Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/T_nBupTrf-5MvdRoIYGqzPPPr4Q.roa
File: T_nBupTrf-5MvdRoIYGqzPPPr4Q.roa (raw, json)
Hash identifier: YLnqfV9tfwqexZLAUyKQSWH/hJhfeGnTXGdazWbDMFo=
Subject key identifier: 4F:F9:C1:BA:94:EB:7F:EE:4C:BD:D4:68:21:81:AA:CC:F3:CF:AF:84
Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial: 018570CBD72E0DCEFAD33C4DB542CFA2F3DC
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/T_nBupTrf-5MvdRoIYGqzPPPr4Q.roa
Signing time: Mon 02 Jan 2023 04:44:45 +0000
ROA not before: Mon 02 Jan 2023 04:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.7.73.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:d7:2e:0d:ce:fa:d3:3c:4d:b5:42:cf:a2:f3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
Validity
Not Before: Jan 2 04:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ff9c1ba94eb7fee4cbdd4682181aaccf3cfaf84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:66:00:c4:0f:1d:11:e6:15:51:f3:59:4a:42:
6f:2b:13:46:86:9b:31:57:e2:d0:66:38:07:0e:bd:
c9:f8:02:0e:52:ff:47:d0:bf:81:da:61:55:57:a6:
c9:24:a8:fe:57:dc:41:b3:c8:4f:74:2c:dd:00:3d:
42:5e:bc:9b:01:c2:36:7d:0b:c2:4a:c4:ae:d7:e0:
3c:a3:fb:6e:ce:ee:b5:97:92:bd:6a:15:d2:94:07:
ed:6e:61:24:e5:16:90:67:86:5c:98:54:7e:ae:e7:
5d:d3:22:fb:3b:44:dc:c9:41:03:2d:ad:c6:14:eb:
6a:0e:13:e5:14:38:27:07:8d:16:b0:51:bf:b3:b4:
12:53:1f:3c:25:76:85:24:26:90:70:e8:7b:7e:39:
85:bc:a6:19:56:bb:f4:51:4e:94:d9:14:c7:ac:b3:
0d:ab:e2:8e:01:4c:de:7d:d1:ca:ba:66:46:bc:2f:
23:91:53:bd:0f:7f:3f:4c:a7:0c:5e:08:37:d2:30:
3c:d5:36:62:6b:1d:6c:fa:0f:b9:59:66:2b:d1:d7:
48:4f:71:61:58:ef:b4:b1:6e:05:b2:97:1b:76:05:
94:be:44:e3:eb:5b:2c:6e:6f:df:61:24:45:73:8b:
80:c1:2e:a1:c8:ef:09:bd:a6:70:06:c6:14:bd:2e:
f0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F9:C1:BA:94:EB:7F:EE:4C:BD:D4:68:21:81:AA:CC:F3:CF:AF:84
X509v3 Authority Key Identifier:
keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/T_nBupTrf-5MvdRoIYGqzPPPr4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.73.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b0:43:54:3a:ec:e2:f0:15:13:4f:30:09:19:a2:f2:fe:ed:
3a:0e:11:2b:c8:1b:de:c7:e5:3a:32:a9:d7:80:89:72:be:f2:
dd:9b:59:96:1c:05:8d:a3:6f:75:ab:12:3a:7e:d7:19:d9:eb:
25:86:30:1e:d5:eb:04:35:ad:a5:ff:1e:9a:83:27:67:11:a2:
f1:20:09:73:cb:95:7f:b0:11:3c:20:38:8d:35:ba:03:5f:46:
b9:26:ca:84:bd:7e:cb:95:2a:a8:76:60:d2:a9:a9:d0:6b:f0:
9b:b2:0d:ae:d1:aa:ef:a8:77:d7:14:03:e1:c5:81:14:da:7f:
88:56:0f:2d:ae:14:e4:85:cc:f2:c3:5a:87:34:09:b0:12:74:
df:2c:a8:d4:63:ab:e7:8a:ef:19:f9:4b:7a:58:13:07:88:7a:
af:8a:08:d9:8c:c3:ef:5e:79:c0:f5:39:20:7c:b7:89:e7:8f:
87:4c:94:f4:d3:9e:f4:19:c6:88:0a:16:d7:bd:9a:0d:dd:f7:
85:ac:70:f3:8e:e0:1e:32:4d:c6:3a:34:00:a4:75:47:dd:4b:
e2:b6:4f:47:d6:4b:90:20:ec:0f:40:5f:31:e9:a2:2c:f6:83:
d5:6b:87:fd:45:46:0a:9c:59:36:19:73:a6:c9:83:13:2f:f9:
af:36:b5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:53 2024 by rpki-client on console-ams.rpki-client.org