Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/7JXBJ9_aIHEjv38MoTvpeoaDfJY.roa
File: 7JXBJ9_aIHEjv38MoTvpeoaDfJY.roa (raw, json)
Hash identifier: b0JlB7bDPKqkf+3Wr1gv6y21CZ0yPrte5zSn4N+PAuA=
Subject key identifier: EC:95:C1:27:DF:DA:20:71:23:BF:7F:0C:A1:3B:E9:7A:86:83:7C:96
Certificate issuer: /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial: 0185704BE8F26FEEEFDAF091B501A8957260
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/7JXBJ9_aIHEjv38MoTvpeoaDfJY.roa
Signing time: Mon 02 Jan 2023 02:25:01 +0000
ROA not before: Mon 02 Jan 2023 02:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209281
IP address blocks: 185.163.132.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:e8:f2:6f:ee:ef:da:f0:91:b5:01:a8:95:72:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Validity
Not Before: Jan 2 02:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec95c127dfda207123bf7f0ca13be97a86837c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cc:7b:33:33:05:f0:ca:63:f7:2d:00:e7:0d:
22:56:4b:b5:c1:f1:7f:ed:20:75:67:2c:a4:2e:94:
63:f6:b0:5a:84:53:81:9b:32:35:0c:99:f7:10:f3:
8f:f2:44:a7:2a:51:03:50:8c:81:7c:fd:10:e9:c7:
c0:f6:52:e0:e8:3a:ed:5e:97:88:0e:8c:1f:d0:c9:
19:09:4f:e5:2f:fd:e3:38:98:c2:0f:01:8c:11:74:
a0:d3:c7:f0:61:48:6c:72:a2:d9:42:c7:2c:a8:dd:
3e:67:a7:15:23:d0:7e:97:1b:40:8f:88:4a:22:83:
23:37:b7:1f:eb:56:7c:ae:a5:a9:7b:50:36:a9:2a:
00:99:15:c8:c1:28:5a:34:dc:b7:63:17:81:7e:31:
5f:66:7e:3c:8d:f4:74:44:e5:69:5f:93:ff:f1:82:
6f:18:d1:98:84:8b:ae:58:d9:8b:b5:6f:0c:e6:22:
96:a9:55:06:87:b6:dc:45:47:ed:41:ba:a0:0d:ab:
b8:72:de:c8:49:f5:fe:a1:5a:d8:71:08:6d:d2:e4:
6e:dc:a1:07:52:85:a9:5c:ba:4b:3a:a2:7f:f1:a4:
03:06:3d:3c:b0:14:90:cf:9c:b9:d5:1c:02:6a:66:
1e:80:b3:e2:20:d7:e5:a5:8b:45:d4:62:ac:fa:04:
59:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:95:C1:27:DF:DA:20:71:23:BF:7F:0C:A1:3B:E9:7A:86:83:7C:96
X509v3 Authority Key Identifier:
keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/7JXBJ9_aIHEjv38MoTvpeoaDfJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.132.0/22
Signature Algorithm: sha256WithRSAEncryption
23:73:64:61:db:75:2c:7a:5f:13:8d:4d:b0:c2:0f:95:55:7e:
10:04:87:8c:ca:50:44:db:5c:44:6e:8f:f6:51:7d:d2:b6:d3:
9b:ce:24:e7:53:26:9d:e7:68:68:5d:a6:8a:67:7a:56:48:b6:
f9:6b:40:20:2f:fd:b9:7d:80:b5:10:d8:18:55:18:15:2a:47:
6a:b7:a6:5c:b8:37:7a:01:c5:7e:8e:fc:2a:0e:9a:7d:e3:9b:
ed:ce:8f:77:56:c0:6a:50:4d:c1:a8:0d:42:32:ab:2c:1e:ba:
eb:09:8c:69:df:fe:f8:3c:8e:35:0a:e0:e4:05:45:3f:5d:f8:
45:8f:ea:bf:03:ba:56:1a:56:80:df:57:30:cf:bc:2d:25:6b:
7d:a4:65:61:68:0b:e9:4a:8f:23:3c:a9:34:5e:55:71:c8:b7:
65:3f:4d:80:4c:ef:3b:2d:5e:67:e2:8f:e1:6d:56:fd:ca:e4:
db:a9:0e:7b:dc:68:3b:f6:5c:64:49:5f:99:0d:65:9a:4a:a0:
43:a5:3a:a7:39:42:a7:2d:26:bf:11:b0:ae:8e:d4:aa:e6:0e:
68:47:bd:18:3b:bb:05:54:c1:ff:f0:89:52:1d:2b:5e:a6:f2:
8a:04:7d:31:7e:ed:85:a9:8e:77:65:f1:c2:71:07:6c:03:65:
9e:5e:95:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:07 2024 by rpki-client on console-ams.rpki-client.org