Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/_3nAOTHpMEyjuGU8S34rYWGdeyA.roa
File: _3nAOTHpMEyjuGU8S34rYWGdeyA.roa (raw, json)
Hash identifier: vEcrcvio/xsLbT0n3DURaOkwxjrPgP581+wl5lJK7MU=
Subject key identifier: FF:79:C0:39:31:E9:30:4C:A3:B8:65:3C:4B:7E:2B:61:61:9D:7B:20
Certificate issuer: /CN=c3ab8f44fc356096b8e656fc8739871ec00d1f12
Certificate serial: 01856EB927520866F9290B16FECE496B9D84
Authority key identifier: C3:AB:8F:44:FC:35:60:96:B8:E6:56:FC:87:39:87:1E:C0:0D:1F:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6uPRPw1YJa45lb8hzmHHsANHxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/_3nAOTHpMEyjuGU8S34rYWGdeyA.roa
Signing time: Sun 01 Jan 2023 19:05:05 +0000
ROA not before: Sun 01 Jan 2023 19:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207099
IP address blocks: 185.155.65.0/24 maxlen: 24
185.155.66.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:27:52:08:66:f9:29:0b:16:fe:ce:49:6b:9d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3ab8f44fc356096b8e656fc8739871ec00d1f12
Validity
Not Before: Jan 1 19:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff79c03931e9304ca3b8653c4b7e2b61619d7b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:3d:f5:7c:fa:c0:f6:b1:71:e8:84:17:cb:
e7:e8:24:08:f1:e2:8f:a7:e7:43:d9:2d:f6:c5:44:
d5:69:af:30:81:f9:b4:1f:c8:d0:b9:ae:3c:57:58:
20:6b:87:81:53:ae:ce:23:fa:90:03:cd:a0:18:c2:
ed:34:74:f0:28:e8:0f:4f:e0:eb:42:39:c9:d1:82:
18:6c:37:82:be:d6:87:33:b6:24:f8:68:52:a3:38:
c1:b3:b6:67:db:57:d1:cc:ce:cb:df:b8:09:ae:eb:
fb:6b:b7:6c:9e:38:0c:7b:47:a1:14:6f:2e:fb:75:
83:6a:32:c1:6c:f5:00:e3:d8:8d:4c:04:5c:e8:41:
00:12:5e:38:00:97:c2:30:17:fc:a5:24:6e:f1:47:
0c:2f:f4:94:9d:71:57:16:a4:32:89:9a:e0:9f:e1:
6e:bb:59:b3:98:13:7a:82:a8:d0:81:6a:c1:17:ec:
53:50:47:df:28:a8:1a:fe:d2:e3:87:62:9c:64:9a:
00:2e:9b:b4:26:25:b6:57:44:34:c7:3f:c6:ed:9e:
fb:69:ae:12:e1:8a:2e:4f:0c:c1:fb:17:59:8b:ec:
09:7a:60:97:12:4e:71:91:ba:52:b9:6e:26:52:15:
ac:0f:67:c4:3d:6e:d6:cb:d0:8f:e7:4e:a9:80:5d:
3b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:79:C0:39:31:E9:30:4C:A3:B8:65:3C:4B:7E:2B:61:61:9D:7B:20
X509v3 Authority Key Identifier:
keyid:C3:AB:8F:44:FC:35:60:96:B8:E6:56:FC:87:39:87:1E:C0:0D:1F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6uPRPw1YJa45lb8hzmHHsANHxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/_3nAOTHpMEyjuGU8S34rYWGdeyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/w6uPRPw1YJa45lb8hzmHHsANHxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.65.0-185.155.66.255
Signature Algorithm: sha256WithRSAEncryption
8f:d1:75:8e:26:d3:0f:fa:af:e1:ce:ee:0d:6c:d4:1b:8b:8a:
af:d7:55:30:15:a8:fe:1e:49:5a:b1:a4:97:95:61:36:72:1a:
e0:c6:85:c4:11:fe:30:28:56:2d:72:2e:c5:c8:06:da:1f:91:
f9:18:10:55:d9:19:df:d6:3d:95:9d:52:12:74:dc:57:96:be:
44:2a:23:dd:59:fd:a5:8b:1d:fd:ec:10:d1:47:90:93:f4:8f:
f2:e5:6a:17:d7:23:1c:3b:cb:bf:ba:74:be:0b:4f:77:34:7f:
90:7d:18:d1:f0:a5:7e:a4:0c:4f:06:8b:cb:6a:51:ce:2f:4a:
c8:ea:eb:4c:d0:29:71:eb:2d:73:f1:6f:b6:51:59:f6:1d:78:
82:95:6a:2b:59:a0:13:f0:0a:3c:ac:c8:d5:28:de:44:ee:bc:
4f:67:21:ff:94:47:6e:39:bc:4c:51:3d:97:30:c2:e1:92:d4:
99:4d:af:c0:09:53:6c:d8:c3:19:70:c3:1e:c8:87:0c:c2:f4:
44:24:13:9d:ce:ec:01:2b:6a:aa:9b:ac:58:c3:db:bd:58:7b:
ed:f9:f4:8a:78:f5:d5:b7:4c:c1:c8:1b:f8:1e:23:09:f9:60:
78:00:73:3f:cf:22:81:39:bb:c0:b1:af:ac:4b:8f:03:54:d3:
6f:41:f8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:20 2024 by rpki-client on console-fra.rpki-client.org