Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/P3P7racpgBe-SPEk-mL_repe_pk.roa
File: P3P7racpgBe-SPEk-mL_repe_pk.roa (raw, json)
Hash identifier: 6lTvAegHmvkxkFein89vXvLg4upg3jcuwKCwqcIH+4s=
Subject key identifier: 3F:73:FB:AD:A7:29:80:17:BE:48:F1:24:FA:62:FF:AD:EA:5E:FE:99
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0185D962502328141C9CA0E168103D551D5B
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/P3P7racpgBe-SPEk-mL_repe_pk.roa
Signing time: Sun 22 Jan 2023 12:09:36 +0000
ROA not before: Sun 22 Jan 2023 12:09:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60976
IP address blocks: 185.3.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d9:62:50:23:28:14:1c:9c:a0:e1:68:10:3d:55:1d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 22 12:09:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f73fbada7298017be48f124fa62ffadea5efe99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:55:b1:c2:e8:ef:bb:af:fa:bb:10:df:26:3c:
0d:07:14:63:40:a1:e5:92:62:ae:9a:51:2d:62:fb:
f4:ce:07:77:90:9d:aa:86:79:48:12:30:01:e4:4f:
56:d7:20:57:f1:ce:1b:ce:db:d7:bd:69:f9:c7:88:
bc:e9:63:2d:63:28:c8:5a:78:b9:16:b8:a2:77:8b:
29:c5:ef:1c:3d:48:60:e4:71:5b:fe:c4:14:9e:ed:
d1:21:47:19:22:e9:b2:0a:45:1c:b5:9c:04:4e:a1:
dd:d1:d9:9a:0c:14:46:05:80:6c:db:cd:31:ee:72:
c6:aa:50:bc:9c:b2:7c:62:cd:45:3b:c4:76:07:da:
c2:fe:ab:1d:ca:d5:84:3c:9d:35:a5:37:68:c0:f7:
d8:15:2f:ac:64:cd:22:6e:d6:56:c1:2e:25:0a:10:
88:1a:d4:ea:bf:f9:79:f3:aa:d9:f4:c8:53:6d:04:
16:be:c7:65:77:91:4a:03:d5:93:b1:eb:04:54:2b:
81:a7:9c:50:de:75:e8:da:c0:1e:56:76:f2:3e:9d:
27:60:0b:26:9a:00:ef:5e:28:da:40:8a:af:33:65:
9c:a7:7f:33:2e:17:ac:40:6f:81:d8:8b:c8:61:96:
58:93:44:52:ad:b1:87:11:3e:ab:e0:c7:0a:19:be:
c7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:73:FB:AD:A7:29:80:17:BE:48:F1:24:FA:62:FF:AD:EA:5E:FE:99
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/P3P7racpgBe-SPEk-mL_repe_pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.200.0/24
Signature Algorithm: sha256WithRSAEncryption
69:40:52:2c:4a:27:f8:8a:a5:d5:2b:95:aa:3b:f8:24:9f:90:
cd:6d:72:dc:0a:a3:18:ad:7f:b5:42:74:b2:48:c8:37:6a:38:
88:91:dc:b6:48:1b:76:3d:1a:9a:fd:ed:e6:af:8e:1f:f0:88:
38:e6:a8:74:c7:c6:74:c5:4a:cc:66:bb:cd:51:a2:09:4d:73:
11:e7:03:ba:df:a9:41:63:dc:39:b3:c9:c0:13:8d:26:31:3d:
54:1d:03:88:ad:58:a4:f3:a8:7b:89:26:f9:ad:1d:74:76:05:
29:19:9c:7f:75:6e:67:42:05:d3:a1:2c:c2:b7:69:0e:1b:5d:
9c:9d:a4:d8:42:e3:b3:0c:2f:9f:5e:ae:94:a2:59:db:14:30:
11:5c:d3:c0:b8:a2:04:41:0b:41:8c:de:7e:6b:21:de:26:94:
8f:dd:ac:5b:56:e1:75:e5:40:56:49:1c:36:18:97:52:30:d8:
74:3d:61:90:54:1c:67:a5:1e:0a:71:ce:02:97:f2:4f:0d:ad:
c8:ec:7f:41:cb:4c:35:09:32:66:5f:50:0b:ae:de:be:76:57:
8a:17:ca:bf:49:64:fc:aa:a5:a2:53:8f:3d:5e:96:0f:34:f1:
06:9c:35:52:17:52:3a:11:0a:6c:8e:90:ee:45:49:27:c6:38:
4f:40:a2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:26 2023 by rpki-client on console-fra.rpki-client.org