Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/7x2U5DEBTNonTf-nNWHXBOP6-aE.roa
File: 7x2U5DEBTNonTf-nNWHXBOP6-aE.roa (raw, json)
Hash identifier: y+5wAh+z9r/l+iMPvXmowJLTMnsaDE4DJmVSAOFh1S8=
Subject key identifier: EF:1D:94:E4:31:01:4C:DA:27:4D:FF:A7:35:61:D7:04:E3:FA:F9:A1
Certificate issuer: /CN=9c1cd1b3c8772956fa85535a8464b4ca19663ade
Certificate serial: 018C3DA1FB71855644D6E5E3FBA3B6DD4929
Authority key identifier: 9C:1C:D1:B3:C8:77:29:56:FA:85:53:5A:84:64:B4:CA:19:66:3A:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/7x2U5DEBTNonTf-nNWHXBOP6-aE.roa
Signing time: Wed 06 Dec 2023 05:37:54 +0000
ROA not before: Wed 06 Dec 2023 05:37:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203374
IP address blocks: 185.136.243.0/24 maxlen: 24
185.136.242.0/24 maxlen: 24
185.136.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3d:a1:fb:71:85:56:44:d6:e5:e3:fb:a3:b6:dd:49:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1cd1b3c8772956fa85535a8464b4ca19663ade
Validity
Not Before: Dec 6 05:37:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef1d94e431014cda274dffa73561d704e3faf9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:54:64:8a:74:fb:d8:3c:68:74:63:44:7e:b4:
cb:f4:fd:71:ba:03:13:e9:ea:94:5e:fe:11:e8:ce:
8a:4a:85:8f:04:7a:14:ca:40:3e:db:6b:b3:06:35:
eb:e9:5a:18:2c:eb:86:06:cb:11:dd:55:69:4d:42:
ab:f5:4d:16:c2:42:90:02:04:17:7d:69:09:6b:a7:
4d:7c:af:de:79:9c:5a:ef:01:f5:2e:62:0a:11:ef:
3c:60:ea:7f:41:86:bd:49:c2:b7:a0:96:96:29:19:
aa:c0:0d:72:c6:1b:31:28:14:af:e9:7e:e4:02:e0:
48:ce:b9:5a:4e:6d:2a:3d:30:de:e8:df:20:41:ec:
1e:04:a1:37:7e:a2:26:f4:ec:98:d5:40:9b:52:44:
3c:0f:27:80:54:6e:66:45:3d:bc:12:6b:aa:70:b8:
f8:3a:79:cd:c0:28:fa:b6:cc:d4:47:4d:ff:b1:db:
2f:3b:d3:93:c9:a4:7b:25:22:4c:df:27:60:c1:2b:
95:e9:d2:49:f6:15:a9:3b:16:6d:5a:16:a5:c7:bd:
27:4c:99:db:69:45:e4:39:a2:d4:34:a4:99:2f:3d:
3e:37:e9:aa:12:f6:02:b8:93:8e:ee:5f:fc:60:2a:
f7:0c:b0:ed:3e:32:de:99:41:07:50:13:b6:5b:84:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1D:94:E4:31:01:4C:DA:27:4D:FF:A7:35:61:D7:04:E3:FA:F9:A1
X509v3 Authority Key Identifier:
keyid:9C:1C:D1:B3:C8:77:29:56:FA:85:53:5A:84:64:B4:CA:19:66:3A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/7x2U5DEBTNonTf-nNWHXBOP6-aE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.241.0-185.136.243.255
Signature Algorithm: sha256WithRSAEncryption
06:d4:20:23:41:ca:45:fd:1e:fd:98:71:05:39:82:ff:18:06:
46:90:fc:f2:b0:48:af:5c:4d:27:0d:f1:c0:8b:6d:79:80:73:
f2:58:2f:7c:dc:8a:11:31:8a:6e:ad:71:f5:5f:16:f3:77:77:
df:af:9a:4e:96:e4:6a:9b:7b:cf:59:fa:80:29:a5:89:43:7a:
29:05:8c:c1:dc:6b:89:fa:3e:0d:3a:6d:f4:26:5e:05:1d:70:
90:3f:30:57:b5:3b:1d:8c:09:c3:a1:c2:0a:59:0f:00:ba:0f:
0c:55:32:81:92:e6:be:c0:0a:24:5f:f3:24:32:32:5b:b1:57:
c5:dc:ae:f1:1f:f8:52:c1:d7:47:1e:f2:d2:c5:01:db:3b:8c:
79:a6:8d:a6:88:3f:a4:56:5d:9a:70:c5:44:09:29:4e:79:91:
17:30:1f:87:22:cc:76:74:58:0e:7f:90:9e:6d:d5:4f:8e:2d:
80:30:b9:ce:f2:ed:80:3d:3b:f3:0b:ef:e5:70:f2:8b:b2:2c:
1f:e6:bb:08:c2:6b:8f:11:17:74:ce:8e:54:d7:69:2a:15:5b:
e6:1a:2f:b4:cf:2c:6a:07:b8:13:c9:73:ea:f7:f3:ed:93:a6:
5b:a1:58:0b:14:d7:80:11:4b:ac:d9:c3:45:84:4d:10:18:39:
24:96:96:e6
-----BEGIN CERTIFICATE-----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Generated at Sun Dec 10 13:26:53 2023 by rpki-client on console-ams.rpki-client.org