Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/k_7sSjX6HPPfCyuYkyo8BMh7zcA.roa
File: k_7sSjX6HPPfCyuYkyo8BMh7zcA.roa (raw, json)
Hash identifier: UjbERNSAANTSjkRHoMobxDAk0Oam+vbQIlMM6BJfi4o=
Subject key identifier: 93:FE:EC:4A:35:FA:1C:F3:DF:0B:2B:98:93:2A:3C:04:C8:7B:CD:C0
Certificate issuer: /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial: 01856CCAF4644039B215E04F5E48DA67FD38
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/k_7sSjX6HPPfCyuYkyo8BMh7zcA.roa
Signing time: Sun 01 Jan 2023 10:05:18 +0000
ROA not before: Sun 01 Jan 2023 10:05:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48029
IP address blocks: 185.208.76.0/23 maxlen: 23
185.208.77.0/24 maxlen: 24
185.208.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:f4:64:40:39:b2:15:e0:4f:5e:48:da:67:fd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Validity
Not Before: Jan 1 10:05:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93feec4a35fa1cf3df0b2b98932a3c04c87bcdc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:f9:4b:d8:bf:91:4e:15:89:4e:54:9f:20:
6f:56:e9:a8:59:b0:9b:93:ca:ac:3a:6d:d7:44:73:
4d:d9:4b:56:5d:29:41:a3:7e:eb:6c:6b:66:bf:55:
a5:aa:ed:77:4c:45:2a:a2:e6:0e:fb:27:4e:71:00:
ce:35:4d:d4:7c:bc:6a:d5:dd:1a:7e:37:7e:4b:56:
b2:52:4a:2f:84:18:a4:cb:f7:41:92:79:33:99:13:
bc:eb:6a:d1:f0:5b:e8:75:89:61:be:7f:2d:cc:1e:
fd:ab:ed:d0:86:92:93:06:eb:97:6a:c9:fa:c9:2c:
1d:6a:a5:eb:12:6b:7c:37:98:1c:58:d7:dc:b8:5a:
28:bb:6b:28:36:e9:8e:ff:c0:22:c2:6e:9a:c3:e1:
e8:b4:ea:a7:63:92:92:80:e4:50:f4:3d:1c:59:13:
0d:ea:26:c6:41:e5:b3:a0:7e:f4:9b:be:a3:f5:9c:
a3:9c:f4:67:17:2e:ff:96:ca:13:cb:ef:40:62:4a:
63:20:31:3b:ac:85:e9:1a:ac:b3:31:91:04:cc:39:
2e:11:95:1d:24:ac:8c:49:b9:f8:80:68:89:ba:90:
2b:c8:b7:2e:bd:2b:d9:99:63:fe:2d:e1:e1:74:bc:
6b:ef:d7:2b:2e:14:fe:ab:3d:0f:3a:81:98:da:58:
55:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FE:EC:4A:35:FA:1C:F3:DF:0B:2B:98:93:2A:3C:04:C8:7B:CD:C0
X509v3 Authority Key Identifier:
keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/k_7sSjX6HPPfCyuYkyo8BMh7zcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.76.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:de:67:1e:d1:d6:76:ec:45:a5:66:af:d3:59:1d:5c:2d:85:
00:2c:29:5b:2f:f3:55:62:05:a7:77:8b:cb:e5:d3:66:ed:f2:
fd:82:00:2c:05:53:c6:4c:93:e3:8d:d2:01:b8:b7:70:cc:5a:
4b:c7:27:d7:24:7a:ba:68:23:61:34:38:ef:f0:3e:1e:8b:e4:
35:1a:a3:6b:b3:82:1a:1a:d6:71:19:7c:de:d8:0d:ae:d2:b2:
4e:ca:13:ed:42:b4:16:6e:7b:e2:32:ee:d3:bd:69:ff:38:64:
b1:ae:4e:ff:d2:21:ce:c4:05:74:53:cc:fb:2e:c8:a8:77:bd:
68:e9:55:53:7e:b5:d4:82:af:f0:a7:bc:1c:8e:c2:54:ba:6a:
51:2d:8a:1c:4a:c5:c6:66:d3:ca:c6:59:6c:7a:a3:c4:2f:1e:
11:73:07:d7:d2:7c:a4:66:a7:0d:7c:42:b5:97:ba:4a:ae:85:
66:a6:5d:fc:3b:f1:52:ee:83:c9:ec:bc:97:03:87:41:f2:96:
be:e6:e8:95:64:c9:cc:64:e4:f1:5b:50:65:e6:c7:10:9a:47:
50:06:b0:c0:ef:e8:c2:19:bd:74:3f:a2:e3:3e:8b:e1:ac:73:
a6:28:37:36:55:39:44:15:cb:f4:d0:93:0c:b2:12:1d:b0:c6:
05:d1:ad:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:07 2024 by rpki-client on console-fra.rpki-client.org