Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/7hsVHE_FgjGu0DJDLsL1XeSv-k4.roa
File: 7hsVHE_FgjGu0DJDLsL1XeSv-k4.roa (raw, json)
Hash identifier: 7kbjEsrLP3JzqQx1C4hM4hFFvq16EFbfMD2gf8X55gY=
Subject key identifier: EE:1B:15:1C:4F:C5:82:31:AE:D0:32:43:2E:C2:F5:5D:E4:AF:FA:4E
Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial: 01856D2F2EE691D287B23CC4DCF1E3E841EF
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/7hsVHE_FgjGu0DJDLsL1XeSv-k4.roa
Signing time: Sun 01 Jan 2023 11:54:46 +0000
ROA not before: Sun 01 Jan 2023 11:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.1.94.0/24 maxlen: 24
2001:7f8:b6::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:2e:e6:91:d2:87:b2:3c:c4:dc:f1:e3:e8:41:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298354861973728ce2be505f7270a4364d94e691
Validity
Not Before: Jan 1 11:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee1b151c4fc58231aed032432ec2f55de4affa4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:96:e0:21:8a:1d:e1:6f:8b:31:25:91:aa:
53:a9:76:be:4d:b1:24:fe:d6:7e:58:20:95:b1:e5:
17:2a:3d:81:06:c9:b0:99:61:05:24:f2:db:af:c8:
f0:66:84:62:90:f0:cb:f0:fc:ee:d7:9b:39:8d:30:
ed:1b:6a:8e:e5:af:80:d5:0b:0e:43:d1:a1:86:67:
fd:ce:0a:02:3e:05:bf:b8:09:c8:54:ad:95:57:e7:
3e:d9:52:45:63:77:c8:28:f7:99:24:0d:c0:52:60:
a2:fd:d7:be:c5:f9:84:df:ff:23:81:df:2f:a0:c8:
99:0d:2a:9b:8f:62:95:a5:0f:f5:ed:5c:7f:27:cb:
dd:45:0e:b2:b3:56:51:af:02:24:92:b4:9e:5a:e4:
93:3a:65:8d:3d:86:c9:05:04:5b:d9:fd:6a:73:55:
c4:73:41:09:4a:d9:5e:f0:bb:9a:02:3f:48:30:da:
4c:88:75:94:f6:7e:78:a8:09:97:64:ed:d0:22:1b:
cf:a5:a2:05:83:45:e2:0a:47:62:13:28:f6:6a:ff:
1f:ef:a9:b8:18:78:76:f7:69:f7:6a:1f:cf:5e:82:
ee:f4:19:c6:2f:33:ec:54:41:9d:ef:90:47:7c:33:
36:83:54:78:73:c5:89:3a:26:c3:3f:d8:de:41:38:
a8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1B:15:1C:4F:C5:82:31:AE:D0:32:43:2E:C2:F5:5D:E4:AF:FA:4E
X509v3 Authority Key Identifier:
keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/7hsVHE_FgjGu0DJDLsL1XeSv-k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.94.0/24
IPv6:
2001:7f8:b6::/64
Signature Algorithm: sha256WithRSAEncryption
9f:96:a5:00:cd:34:c3:31:2d:16:83:6b:76:74:f1:1b:18:29:
4c:1f:3b:12:d6:3a:df:cf:f5:47:ff:f6:9d:be:ff:55:c1:21:
02:db:5e:a0:e4:a6:cd:e2:10:1f:89:ee:56:a5:c6:ad:85:91:
e4:91:ff:1f:01:5c:e6:b5:ab:cf:a5:41:52:cc:18:84:34:0f:
5e:fa:4c:78:79:56:68:03:3b:05:3b:0f:07:3c:bc:63:af:14:
7b:58:ed:b9:63:ed:e3:a7:a9:65:06:f9:97:4e:bd:90:fc:21:
64:fa:96:85:e7:44:69:76:db:2f:9d:62:93:28:6f:0e:21:f8:
0d:32:fb:d4:02:da:c5:54:59:38:04:23:e8:27:79:cf:bc:c1:
83:80:89:4e:84:e2:ad:a0:2e:88:82:05:da:43:8c:c0:c1:23:
d8:ac:0e:25:6f:99:c6:8d:4f:b5:d1:a8:08:20:f4:b1:25:5f:
5a:8d:38:df:1b:65:16:b9:3e:c7:37:d8:a7:b6:d6:0d:c4:28:
16:95:ac:79:c6:75:09:f9:5f:4e:f1:79:ba:de:63:b2:2b:1d:
63:e6:db:31:96:eb:32:70:e7:b8:cc:47:28:25:6f:2c:82:43:
d3:ef:18:1e:d1:bc:1e:25:d4:81:a5:23:27:b6:27:6f:cd:85:
de:a6:b1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:04 2024 by rpki-client on console-ams.rpki-client.org