Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/t7UQ6GyqBTsszh8d0oSgkJhjO_M.roa
File: t7UQ6GyqBTsszh8d0oSgkJhjO_M.roa (raw, json)
Hash identifier: lq5ukn4W0VGjeNoMKbhaqzuZ9Rnycp7eL4Wti1mjvFE=
Subject key identifier: B7:B5:10:E8:6C:AA:05:3B:2C:CE:1F:1D:D2:84:A0:90:98:63:3B:F3
Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial: 01857355FE7A5E81B25A946FE0D50DB569C3
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/t7UQ6GyqBTsszh8d0oSgkJhjO_M.roa
Signing time: Mon 02 Jan 2023 16:34:53 +0000
ROA not before: Mon 02 Jan 2023 16:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8376
IP address blocks: 185.98.224.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:55:fe:7a:5e:81:b2:5a:94:6f:e0:d5:0d:b5:69:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Validity
Not Before: Jan 2 16:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7b510e86caa053b2cce1f1dd284a09098633bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9f:d9:ef:c8:f6:07:92:3c:fa:00:bb:d6:c1:
c8:44:60:5f:0a:d3:86:e0:16:50:cf:52:75:0f:ff:
37:97:83:c2:2c:4f:20:80:00:bf:5a:98:33:e0:5d:
5c:0a:58:89:29:9c:f3:33:48:8e:ae:5a:e1:e5:3b:
44:55:91:14:23:1e:88:9e:53:11:e3:26:1b:35:72:
f6:34:08:bc:2b:95:92:91:31:81:91:7a:dd:bf:1e:
a7:ec:e8:8d:c9:e3:6c:30:8d:94:61:9e:e6:99:b2:
39:f0:99:74:92:62:f9:ae:7a:e2:18:cf:76:e5:6e:
39:76:5e:bc:86:78:a5:19:33:0b:97:0f:5f:51:e4:
62:4d:a7:00:4e:59:8f:40:01:e6:85:b3:53:f8:ef:
b7:78:a3:59:e3:7b:18:6f:f4:23:f3:e9:99:4b:a2:
f1:b8:5d:12:f8:08:74:de:d9:a3:eb:14:2f:7d:7a:
89:90:35:a1:2d:33:a9:dd:4e:8d:a3:74:ef:82:37:
01:82:7c:84:ad:62:aa:69:3e:e0:30:85:66:5b:9f:
56:01:b8:dd:09:5e:bc:84:d5:9c:d5:47:fd:02:2f:
5b:29:4a:47:38:70:f5:26:76:fc:e8:ec:ab:a0:19:
a6:26:e4:14:2d:83:1e:a6:ab:d5:e1:52:ef:28:99:
04:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B5:10:E8:6C:AA:05:3B:2C:CE:1F:1D:D2:84:A0:90:98:63:3B:F3
X509v3 Authority Key Identifier:
keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/t7UQ6GyqBTsszh8d0oSgkJhjO_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.224.0/22
Signature Algorithm: sha256WithRSAEncryption
28:c3:72:48:2a:d7:ae:d1:8f:38:4e:7b:d0:75:c8:1d:7a:46:
39:7e:96:5d:a4:4b:94:ef:2a:77:e9:8f:a6:0d:4c:c1:ba:c6:
39:cd:29:31:5a:87:fe:36:f7:47:8e:c5:1d:a6:2e:79:5d:86:
bf:39:82:d9:a0:6e:44:13:3f:9c:e0:d4:66:c4:35:81:aa:a1:
1d:b4:36:e5:3c:88:4c:e2:63:0f:b6:0f:44:a9:e0:b9:b4:88:
33:dc:b4:77:a5:64:c6:0c:d8:8f:8b:ba:50:84:d8:f1:ba:eb:
f3:77:56:d0:21:65:79:ad:fd:90:86:56:40:e8:db:1e:c4:85:
5a:f1:a9:10:9e:ec:01:c3:9d:71:da:ae:6b:ee:8a:6c:b1:43:
80:c5:d4:b0:3c:63:b7:b9:f1:7c:97:50:ba:de:82:f9:ca:d9:
4e:3f:7a:62:95:c0:ff:d3:ab:84:cb:49:06:2c:6c:50:2e:85:
60:1d:2c:3b:13:7a:ed:84:4f:05:ef:65:2b:0a:82:2a:a1:57:
05:2c:d0:5d:71:51:20:df:25:40:8c:15:b9:ae:a0:86:6a:0b:
98:b6:b2:56:f9:2a:02:ab:dc:92:1b:ab:9c:19:fb:97:5a:a1:
3b:8d:42:0c:17:ad:b5:50:5e:89:4f:ef:43:5e:0e:24:46:e3:
84:bf:59:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:27 2023 by rpki-client on console-fra.rpki-client.org