Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/v7ZQpTqf2TyIk6a6lchFBlXX4G4.roa
File: v7ZQpTqf2TyIk6a6lchFBlXX4G4.roa (raw, json)
Hash identifier: RZrrDXCl/fYUNMNBNpdRFhQwzzRQlsbom5rHiIM/IJ0=
Subject key identifier: BF:B6:50:A5:3A:9F:D9:3C:88:93:A6:BA:95:C8:45:06:55:D7:E0:6E
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 01856E5414AB73A051C022B9E248C8978BA8
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/v7ZQpTqf2TyIk6a6lchFBlXX4G4.roa
Signing time: Sun 01 Jan 2023 17:14:42 +0000
ROA not before: Sun 01 Jan 2023 17:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19437
IP address blocks: 185.18.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:54:14:ab:73:a0:51:c0:22:b9:e2:48:c8:97:8b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Jan 1 17:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfb650a53a9fd93c8893a6ba95c8450655d7e06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:53:81:02:fb:08:53:d9:30:34:54:33:07:
4e:62:70:36:97:67:16:f2:3b:62:87:9d:7d:fb:90:
93:f5:16:d0:69:24:57:3e:25:ad:df:e2:93:00:aa:
9d:1f:59:0b:df:ed:67:32:7b:e6:c0:a6:4a:4c:70:
1b:43:77:88:21:c2:62:d1:98:43:3d:0f:66:c4:05:
4c:80:a7:ec:5f:07:2f:75:85:e1:ab:9d:8e:4a:08:
26:a7:bd:10:1b:ee:d3:eb:bc:e4:58:fb:14:58:1e:
3d:d5:2d:2c:fa:fb:54:df:8c:a3:f3:dd:9f:cf:d4:
c8:2a:06:97:e9:02:d8:21:60:26:f3:f4:e9:d3:fc:
de:57:ea:3a:e5:35:28:cd:d6:18:a9:39:ac:7e:92:
e9:53:53:db:9a:5b:c0:a6:f8:60:b6:c0:a9:6a:0d:
83:0a:06:5c:83:cb:79:c6:2f:75:44:1e:79:5e:80:
e2:50:34:48:bd:45:c8:60:d7:4f:98:be:a3:4d:75:
1f:8c:25:f2:8f:ab:af:33:a3:3b:d1:28:b7:ef:dd:
59:93:63:d2:a1:db:8d:f4:99:d3:76:48:22:d3:63:
bc:ef:93:e3:a4:37:0b:13:b3:04:1d:6c:ae:bc:89:
87:01:61:69:3a:38:32:fd:ef:d2:ca:57:31:55:51:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B6:50:A5:3A:9F:D9:3C:88:93:A6:BA:95:C8:45:06:55:D7:E0:6E
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/v7ZQpTqf2TyIk6a6lchFBlXX4G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.122.0/24
Signature Algorithm: sha256WithRSAEncryption
19:8a:c7:40:f3:88:04:aa:39:b4:cd:69:8d:65:ac:bc:3e:2e:
a7:b5:3c:12:f9:9f:f2:57:27:dd:33:13:13:aa:00:2e:77:d7:
7b:07:52:81:40:c1:5f:83:78:8b:00:b9:5f:c3:d0:99:5f:91:
cd:51:6b:25:4a:b9:80:56:62:72:e3:56:fe:9e:cc:ae:df:65:
b0:1e:a0:7f:d6:af:16:0a:a0:a0:42:27:53:57:c1:7c:f9:c6:
40:f4:41:13:3e:94:f5:cd:1c:a0:85:62:39:e0:be:0a:d5:7b:
02:8e:28:f4:da:05:f0:af:f7:30:83:de:67:74:09:69:86:b9:
69:6e:4c:19:ec:a1:19:bc:52:1c:04:35:1e:bc:ef:8a:1a:1c:
9d:0e:34:a5:c4:09:9f:52:c9:c3:b5:29:5c:13:67:88:de:c4:
db:d9:c6:80:b5:cc:30:a7:8c:de:54:38:cc:da:68:6f:4f:db:
3e:0b:79:93:df:69:a9:f8:de:6f:a0:80:77:9c:a1:20:c4:4a:
c5:42:2d:2c:96:46:0d:35:8b:a4:0c:f3:91:7a:0c:a9:df:7d:
48:85:52:f0:a3:26:d8:4e:84:8e:f9:5a:28:f2:1b:3f:13:d1:
84:85:46:5d:3c:e9:fe:4e:73:f8:92:95:6d:14:34:c2:02:05:
98:68:d7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:05 2024 by rpki-client on console-ams.rpki-client.org