d:53:
c1:71:86:61:85:70:85:23:db:7d:df:e2:73:2b:94:
51:96:5d:0f:43:0b:d9:55:dc:58:0a:a4:bb:70:12:
93:3f:85:2b:f8:31:b0:de:c0:aa:9f:a9:71:39:b5:
d7:b9:e0:4e:05:ad:bc:dd:73:33:a5:a5:5a:26:52:
2f:b7:fb:49:54:4a:d1:d6:3a:db:d4:c5:22:49:3e:
1f:99:73:b5:98:39:13:ba:ea:fa:c9:2d:7c:59:74:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1A:E7:47:06:33:37:82:29:79:77:46:4B:A3:61:0C:8E:F8:25:63
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/dhrnRwYzN4IpeXdGS6NhDI74JWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.181.0/24
Signature Algorithm: sha256WithRSAEncryption
32:42:e8:6a:e1:69:f2:e4:57:ef:83:bf:2d:6c:27:96:10:48:
f8:64:49:11:e8:79:68:a6:47:b6:11:86:6b:39:94:af:a3:73:
71:10:21:48:47:81:77:49:b0:5f:02:35:f5:af:10:2a:af:85:
7b:ed:96:10:41:81:da:3d:9c:4a:c7:00:e3:a1:69:6e:51:9d:
f5:2b:5e:af:fc:91:49:35:4c:02:76:42:c2:9b:58:8c:7d:8c:
c4:ef:7b:b5:d4:33:5d:0d:7c:84:40:45:93:f6:c1:2d:19:4e:
7a:02:ae:92:5e:a2:61:05:76:08:53:63:ca:4d:a6:2a:03:be:
18:20:25:9a:d3:42:39:ab:b5:62:c4:41:73:e5:4b:64:9d:b8:
94:92:23:e5:e1:35:4b:f0:ae:87:d1:72:b4:9f:7c:1b:45:22:
6a:a3:cf:41:0f:70:3c:8b:8e:3a:1d:a8:e8:08:fd:dd:9e:dd:
f7:3d:5a:26:6e:db:89:ef:08:9a:b8:a9:ba:05:0c:08:f3:33:
63:36:e3:fd:8c:61:da:1f:f1:ea:0f:46:8b:6c:ad:43:28:09:
d3:33:ff:03:ec:dd:84:1c:51:ef:bd:a2:f7:b4:6d:07:36:a2:
10:d5:48:19:1d:83:99:1a:94:7d:85:61:91:87:bc:43:f0:49:
a2:73:a8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:00 2024 by rpki-client on console-fra.rpki-client.org