Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/9xbE3X2x0jOOoynZ4S0Pidia68Y.roa
File: 9xbE3X2x0jOOoynZ4S0Pidia68Y.roa (raw, json)
Hash identifier: CDeojCUZIubPmsCiqfY95yhuWPSruY1a6buG4rEk8Jo=
Subject key identifier: F7:16:C4:DD:7D:B1:D2:33:8E:A3:29:D9:E1:2D:0F:89:D8:9A:EB:C6
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 018731BF3BE4D4C97CAA65ECA760DB9272A9
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/9xbE3X2x0jOOoynZ4S0Pidia68Y.roa
Signing time: Thu 30 Mar 2023 09:00:28 +0000
ROA not before: Thu 30 Mar 2023 09:00:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.63.34.0/24 maxlen: 24
185.63.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Apr 2023 20:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:31:bf:3b:e4:d4:c9:7c:aa:65:ec:a7:60:db:92:72:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Mar 30 09:00:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f716c4dd7db1d2338ea329d9e12d0f89d89aebc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9e:c3:de:c9:3a:db:99:5b:34:4a:f7:fe:3e:
5a:54:8d:fd:2f:71:a9:1d:2a:26:e0:d3:e3:74:b1:
d9:3b:8e:17:d1:cd:10:a5:a5:85:46:71:9d:30:20:
64:91:4b:07:6b:3d:57:ac:6a:ad:aa:d7:8f:07:c0:
e6:5f:2c:a9:a1:11:cf:74:46:41:cd:9e:fc:0c:d6:
52:85:d7:6e:00:8e:c1:4a:ee:c8:47:8d:2c:f6:a4:
e8:aa:7e:d1:11:cd:d1:ed:78:e1:3b:36:c2:1f:24:
8c:dc:38:d5:af:36:a0:2f:ed:c5:ea:87:d1:cd:4b:
a9:2b:0e:f2:6e:1a:10:62:33:54:9e:be:20:28:1c:
f3:23:2b:e5:0f:4a:45:1f:08:0d:60:b2:4a:0c:db:
c0:d2:d4:91:3a:bc:43:6d:ea:f5:c3:34:d4:d2:8c:
29:89:76:1a:53:c6:61:6b:9e:61:27:5f:8d:e3:f7:
c8:17:0d:d8:18:4f:fd:43:60:ed:a3:93:9e:80:45:
43:90:ae:8c:3e:1f:48:91:1f:82:14:61:79:f6:d4:
2e:da:07:01:c9:55:56:73:10:aa:49:78:37:1e:34:
cf:ef:36:ae:c0:d8:93:5d:18:00:2a:ba:5d:35:8b:
a1:0f:5b:a0:87:68:dc:ed:d5:03:3e:c0:bb:29:e9:
b3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:16:C4:DD:7D:B1:D2:33:8E:A3:29:D9:E1:2D:0F:89:D8:9A:EB:C6
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/9xbE3X2x0jOOoynZ4S0Pidia68Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.34.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:d3:3e:1f:41:f9:a2:6f:7d:3f:4c:2c:19:75:a8:82:fd:9d:
fe:e3:2c:a5:e8:98:f8:b7:64:96:e1:a4:1c:1c:b5:36:80:7f:
c4:cb:84:10:a5:b3:19:41:65:71:86:76:39:93:5c:73:3c:78:
f5:60:ea:35:09:03:30:bc:ea:fd:97:bb:74:3c:a8:e1:e1:bc:
5a:c8:f7:1e:35:63:4c:fd:a2:9f:df:0d:a5:75:0a:26:18:a5:
1f:de:d8:16:8c:89:75:fe:09:7b:40:90:e6:3c:ec:ae:c6:56:
59:33:0e:6e:c9:65:ef:36:3f:21:70:4c:0a:6f:f4:3a:85:82:
d4:fb:c4:01:97:aa:65:a0:c9:31:83:6f:37:d2:ba:de:d6:ba:
0b:99:74:cc:4d:fc:20:f4:21:53:8a:32:ac:ef:4b:eb:a2:68:
8b:69:07:b9:2b:73:85:9e:83:4b:16:99:a4:c6:d8:84:99:c2:
e4:94:66:f1:79:64:5e:67:be:c9:f9:97:83:cc:10:1e:d6:60:
a9:bc:8d:67:64:e3:f9:c9:9b:5c:8b:ff:37:47:0f:bc:3d:a7:
b7:39:34:bc:7d:be:c8:9a:0a:0d:ca:a8:74:22:4a:3e:35:76:
9a:f3:5f:f3:c6:3f:10:c1:9f:eb:27:82:1d:b8:91:59:b1:77:
7e:6d:2e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:48 2024 by rpki-client on console-fra.rpki-client.org