Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/OoY33lcnH5JSnSLZP0uhKirU-XM.roa
File: OoY33lcnH5JSnSLZP0uhKirU-XM.roa (raw, json)
Hash identifier: FzE1U9g/+n2rhd3s77cwJUmIeMF860z1LjWn4QIS750=
Subject key identifier: 3A:86:37:DE:57:27:1F:92:52:9D:22:D9:3F:4B:A1:2A:2A:D4:F9:73
Certificate issuer: /CN=c38c3a1c05c899ebfe15d2361909a63597c68078
Certificate serial: 01856F4B6576DFB34D864C98B16F869DEEF7
Authority key identifier: C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/OoY33lcnH5JSnSLZP0uhKirU-XM.roa
Signing time: Sun 01 Jan 2023 21:44:50 +0000
ROA not before: Sun 01 Jan 2023 21:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42871
IP address blocks: 185.202.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:65:76:df:b3:4d:86:4c:98:b1:6f:86:9d:ee:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38c3a1c05c899ebfe15d2361909a63597c68078
Validity
Not Before: Jan 1 21:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a8637de57271f92529d22d93f4ba12a2ad4f973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8a:23:f3:dd:90:5c:39:ea:b8:29:cb:74:74:
80:a9:84:6e:a7:f8:0f:bd:01:34:37:7a:65:ab:9c:
c3:b7:53:9f:9d:c1:b8:45:02:ae:50:62:3e:21:f3:
57:49:0c:c1:32:d6:43:39:43:65:0a:8f:cb:e4:7b:
68:0c:52:65:4c:e7:3c:47:b7:8d:40:0d:07:fb:bd:
0c:8f:6c:79:fc:f3:fb:8c:e8:f9:f7:d2:7f:74:91:
2a:16:10:69:ab:d9:c1:a7:0a:38:c0:be:66:52:d3:
d5:18:72:a6:1f:4a:89:8b:ce:8b:40:82:ee:60:4b:
57:a2:16:6e:67:f6:a9:88:b7:39:71:46:53:41:f1:
5a:8f:d3:94:e2:14:51:ee:46:72:6b:09:a6:18:97:
ae:06:c3:74:6b:d4:82:ad:74:81:c8:55:5d:bc:32:
ba:22:a6:0e:5d:9a:ef:f5:ae:1c:8a:28:1c:26:39:
9f:49:5e:9d:1f:1c:ea:c3:aa:c9:91:a7:02:ca:84:
81:9a:ab:15:3e:0e:c3:92:07:fb:ba:8a:32:83:2c:
4f:ad:89:26:2d:de:6a:eb:db:2e:66:b8:3e:a5:92:
d9:d8:d9:2c:eb:9b:8a:74:9f:e5:d4:95:bc:df:7a:
9c:b8:aa:3a:be:16:61:b5:da:d5:d4:96:52:7a:7e:
9d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:86:37:DE:57:27:1F:92:52:9D:22:D9:3F:4B:A1:2A:2A:D4:F9:73
X509v3 Authority Key Identifier:
keyid:C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/OoY33lcnH5JSnSLZP0uhKirU-XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.7.0/24
Signature Algorithm: sha256WithRSAEncryption
74:6b:41:24:a1:1c:e5:e0:24:a8:d0:e8:ff:4e:0b:d0:9f:8c:
32:99:2c:fe:0f:3a:48:2d:b6:bc:4e:26:04:3b:e5:49:df:1d:
62:2a:3d:8f:4c:3c:92:5d:0a:92:39:86:92:ac:aa:0e:d1:a3:
49:09:0f:5f:fc:81:6f:ee:c3:5d:a4:29:86:91:75:2a:71:87:
27:4c:39:2c:77:37:17:db:6d:5b:a9:f8:79:b3:c7:1f:8b:e8:
dc:38:98:52:14:3d:2d:df:79:99:83:b0:88:70:b5:28:f4:49:
cc:07:14:d4:98:02:df:18:8b:57:3b:fb:10:e0:74:55:39:a3:
a9:c4:9c:b5:2e:5e:47:12:34:db:72:eb:75:37:62:97:93:f6:
ff:f4:b4:3d:5b:42:39:e1:85:28:fd:c4:10:82:c3:df:57:e1:
e7:75:36:9d:e4:8e:49:71:51:d5:00:09:ed:80:d7:cd:91:f5:
6e:de:ae:26:b5:1c:83:53:bf:fa:8e:5f:60:67:63:f9:64:68:
9b:8a:46:f8:a9:24:f2:28:db:fc:f9:8d:27:4b:42:8d:18:0b:
96:c0:67:fb:c8:90:45:8f:9c:ee:e1:74:e8:98:0b:d6:b6:36:
71:f2:b4:ce:25:55:f4:e2:37:05:4e:64:23:bc:2f:9f:f7:4d:
9c:c9:84:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:56 2024 by rpki-client on console-fra.rpki-client.org