Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/7zjiyEnPzRcAI9n_Uf7udvYsYuM.roa
File: 7zjiyEnPzRcAI9n_Uf7udvYsYuM.roa (raw, json)
Hash identifier: CJjCN/PYx1jjyR4/elSUjBNm8H0hVDJ+0k86mGLP3aw=
Subject key identifier: EF:38:E2:C8:49:CF:CD:17:00:23:D9:FF:51:FE:EE:76:F6:2C:62:E3
Certificate issuer: /CN=da01323efafee332064e278b97cb8d1f9d8fef79
Certificate serial: 01856DC19E14539490BD388F8479138B9DE8
Authority key identifier: DA:01:32:3E:FA:FE:E3:32:06:4E:27:8B:97:CB:8D:1F:9D:8F:EF:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gEyPvr-4zIGTieLl8uNH52P73k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/7zjiyEnPzRcAI9n_Uf7udvYsYuM.roa
Signing time: Sun 01 Jan 2023 14:34:43 +0000
ROA not before: Sun 01 Jan 2023 14:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35112
IP address blocks: 188.244.112.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:9e:14:53:94:90:bd:38:8f:84:79:13:8b:9d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da01323efafee332064e278b97cb8d1f9d8fef79
Validity
Not Before: Jan 1 14:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef38e2c849cfcd170023d9ff51feee76f62c62e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:0c:03:60:0e:fd:c7:07:fb:82:cc:e2:39:
2a:dd:1d:2f:07:6a:9a:d7:bf:3e:9e:25:bc:b8:2d:
5e:8a:49:99:48:88:35:59:63:ba:88:92:f2:d6:f0:
89:fa:f6:12:b8:62:e6:bf:47:d4:5b:a2:2c:64:56:
70:28:38:a3:0c:7d:98:e7:56:26:d3:02:4a:ac:37:
86:40:d9:10:7a:68:c2:32:7c:c3:56:e7:12:35:a7:
78:76:3c:11:b8:f9:7e:94:f5:ef:ed:52:ea:43:3e:
2a:8d:a9:f8:5a:bc:83:0d:39:7f:13:d3:18:81:bc:
60:eb:d3:0c:c5:01:ec:ef:29:15:86:cf:06:86:8a:
40:7d:85:65:c0:91:c5:73:25:4b:ec:ec:6e:e9:a5:
9c:a3:4f:3e:ac:68:b6:51:af:34:52:05:99:f6:9c:
16:09:d9:d4:ce:93:d8:bb:55:d1:44:d1:9f:2a:1b:
cb:ec:84:a5:50:af:1a:ed:ca:6f:48:1e:d7:d2:2e:
14:62:61:8f:7f:28:9f:b0:4a:14:e3:66:9b:b0:1a:
62:45:56:c4:11:f1:58:a7:0b:f0:42:69:2a:12:7c:
50:54:5f:23:8d:6f:55:cc:17:83:b2:65:0f:2c:5e:
d5:d3:ef:a3:0b:91:1b:22:6f:62:f2:33:8d:b9:39:
a5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:38:E2:C8:49:CF:CD:17:00:23:D9:FF:51:FE:EE:76:F6:2C:62:E3
X509v3 Authority Key Identifier:
keyid:DA:01:32:3E:FA:FE:E3:32:06:4E:27:8B:97:CB:8D:1F:9D:8F:EF:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gEyPvr-4zIGTieLl8uNH52P73k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/7zjiyEnPzRcAI9n_Uf7udvYsYuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/2gEyPvr-4zIGTieLl8uNH52P73k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.112.0/24
Signature Algorithm: sha256WithRSAEncryption
24:7f:d5:e7:04:36:74:20:9a:1e:9e:36:df:f5:43:a1:6e:01:
a0:b7:75:b7:30:3b:6b:b8:92:dd:ea:20:67:b1:ff:d3:cd:c4:
61:14:55:3d:22:13:08:69:1d:4f:68:d3:d9:a9:5c:a2:b0:5e:
29:b4:25:c4:52:ac:3c:e3:bd:0d:ae:3d:3c:9a:d9:42:86:a1:
ef:b4:70:55:99:12:af:46:d3:a8:1d:ac:99:1d:be:1f:86:6d:
c3:b1:6f:33:54:f1:9a:c3:4b:d6:74:6a:a1:a7:f8:7b:f2:98:
b0:a8:2a:67:09:89:b1:9f:d7:f7:4d:f9:7f:f7:a8:cb:3e:48:
aa:43:92:2c:2c:7b:37:0c:78:7f:0d:bb:6c:4e:f3:87:05:a1:
74:dd:f7:99:0a:14:e2:39:cd:c9:2f:57:99:d2:38:6c:aa:a5:
5b:01:02:05:c4:bd:70:4e:c0:32:5d:eb:9b:df:56:d4:14:d3:
f6:f3:58:65:7f:43:60:a2:a5:64:2b:e3:db:26:0f:1d:d6:e7:
e7:87:2e:77:ee:78:76:a9:ad:8c:6a:dd:a4:47:a1:b3:fb:3e:
89:67:cb:09:25:ce:59:5d:2c:96:17:50:b7:9d:84:08:c3:b1:
2e:ae:88:f7:7b:e4:0b:ef:21:e7:f6:6d:d1:21:d9:d1:7f:8e:
bf:a0:d1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:11 2023 by rpki-client on console-fra.rpki-client.org