Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/OuuFt7lAsF0XACq_H1kgbdNQhJo.roa
File: OuuFt7lAsF0XACq_H1kgbdNQhJo.roa (raw, json)
Hash identifier: Crtg0TxJatpHYNxLm25HTz+P3kL620SOt8094XYLMhU=
Subject key identifier: 3A:EB:85:B7:B9:40:B0:5D:17:00:2A:BF:1F:59:20:6D:D3:50:84:9A
Certificate issuer: /CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Certificate serial: 01856C1C7425C231277267DE34B529685A02
Authority key identifier: 74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/OuuFt7lAsF0XACq_H1kgbdNQhJo.roa
Signing time: Sun 01 Jan 2023 06:54:42 +0000
ROA not before: Sun 01 Jan 2023 06:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213377
IP address blocks: 185.112.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:74:25:c2:31:27:72:67:de:34:b5:29:68:5a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Validity
Not Before: Jan 1 06:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3aeb85b7b940b05d17002abf1f59206dd350849a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5b:3f:cb:1a:73:88:00:ad:a5:e5:d4:b8:2b:
d8:99:47:9e:c8:36:b0:83:e5:2a:48:e8:b8:0d:8a:
e2:5c:bf:d9:57:6b:36:e4:ef:01:2d:d2:41:82:ab:
e0:51:de:17:d0:a9:9f:d6:0b:66:74:2c:2d:d7:23:
42:36:d7:05:4b:39:43:bd:8d:54:0c:1d:9e:56:da:
ae:85:93:7b:52:2b:69:b9:58:e1:ab:e3:fa:6c:6c:
8c:fc:b7:ba:a5:c0:5e:eb:22:7d:dd:58:c8:32:2a:
af:9e:d9:26:8a:d7:45:08:65:39:e3:99:bc:c8:d0:
c3:60:45:2b:4b:5a:69:f5:08:e6:d4:1b:07:48:6e:
33:fc:1a:f6:41:56:b5:54:f1:61:94:6f:7c:78:42:
a9:30:f7:24:d7:30:7b:01:4c:4f:82:c2:e4:f1:a6:
45:a2:57:ac:b8:3d:0e:22:b8:2f:95:05:6f:06:47:
2c:c2:f9:05:40:ab:d0:9f:2c:98:f4:6b:37:6c:4a:
f2:5c:e9:b3:5f:c3:82:29:b7:e8:28:ba:86:49:f3:
dd:d9:ad:f4:67:aa:97:da:88:e3:02:86:cd:67:d6:
0b:03:bb:28:b5:32:b5:4c:6b:d1:3a:b1:3a:b9:02:
5d:d3:9b:62:e7:40:5c:d6:a3:a9:1f:8a:32:bf:8f:
18:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EB:85:B7:B9:40:B0:5D:17:00:2A:BF:1F:59:20:6D:D3:50:84:9A
X509v3 Authority Key Identifier:
keyid:74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/OuuFt7lAsF0XACq_H1kgbdNQhJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.181.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:fa:a7:6d:e3:af:3d:77:17:a9:e6:5a:06:92:40:6c:80:99:
17:19:94:17:c2:2d:60:2c:80:7b:ef:e5:df:c1:f4:8f:7b:6a:
84:99:c3:e0:27:07:f6:f8:be:46:f6:d7:c8:2d:a4:20:f7:74:
50:3e:fd:47:cb:f8:bc:c3:0d:5f:ed:12:46:c0:e2:6c:e8:f7:
92:b0:52:98:e1:0c:55:2c:78:08:e4:80:85:7b:ac:85:f2:b6:
22:1a:26:ae:2a:98:ed:45:69:0e:7a:bc:21:da:03:67:7d:ba:
f0:2e:a6:fb:52:6e:3c:63:b8:1b:21:fa:3f:ce:e6:81:a3:24:
e6:5a:23:d3:e9:09:a8:00:80:3a:0e:79:c9:6a:69:24:17:59:
14:20:bb:5c:77:d5:66:05:a1:7e:63:9e:82:29:3d:bd:9f:c9:
ca:eb:14:47:e6:8d:97:7d:4e:d9:3d:06:61:cd:3e:45:7e:af:
1d:33:09:11:31:2b:a3:7a:df:93:ef:52:ff:68:4d:c3:f5:b7:
db:e8:17:d6:66:63:75:fa:28:c2:5a:cb:c9:de:bd:0c:f8:09:
7e:10:dc:ee:b8:69:69:95:cb:24:c5:b6:32:2e:30:1d:cb:22:
a7:43:f5:6c:05:c5:82:85:dc:8b:78:3e:25:87:2b:1f:15:fc:
d3:00:d6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:40 2023 by rpki-client on console-ams.rpki-client.org