Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/79BddFOA1wlpF1FBIukWjNGkt7E.roa
File: 79BddFOA1wlpF1FBIukWjNGkt7E.roa (raw, json)
Hash identifier: weJQtjnbRnVKbp1gWg17VcCMeeUFr8fxl0Vu6q2coB4=
Subject key identifier: EF:D0:5D:74:53:80:D7:09:69:17:51:41:22:E9:16:8C:D1:A4:B7:B1
Certificate issuer: /CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Certificate serial: 018571279425D725214B769625D4659B7053
Authority key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/79BddFOA1wlpF1FBIukWjNGkt7E.roa
Signing time: Mon 02 Jan 2023 06:24:57 +0000
ROA not before: Mon 02 Jan 2023 06:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 185.25.114.0/24 maxlen: 24
185.25.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:94:25:d7:25:21:4b:76:96:25:d4:65:9b:70:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Validity
Not Before: Jan 2 06:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efd05d745380d7096917514122e9168cd1a4b7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:bc:35:34:2c:cc:9a:e0:92:8c:68:12:2e:
8a:c4:65:d8:f1:71:00:56:d9:1e:94:56:92:6f:aa:
de:33:df:b7:92:48:d3:7d:d9:b3:4d:f5:58:01:5e:
ea:a3:b4:3c:8d:1c:3f:6f:db:c2:c1:3e:67:bc:16:
a3:4f:52:ea:31:41:45:4f:38:1e:43:76:11:f3:37:
2a:ef:6f:2b:99:6a:de:38:43:47:a2:99:c1:f2:e8:
b7:83:f9:4c:a9:e2:c0:f8:dc:43:a5:b0:42:bd:23:
2b:f2:6a:30:ff:4f:2a:a8:48:46:54:3a:86:e2:bd:
5d:28:16:26:d4:1d:6d:de:8c:9b:2d:76:df:79:aa:
11:6b:69:1a:40:df:6e:a9:7a:46:40:81:2f:71:b2:
d9:f7:5b:f1:3f:19:10:c7:e2:15:0c:30:e8:1b:b7:
87:15:f9:11:18:87:d0:5a:5a:0e:6a:3d:20:98:d9:
09:d3:8f:14:ab:57:25:4f:1e:5f:fc:6f:ee:97:5f:
2c:3b:26:9e:ad:89:d0:d1:1d:82:60:f3:f3:82:44:
2e:f1:c0:80:e6:e3:2b:37:2e:90:19:5d:b0:48:68:
97:65:6b:65:98:06:3a:57:e8:92:d8:ae:4e:53:4e:
7c:ee:9b:6f:43:f5:ac:b8:60:2f:df:a2:62:19:a9:
36:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D0:5D:74:53:80:D7:09:69:17:51:41:22:E9:16:8C:D1:A4:B7:B1
X509v3 Authority Key Identifier:
keyid:21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/79BddFOA1wlpF1FBIukWjNGkt7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.113.0-185.25.114.255
Signature Algorithm: sha256WithRSAEncryption
32:ff:6e:33:e7:79:8a:da:89:b9:e8:aa:42:b2:2d:2c:65:b7:
72:c3:7e:b2:eb:8f:1a:8d:9c:2f:5b:03:59:9d:ff:b6:52:3c:
75:11:92:5f:70:98:30:7d:d4:8c:34:39:ae:c2:75:db:34:32:
50:e7:90:99:31:4a:93:44:0c:58:d6:9d:d8:86:9d:c1:93:f1:
45:70:50:f9:1d:64:0e:b0:15:5e:d4:63:68:a3:97:4e:91:a6:
c9:f3:29:e0:92:a2:0d:09:f0:cc:01:fe:a9:88:fb:36:a4:a6:
a2:ab:23:ed:7e:38:e9:c3:26:67:a3:ad:94:7c:4e:7a:33:1b:
b2:63:1f:1e:b1:69:cc:d4:8f:76:30:8e:d3:7b:bf:60:34:55:
16:b1:2b:2e:b7:0a:de:a1:1e:80:84:39:56:92:7f:af:be:91:
4b:f4:d7:13:67:70:4b:3e:b0:f1:fb:ae:23:a1:f4:5b:3f:e8:
56:f4:92:5c:f4:19:b7:89:95:40:7d:fc:39:5e:e8:dc:14:97:
1d:d1:37:ea:e3:24:1d:6a:52:55:4f:15:2c:8c:2d:25:3e:e0:
75:89:73:be:c2:3a:f2:2a:d6:16:06:91:63:d3:d7:55:06:86:
95:22:f1:0f:03:82:88:86:b2:af:b9:23:0d:ba:79:74:02:8b:
83:0e:d1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:40 2023 by rpki-client on console-fra.rpki-client.org