Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/M7e6cTc48c5-tZIhNVmafQFpFno.roa
File: M7e6cTc48c5-tZIhNVmafQFpFno.roa (raw, json)
Hash identifier: nqgDyIfYsEiJlOAulFqEu4HPihaBtnIjCEk4fxyhNqo=
Subject key identifier: 33:B7:BA:71:37:38:F1:CE:7E:B5:92:21:35:59:9A:7D:01:69:16:7A
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 01878E374D3CCDF012757253E0E8C532B156
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/M7e6cTc48c5-tZIhNVmafQFpFno.roa
Signing time: Mon 17 Apr 2023 07:56:41 +0000
ROA not before: Mon 17 Apr 2023 07:56:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12357
IP address blocks: 185.195.179.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:37:4d:3c:cd:f0:12:75:72:53:e0:e8:c5:32:b1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Apr 17 07:56:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33b7ba713738f1ce7eb5922135599a7d0169167a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:7a:c7:c0:07:7b:fe:a5:53:da:d9:9b:20:
da:fb:08:bb:0b:33:63:73:41:d1:b4:26:68:a3:e0:
01:b3:d7:80:e5:cc:c6:9c:de:ae:20:79:d4:5a:90:
30:bd:d1:d7:34:d1:d5:dc:f2:4f:67:9a:87:1a:da:
82:90:46:25:51:9f:37:fe:0d:75:66:35:90:1f:55:
5f:d5:4b:d1:a0:9e:9a:37:7d:36:09:29:4f:91:e1:
62:70:db:26:ac:ed:88:32:c0:2f:3c:87:88:6b:86:
8a:ac:48:d5:7e:be:fc:70:53:df:2a:ea:8a:cb:52:
30:64:be:98:5c:ae:f6:6d:48:41:aa:4a:79:2b:94:
b4:5a:cb:68:5f:fa:a2:f5:16:42:38:de:c4:57:41:
43:ce:32:13:2c:bc:bf:6b:23:58:d0:55:50:31:9d:
12:88:59:95:0b:4a:19:b8:6b:e8:d3:31:cc:3c:aa:
72:f3:1a:5c:92:8a:a3:54:af:40:89:0d:0f:ff:30:
41:4a:21:32:5c:b2:dc:a5:6c:87:b7:3b:a0:fc:14:
0e:bf:d9:51:01:99:74:ad:ee:b8:56:9a:a2:dd:0b:
12:8f:34:73:e7:4c:68:a7:ce:29:71:b8:46:8a:87:
4e:d3:2b:aa:3d:00:08:66:9c:99:4f:34:b0:e2:a1:
ca:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B7:BA:71:37:38:F1:CE:7E:B5:92:21:35:59:9A:7D:01:69:16:7A
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/M7e6cTc48c5-tZIhNVmafQFpFno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.179.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e5:6a:40:40:fe:61:8c:80:82:85:d4:9c:20:0a:ca:ae:b3:
77:67:16:aa:51:ee:c3:99:36:fa:33:ba:33:d3:03:82:b4:9f:
e6:fa:a5:24:4c:65:7c:e7:06:76:8d:3d:8a:0c:db:25:c4:84:
df:9e:1f:cc:66:3d:fe:dc:3e:27:ef:a2:44:ec:19:1d:f8:7e:
76:17:91:cc:2b:c4:49:03:d3:c0:9a:b6:de:80:14:8e:9d:90:
49:07:bc:2c:e5:c8:4a:4f:0a:73:ab:89:e2:93:6a:60:f2:59:
0a:51:6d:d1:35:95:ab:17:cb:dc:fb:2e:db:dd:5f:60:d9:7b:
b5:81:85:90:69:cf:86:c1:11:a9:eb:d3:b3:91:ca:5b:6c:c8:
0f:ac:98:06:f0:43:61:a3:69:81:c7:3f:23:df:24:a1:04:1d:
5a:b2:dc:2b:52:5c:f4:55:b2:0c:de:01:0f:9c:13:eb:64:99:
6d:a1:86:60:60:c4:43:b5:a0:89:e6:18:e8:46:75:0d:8d:e4:
e8:45:8b:6a:0a:7a:83:00:15:51:2d:a5:a9:be:f4:8f:c6:da:
ed:b4:90:f9:ad:33:66:1f:af:ae:bc:8c:28:65:59:3c:c2:07:
b3:e7:71:66:21:f6:b5:8e:6b:f4:6d:47:c8:d1:1d:3a:a4:c6:
35:3f:f9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 05:57:18 2023 by rpki-client on console-fra.rpki-client.org