Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/fOs-jYa1dZvPnsv40eU43l7BgUQ.roa
File: fOs-jYa1dZvPnsv40eU43l7BgUQ.roa (raw, json)
Hash identifier: AF1vRiRB0qyvCrPhZUXjtKbv+laxjFS1wgOY053YHQQ=
Subject key identifier: 7C:EB:3E:8D:86:B5:75:9B:CF:9E:CB:F8:D1:E5:38:DE:5E:C1:81:44
Certificate issuer: /CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Certificate serial: 018571B0EF354A0BBA64490AD40FE5685CDD
Authority key identifier: EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/fOs-jYa1dZvPnsv40eU43l7BgUQ.roa
Signing time: Mon 02 Jan 2023 08:54:58 +0000
ROA not before: Mon 02 Jan 2023 08:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200635
IP address blocks: 185.100.196.0/22 maxlen: 32
2a06:1900::/29 maxlen: 120
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:ef:35:4a:0b:ba:64:49:0a:d4:0f:e5:68:5c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Validity
Not Before: Jan 2 08:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ceb3e8d86b5759bcf9ecbf8d1e538de5ec18144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0e:16:bd:65:2b:c8:2c:57:5e:4d:bb:ec:75:
97:69:16:02:26:37:43:d0:03:4e:5f:82:82:29:b6:
02:1a:41:73:19:a4:31:12:46:79:6d:94:3d:25:70:
5f:6a:24:a0:a3:3f:c4:6b:9e:7d:65:95:f6:1b:49:
6d:9f:8e:9f:c6:55:09:f7:04:5c:6b:be:72:17:ec:
2e:ab:2c:f8:11:27:dc:a2:b9:94:ec:ac:59:b8:5c:
c4:0a:a2:db:49:33:ff:f2:39:97:b9:b8:69:66:a3:
b2:19:1f:f2:66:d1:08:40:c5:6a:96:d1:21:c7:a7:
5c:f4:f5:1c:01:d5:ee:4c:ad:0d:09:92:9c:05:a4:
09:80:a6:0a:ea:10:47:9a:c3:de:e7:37:41:29:0e:
5e:d4:e3:18:16:e1:72:b6:f1:8c:e4:ec:05:f2:48:
3b:f3:81:12:4e:10:58:43:cc:a8:2a:2d:c5:8d:48:
d0:34:4a:f3:18:79:70:74:51:55:0d:7f:b3:cd:2e:
1f:e0:b7:83:9b:5e:18:09:72:cd:d1:68:df:71:89:
89:14:01:6e:57:f5:3c:04:f2:69:af:f2:fd:db:05:
82:40:57:0c:f3:f1:93:bd:48:f0:21:af:3a:c3:98:
99:3f:a6:dd:ea:f2:81:7c:9f:6d:89:3a:42:df:66:
21:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EB:3E:8D:86:B5:75:9B:CF:9E:CB:F8:D1:E5:38:DE:5E:C1:81:44
X509v3 Authority Key Identifier:
keyid:EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/fOs-jYa1dZvPnsv40eU43l7BgUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.196.0/22
IPv6:
2a06:1900::/29
Signature Algorithm: sha256WithRSAEncryption
52:e1:d0:f8:c6:76:e6:da:ea:e1:fc:a9:da:8d:ed:0f:d7:14:
65:de:4d:39:48:11:1a:2a:c9:d9:f3:99:97:af:a2:4e:03:5a:
df:86:09:e2:2b:e2:e4:ed:2d:16:48:58:95:26:0f:d3:4d:b7:
06:85:bd:eb:00:8c:82:a6:b8:73:0b:c8:9f:b0:4c:0f:3e:28:
9a:b2:30:77:d8:05:5d:b4:a9:49:77:ff:60:f4:c4:8e:43:66:
4a:f4:cb:75:1e:ac:41:6e:07:49:0c:d4:8e:2d:b2:93:ec:0f:
19:54:7e:f4:0c:aa:10:c0:ad:b4:88:a5:28:84:45:ac:3c:45:
96:f4:e1:67:aa:1e:06:3f:08:3b:22:43:63:88:fb:b4:4d:5a:
2d:01:7a:0c:e2:c7:41:96:e8:e3:bd:da:43:d7:21:af:a6:3b:
e0:17:3f:12:e3:93:41:34:43:ba:ba:5e:78:e1:76:1a:9f:a1:
3a:8c:a7:29:35:82:8a:ae:59:ff:cf:17:1f:eb:2c:6c:40:d9:
f7:55:cf:55:89:8a:03:a5:83:51:02:79:85:24:ff:4e:70:5a:
ed:c2:09:cf:e1:1f:12:52:63:2b:a0:d0:30:19:b0:b1:00:6b:
99:5b:b8:13:32:d3:cd:8a:42:0e:0c:d1:a6:29:ee:12:9b:d2:
2a:b9:fa:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:29 2024 by rpki-client on console-ams.rpki-client.org