Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/l36RlgU2WibrrkwvnrLhifN78qY.roa
File: l36RlgU2WibrrkwvnrLhifN78qY.roa (raw, json)
Hash identifier: UHgZsioJQgI4uiK6oqqGYdr2Cuh4su37nK370SGjvik=
Subject key identifier: 97:7E:91:96:05:36:5A:26:EB:AE:4C:2F:9E:B2:E1:89:F3:7B:F2:A6
Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial: 0185723A5042F16E465C6E9B41E308075BDC
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/l36RlgU2WibrrkwvnrLhifN78qY.roa
Signing time: Mon 02 Jan 2023 11:25:02 +0000
ROA not before: Mon 02 Jan 2023 11:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206078
IP address blocks: 185.180.34.0/24 maxlen: 24
185.180.33.0/24 maxlen: 24
185.180.32.0/24 maxlen: 24
185.180.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:50:42:f1:6e:46:5c:6e:9b:41:e3:08:07:5b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Validity
Not Before: Jan 2 11:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=977e919605365a26ebae4c2f9eb2e189f37bf2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:bd:60:bc:3b:2d:15:94:03:e6:4e:ce:01:
21:ae:ae:fe:b1:6d:3b:52:8b:ef:42:fc:9f:d0:dc:
e5:f6:7b:13:33:8d:ef:7f:d8:7b:7c:81:83:cc:b8:
1d:7a:83:fb:a2:b3:50:c8:4f:f0:9f:f7:57:03:e6:
8b:3d:47:35:c6:1c:b0:b5:e1:36:df:63:79:6e:06:
72:34:93:97:50:c2:31:38:47:19:82:47:b7:4a:cd:
2e:cd:ae:04:a6:69:3e:8d:1a:82:6b:69:7a:83:62:
bd:42:1a:cb:8e:61:51:e5:02:a9:42:89:4c:fa:98:
84:ee:b4:22:18:18:0e:4a:23:2f:26:db:f4:40:bd:
5a:02:68:85:4f:b6:71:f8:11:23:69:d4:d2:70:df:
08:20:c8:28:89:6e:fc:a7:74:77:aa:48:0a:d5:1a:
21:fb:da:d7:c2:92:10:c7:ae:9e:b4:eb:93:f4:0b:
93:e7:0b:6a:84:4b:ae:51:32:a3:f7:f4:7c:5b:c7:
d8:66:b5:f8:e2:bd:bd:f6:7f:bb:bf:8a:76:9e:06:
db:2f:4b:39:c5:ad:85:6e:83:0b:11:10:65:3d:3a:
86:de:d8:2a:ef:11:6c:60:87:dd:1e:86:4d:9e:cf:
2d:03:37:b6:8b:37:74:7e:3c:06:3c:ca:3d:8c:1e:
1c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7E:91:96:05:36:5A:26:EB:AE:4C:2F:9E:B2:E1:89:F3:7B:F2:A6
X509v3 Authority Key Identifier:
keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/l36RlgU2WibrrkwvnrLhifN78qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.32.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:c1:65:45:77:ef:20:e2:b3:2c:86:33:c9:f9:f3:aa:ae:4a:
3f:87:74:3c:46:94:ea:97:a2:f0:16:1c:52:90:6c:15:1d:8c:
32:fa:b4:fd:e0:72:c5:c5:d5:ec:65:07:90:c4:4b:9a:00:f3:
2f:36:cc:af:bb:67:9d:6a:79:4f:b7:66:7b:26:b0:90:c2:2d:
e0:de:bf:2a:68:4e:d0:ea:74:af:31:d1:0a:1c:d3:58:40:c3:
f1:56:47:30:b1:30:c7:a0:0a:ab:60:36:2f:b6:1a:c6:57:f6:
2b:fa:71:66:e8:21:1f:12:a2:05:d1:f6:31:77:56:88:ba:40:
53:ad:69:0d:0c:e3:d4:f1:f4:f9:a7:f2:e3:b8:c4:f5:cf:ff:
df:5a:d7:1c:06:e8:c4:0b:e3:a4:d2:b1:32:ce:ab:db:27:68:
9e:9d:9c:e8:64:bf:75:79:6b:56:4b:ea:88:df:7a:ff:9d:0e:
75:76:38:8f:d4:cd:c9:33:5c:c1:33:f1:ae:56:a9:5a:59:f4:
ee:5c:b3:fc:24:ef:cd:ba:b9:2e:9a:fd:49:95:c1:76:38:1b:
0f:2a:d0:8d:de:86:2b:a9:3b:63:11:fb:cc:72:b6:73:46:f5:
65:0f:2e:ff:f5:e6:60:1d:e2:65:a7:d4:ac:20:81:3f:e2:b5:
da:5d:45:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:16 2023 by rpki-client on console-fra.rpki-client.org