Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/7xKBAMsUV5fnWSEwGJ5ZL2hNkv4.roa
File: 7xKBAMsUV5fnWSEwGJ5ZL2hNkv4.roa (raw, json)
Hash identifier: IQkIX6d5rN/uj9b2zf5ASheDCmM1pWOBbBVg6rS0EfY=
Subject key identifier: EF:12:81:00:CB:14:57:97:E7:59:21:30:18:9E:59:2F:68:4D:92:FE
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01891696058BFA67998D9B47AC1008F63A33
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/7xKBAMsUV5fnWSEwGJ5ZL2hNkv4.roa
Signing time: Sun 02 Jul 2023 12:31:17 +0000
ROA not before: Sun 02 Jul 2023 12:31:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38136
IP address blocks: 185.248.184.0/22 maxlen: 24
185.36.192.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:16:96:05:8b:fa:67:99:8d:9b:47:ac:10:08:f6:3a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jul 2 12:31:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef128100cb145797e7592130189e592f684d92fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:05:8b:bc:0f:7b:13:c1:56:4f:4b:8f:9d:82:
6a:02:fe:cb:7d:60:7e:00:75:de:69:45:87:50:85:
04:57:8d:2d:4a:b2:d4:39:c7:e4:9a:ad:56:fa:6a:
c6:d0:84:02:49:2b:b7:d9:2e:14:6b:c4:08:65:52:
ed:ae:37:0d:da:0d:18:2b:46:24:06:71:6b:56:35:
78:0e:cf:19:e2:1e:a4:a8:9c:f5:34:4e:8e:08:bc:
57:c9:30:3b:cb:7a:7a:c7:ca:8d:74:0b:a7:46:6a:
e7:d5:36:42:05:91:df:00:5d:60:cc:14:a9:6d:ef:
b7:10:77:0b:3f:8e:73:ae:27:70:3c:85:6f:59:d8:
ab:97:dd:52:bb:e5:83:dd:bc:d4:6b:46:7f:56:93:
e6:d6:62:25:bd:cf:ad:da:2a:68:2c:c4:59:2f:a1:
a0:78:a7:86:98:a7:73:d2:69:09:f3:85:b3:44:7e:
e8:48:21:7b:d2:98:e5:60:06:3f:7d:e1:4d:84:a6:
76:d6:f9:6f:77:5a:da:75:e8:0c:7a:b9:cd:8c:11:
36:56:07:15:22:68:a6:d7:cb:c4:af:0a:84:05:ae:
06:37:e6:c7:62:d7:fb:bc:a0:6b:af:5b:e1:9f:95:
0e:70:de:9e:cd:a5:2a:eb:b5:30:a6:96:c7:03:f6:
88:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:12:81:00:CB:14:57:97:E7:59:21:30:18:9E:59:2F:68:4D:92:FE
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/7xKBAMsUV5fnWSEwGJ5ZL2hNkv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.192.0/22
185.248.184.0/22
Signature Algorithm: sha256WithRSAEncryption
54:a2:f0:19:93:87:1a:2a:fd:ca:a6:87:3f:d6:ac:85:c0:73:
26:6c:9c:f7:47:42:22:d1:c5:ee:96:61:7a:b3:9f:c7:f5:25:
07:e8:00:80:ed:5f:e9:1c:f1:12:f7:c6:9d:70:b4:4a:fb:ae:
7b:7e:95:a1:a2:14:f2:b5:e1:94:b1:3a:43:98:87:82:a1:e3:
4d:09:7b:6e:2f:41:f6:c1:d3:27:2c:cb:80:4f:77:7c:04:b7:
08:fc:68:77:ce:4d:15:8d:2a:6b:d1:bb:19:16:83:a0:de:17:
5e:e4:33:9c:43:35:90:93:26:c6:25:6c:73:d5:de:5b:0e:c1:
d5:c4:2a:66:ff:57:30:6f:8e:c4:75:c2:1b:55:5c:a7:87:64:
ff:0a:2e:75:71:23:d2:ed:af:ae:fb:d7:a9:a4:24:79:d8:57:
be:11:1e:3c:dd:c8:15:2e:7d:3c:96:1c:46:8f:88:d8:15:ea:
e3:3c:1f:49:6e:64:53:b8:85:ca:43:1c:ba:2e:97:d2:24:13:
f6:20:ad:62:65:3b:fb:36:be:80:d4:ba:b9:7a:e9:95:bd:a9:
b3:01:28:37:ea:0c:ac:a2:ef:41:cd:bd:7b:b8:c9:87:1f:fe:
21:90:92:78:b2:e9:46:90:02:e9:46:31:58:b4:d2:92:53:5f:
2c:e3:f9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 11:27:22 2023 by rpki-client on console-ams.rpki-client.org