Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/7avGfqc0sn55PRLhJGm3jRHdsAY.roa
File: 7avGfqc0sn55PRLhJGm3jRHdsAY.roa (raw, json)
Hash identifier: ueEhHMk6c7DAJYXPiFLCev6mkcVPzQDhYeD3sTy6wpI=
Subject key identifier: ED:AB:C6:7E:A7:34:B2:7E:79:3D:12:E1:24:69:B7:8D:11:DD:B0:06
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0186DBD1A1889E6FED15218C2BD1AFF4E0EC
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/7avGfqc0sn55PRLhJGm3jRHdsAY.roa
Signing time: Mon 13 Mar 2023 16:33:13 +0000
ROA not before: Mon 13 Mar 2023 16:33:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 185.81.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:d1:a1:88:9e:6f:ed:15:21:8c:2b:d1:af:f4:e0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Mar 13 16:33:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edabc67ea734b27e793d12e12469b78d11ddb006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5d:8a:44:17:39:44:04:b6:82:99:b6:23:c9:
7d:1a:93:90:c7:6d:80:db:e7:eb:e0:3c:19:b2:37:
a2:de:49:5e:b4:89:0a:9d:e3:c1:86:7d:ec:aa:13:
b9:dd:d8:53:4f:49:79:48:54:96:bd:6f:88:0e:13:
8b:74:1b:e7:d6:78:8a:ac:5c:2b:2a:36:48:50:c7:
60:ea:b6:16:a6:c9:71:b5:0f:24:88:f1:e8:b1:96:
35:44:ea:31:0b:eb:2e:48:17:d9:48:23:26:67:0c:
56:86:99:cb:8a:d5:ba:bf:ac:0e:15:5b:5f:c0:d0:
e1:dd:df:e4:4b:33:b1:aa:32:51:91:b3:d1:82:e1:
68:57:4a:0c:46:3d:55:8a:d9:a6:91:0f:b6:47:f8:
51:72:61:a7:36:f4:da:01:8b:b5:56:0c:7c:69:b3:
f2:3d:32:9c:b6:9f:c8:b7:92:de:d7:4f:cc:53:67:
6e:12:ac:6a:28:bb:cf:a5:c5:73:1a:c4:0c:4a:ff:
92:30:c0:77:59:a0:ca:b4:00:1c:66:e2:04:61:66:
12:df:7f:bc:d0:d3:15:93:27:7f:ac:08:5e:d5:d7:
75:8f:0f:8b:52:3c:5c:6a:fc:ae:90:25:58:4f:e6:
56:65:69:aa:5e:b2:06:fa:bd:26:01:ce:34:13:65:
53:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AB:C6:7E:A7:34:B2:7E:79:3D:12:E1:24:69:B7:8D:11:DD:B0:06
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/7avGfqc0sn55PRLhJGm3jRHdsAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.183.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ca:17:95:4b:f1:61:96:e1:c3:9c:63:ed:a8:ec:e4:f2:95:
a8:70:8d:97:1b:19:99:3b:b6:4e:fc:1f:fb:67:43:11:fc:e4:
a2:8c:b8:d3:ba:0b:36:91:c8:0c:ac:f4:57:54:53:6e:10:ce:
6a:ed:d8:07:27:39:01:c9:e5:4a:4d:11:cb:fd:a1:d8:1c:7d:
14:cf:a6:e0:af:6d:1a:fb:c8:e3:72:5d:28:bb:40:98:be:e7:
a6:87:9a:8f:07:f8:38:db:92:50:4a:59:a9:2d:98:1f:ee:a5:
28:df:34:d5:ee:3e:cc:55:49:71:06:f4:71:69:9e:a0:40:96:
07:d3:4b:28:e4:b6:08:f0:08:bf:bd:14:29:e0:3c:f8:55:c6:
9f:88:33:90:52:ea:e1:79:0c:23:0e:f8:8f:a4:e3:97:f0:a4:
b7:74:2c:5b:fb:a7:d4:53:74:c6:9a:3b:94:e1:d9:a4:7a:42:
88:0f:36:f3:48:5f:fb:d8:46:e2:30:ca:09:47:ed:6d:f6:e8:
36:a0:54:0c:99:e4:88:91:aa:b5:76:83:fe:00:02:84:96:f4:
68:09:f6:59:da:cd:eb:f0:a7:2c:f4:a0:51:e8:3f:07:a0:89:
c4:2b:c8:c4:0f:d1:b0:da:bc:88:3e:b1:11:3d:30:cf:55:58:
1f:c3:e6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:19 2023 by rpki-client on console-fra.rpki-client.org