Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1xrndYgDh-vz32LV6DjATuC7LH0.roa
File: 1xrndYgDh-vz32LV6DjATuC7LH0.roa (raw, json)
Hash identifier: KVRRhn0/IqCj48Y59X3DvF7tpmJveQTMyIjDF3v0IGQ=
Subject key identifier: D7:1A:E7:75:88:03:87:EB:F3:DF:62:D5:E8:38:C0:4E:E0:BB:2C:7D
Certificate issuer: /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial: 01857227E6E749274980C2D2212A2FEA5203
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1xrndYgDh-vz32LV6DjATuC7LH0.roa
Signing time: Mon 02 Jan 2023 11:04:55 +0000
ROA not before: Mon 02 Jan 2023 11:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204865
IP address blocks: 185.237.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:e6:e7:49:27:49:80:c2:d2:21:2a:2f:ea:52:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Validity
Not Before: Jan 2 11:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d71ae775880387ebf3df62d5e838c04ee0bb2c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d0:21:d2:4f:d8:d9:19:62:c7:5c:6e:c5:05:
a3:cf:77:9c:bc:82:d4:ce:1e:9b:db:da:6a:d6:7c:
1a:e2:43:3f:fe:24:3d:ae:04:0b:33:8e:97:0d:f1:
18:9a:a5:f4:32:ca:d6:54:58:5a:8d:31:51:44:78:
b1:ab:1f:ef:c1:4c:f2:c9:bc:ac:55:1c:8f:de:7a:
d6:7d:e0:8c:41:df:a3:4a:6a:88:fc:58:a7:26:d8:
98:a5:e8:8a:55:a7:06:ef:37:bb:d0:0a:4e:55:b4:
fc:b6:1d:90:18:a5:e0:db:d5:b8:14:96:a9:48:64:
f7:18:f0:13:fc:46:b4:4a:73:2a:92:90:c0:64:74:
e9:1f:eb:29:c9:95:be:04:b8:e0:50:d2:8d:20:3c:
a1:3f:9d:51:4a:22:72:b4:17:14:65:98:83:c1:d5:
9c:4b:ed:46:4d:bd:c8:70:bd:71:46:73:48:88:16:
37:27:4a:10:0f:85:c5:6b:06:8b:b7:62:e5:69:80:
15:71:55:90:b4:0d:df:ed:c6:7d:a0:a6:5c:c8:78:
31:6a:11:d9:45:ac:42:cd:1d:1f:54:e7:30:02:84:
3b:52:20:09:f8:a7:84:3c:5d:56:1e:45:74:d9:ad:
b8:c5:c5:c7:5f:76:3a:42:ac:a9:7a:40:9c:82:3a:
ce:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1A:E7:75:88:03:87:EB:F3:DF:62:D5:E8:38:C0:4E:E0:BB:2C:7D
X509v3 Authority Key Identifier:
keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1xrndYgDh-vz32LV6DjATuC7LH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.85.0/24
Signature Algorithm: sha256WithRSAEncryption
41:bc:8c:cc:5a:e6:95:32:4b:73:9e:19:4b:8c:d8:29:d9:17:
9b:94:ed:38:ba:ba:94:bd:92:da:73:3e:2a:29:ac:e8:75:f7:
5a:c3:42:9c:ce:c9:9d:7a:58:27:11:ed:13:6c:c1:d3:e2:99:
7a:dd:55:d4:a1:f1:9a:c9:e9:d9:f5:28:a3:96:47:34:c8:30:
08:e1:af:ff:5a:f3:6c:ad:c7:1a:3b:9d:0a:62:c0:c8:c3:f9:
f0:86:6b:ba:13:c0:a6:53:1e:b2:46:2f:b7:2f:1e:22:26:d7:
7c:e5:14:2b:8d:05:d8:86:10:a8:dc:dd:30:42:80:87:4d:82:
23:04:33:34:2b:0e:17:3d:21:03:e3:60:7a:b3:44:ca:f4:9c:
d0:4e:bb:60:68:47:79:58:b4:9b:e0:e3:bd:4f:95:92:64:a4:
04:28:2c:54:2c:e3:13:d6:dc:27:e1:b3:aa:55:b4:7f:bf:cf:
2e:69:01:2b:29:44:db:fa:0d:45:41:71:f7:fc:65:bc:de:b7:
59:97:4c:10:17:ce:9e:64:1d:f1:7e:c9:5d:88:bc:d3:16:29:
70:ac:e9:e3:19:f0:99:11:26:0c:53:82:14:ed:6f:cf:5a:e1:
47:69:ff:9b:44:23:1a:63:b1:e5:cb:b1:85:bf:92:51:e9:38:
a0:23:c3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:24 2024 by rpki-client on console-fra.rpki-client.org