Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/FkE7WvZd2Qi8Bj3fEINl278m3bI.roa
File: FkE7WvZd2Qi8Bj3fEINl278m3bI.roa (raw, json)
Hash identifier: gorFTgSGlyo3ZSuAFU0UwSXNznNujcNPVhCcYoEMebk=
Subject key identifier: 16:41:3B:5A:F6:5D:D9:08:BC:06:3D:DF:10:83:65:DB:BF:26:DD:B2
Certificate issuer: /CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Certificate serial: 018CC726F0E4C9FEEE7769B8DFE2480E69A9
Authority key identifier: 58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/FkE7WvZd2Qi8Bj3fEINl278m3bI.roa
Signing time: Mon 01 Jan 2024 22:31:07 +0000
ROA not before: Mon 01 Jan 2024 22:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204971
IP address blocks: 185.222.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:f0:e4:c9:fe:ee:77:69:b8:df:e2:48:0e:69:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Validity
Not Before: Jan 1 22:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16413b5af65dd908bc063ddf108365dbbf26ddb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:66:23:89:9c:eb:70:3f:df:ad:70:51:ac:2d:
7c:80:6d:15:e7:6f:0e:7a:4e:30:6a:02:ec:be:48:
9e:93:1e:37:6f:59:7a:8f:f8:f0:1b:a3:16:d5:0f:
13:8b:ec:e3:19:1f:87:d3:e3:45:d7:6a:3e:68:9c:
7c:f4:da:b1:8d:b2:30:5d:e5:66:51:46:9f:6a:4d:
33:f8:1c:13:68:5e:db:99:b2:01:db:a2:0c:b7:44:
41:4f:e5:ff:1c:54:aa:f6:f3:72:fe:7d:ee:ea:d0:
df:97:0e:ea:43:85:92:6a:61:9e:af:cf:9f:9e:e1:
07:e5:cf:e4:5e:98:c4:d5:22:1b:22:a4:6e:6f:90:
ea:aa:79:8d:25:2f:97:a6:52:36:17:b0:57:53:c8:
cf:a8:af:92:e3:bf:ad:53:71:8f:4c:0c:35:1d:8b:
04:37:b4:fa:8b:1a:5a:91:98:4c:75:98:e8:e5:36:
80:bb:2b:3c:12:72:30:dd:98:87:a1:cc:22:db:85:
9a:9e:0b:ac:ef:53:45:c0:3d:1c:1e:4d:36:a7:8a:
be:c8:a3:84:76:50:24:e0:b2:fa:65:74:32:41:34:
b8:c4:3f:78:d6:3f:e1:80:40:98:1d:0a:09:cd:ac:
40:0f:67:8f:e4:72:91:c2:09:d8:7d:c0:db:ff:5a:
4e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:41:3B:5A:F6:5D:D9:08:BC:06:3D:DF:10:83:65:DB:BF:26:DD:B2
X509v3 Authority Key Identifier:
keyid:58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/FkE7WvZd2Qi8Bj3fEINl278m3bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.7.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:11:74:a0:31:fb:9d:de:9c:be:90:cc:9f:94:a6:2e:46:3c:
50:64:cf:8d:c4:97:2b:37:a9:70:85:d8:1c:5c:0e:58:a2:35:
01:d6:fa:f2:ba:9a:6f:2f:bc:81:29:f8:b1:20:27:57:85:9c:
0b:32:36:2b:d4:fc:2f:2f:b9:d5:cf:54:26:f9:75:96:8e:95:
44:bb:78:4b:e8:b6:7d:ca:d0:d2:ed:14:08:08:82:04:74:99:
57:9c:e6:68:d8:ac:f8:b0:b2:08:31:4b:70:4e:18:8d:63:03:
58:26:83:45:21:7e:a7:08:4b:3b:80:29:e2:18:fa:2e:dd:4e:
b8:1c:de:c0:f0:88:8d:79:c0:65:4c:a0:8f:6c:c8:1e:33:ef:
5c:d2:dd:61:70:2b:b9:19:97:20:24:5a:12:60:86:fc:6a:ca:
82:a1:84:0d:35:07:a3:2e:1b:64:30:38:09:94:3b:ee:43:d2:
ad:c7:cf:70:63:8b:18:a5:04:2f:66:6d:f7:79:26:17:41:9f:
13:62:d0:da:70:74:af:70:cd:76:9a:b8:97:0b:89:6c:e4:1a:
84:41:86:08:cb:4b:95:62:45:77:31:70:91:7b:8d:88:41:53:
1e:80:ea:53:16:5c:4e:e2:c6:a3:a6:73:1f:6a:45:9c:10:53:
04:0b:16:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 15:42:00 2024 by rpki-client on console-ams.rpki-client.org