Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/7xkcBhoYu0rAUgtNyrrGQ0_QNks.roa
File: 7xkcBhoYu0rAUgtNyrrGQ0_QNks.roa (raw, json)
Hash identifier: lYVd4hjA7z5jz3p0BimGD0kn/gixl06G6J9xQ4n8L/g=
Subject key identifier: EF:19:1C:06:1A:18:BB:4A:C0:52:0B:4D:CA:BA:C6:43:4F:D0:36:4B
Certificate issuer: /CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Certificate serial: 0187EBC147D1CF4509CC8C5DE509646FF236
Authority key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/7xkcBhoYu0rAUgtNyrrGQ0_QNks.roa
Signing time: Fri 05 May 2023 11:52:05 +0000
ROA not before: Fri 05 May 2023 11:52:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204114
IP address blocks: 185.25.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:eb:c1:47:d1:cf:45:09:cc:8c:5d:e5:09:64:6f:f2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Validity
Not Before: May 5 11:52:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef191c061a18bb4ac0520b4dcabac6434fd0364b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9a:3e:df:4d:35:c5:b7:b5:03:72:34:1d:91:
67:92:37:50:b5:8e:0e:c9:ff:3a:98:23:f5:e4:6b:
58:8a:8b:70:69:f0:25:db:fa:5d:bd:05:c7:05:da:
a8:8f:a6:21:a5:62:6a:19:c3:7e:2e:18:4e:67:1e:
b1:04:10:59:ec:b2:6a:90:51:2e:4e:09:f8:1d:50:
78:58:6d:b0:26:6d:8d:1f:bc:89:68:a6:56:44:e9:
0e:01:c3:b2:ad:76:0f:88:bf:50:11:58:dd:bd:f7:
15:a9:3e:d0:15:ae:80:76:c4:45:c2:e2:0e:87:d7:
7c:31:86:fe:ca:6d:33:bb:5e:27:02:8e:a1:f9:33:
a2:ad:73:b9:77:2d:44:af:4b:75:9b:ec:66:5f:05:
02:0d:4d:4c:be:75:99:aa:a6:55:e8:99:2a:3e:d2:
6b:cf:8a:a0:56:cf:65:ea:9d:5c:f2:93:8c:11:6c:
cf:b3:c2:3f:a0:6b:19:e5:1c:26:d5:a6:d9:0b:dc:
a1:b2:a2:9a:5c:86:c7:55:a3:48:de:34:d2:e0:60:
55:28:6f:eb:7d:9d:80:f6:d7:4f:52:76:dd:53:b9:
d5:1a:e8:1d:20:22:67:cb:6c:0b:68:80:c6:a5:87:
f9:21:2d:a5:d4:73:c2:6e:f6:19:77:8d:b8:48:60:
5c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:19:1C:06:1A:18:BB:4A:C0:52:0B:4D:CA:BA:C6:43:4F:D0:36:4B
X509v3 Authority Key Identifier:
keyid:21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/7xkcBhoYu0rAUgtNyrrGQ0_QNks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.113.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:80:c6:32:1c:98:b0:12:58:b8:9b:8f:98:4c:23:d0:02:3e:
c0:ab:f6:6b:e2:7b:e2:da:c8:63:fc:a1:93:bb:10:79:69:1f:
06:65:16:7c:e7:22:19:f5:1a:ca:d8:a9:91:16:2d:da:b6:32:
94:b5:4c:9d:a3:84:5b:b7:b6:04:7d:76:e4:65:c5:9b:96:01:
6b:c9:b9:75:c8:e9:cc:12:47:9d:d0:4d:ce:53:88:51:6f:fd:
5d:8e:0f:4b:e6:56:ed:84:d6:98:54:e4:4f:fa:42:e7:38:40:
79:b7:03:34:e8:49:6e:db:e1:97:f5:d1:ec:52:3b:33:0b:13:
0d:82:2b:44:6c:84:6d:60:d4:a1:25:53:c8:a2:56:63:33:9d:
53:6e:82:6a:1e:18:89:34:f8:52:ad:01:a6:df:2d:c9:d9:11:
2f:a0:a0:74:20:34:ea:43:68:48:f5:0c:03:7e:f9:39:85:fd:
3f:af:ab:9b:f6:05:cf:9e:f8:b3:fe:88:8c:ab:95:70:7b:73:
be:59:33:0a:c6:b4:63:81:85:e7:70:9a:08:bd:d8:a5:b8:cd:
c8:23:d9:1f:80:44:9e:41:dc:72:88:0a:ff:74:35:48:58:94:
13:60:8b:97:c8:bf:83:8f:c9:4a:48:8c:d3:99:cb:0e:98:74:
19:22:e2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:48 2024 by rpki-client on console-fra.rpki-client.org