Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/t7Gs07oZUy5T1HbJ3u4LW5nn6eQ.roa
File: t7Gs07oZUy5T1HbJ3u4LW5nn6eQ.roa (raw, json)
Hash identifier: QU6malSLwGG9kuOFQH3Js9fVgbwG5Mzdfx2JX4ub2DI=
Subject key identifier: B7:B1:AC:D3:BA:19:53:2E:53:D4:76:C9:DE:EE:0B:5B:99:E7:E9:E4
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD522F7A124B8FA3302F7E5E69BE255
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/t7Gs07oZUy5T1HbJ3u4LW5nn6eQ.roa
Signing time: Mon 02 Jan 2023 00:15:17 +0000
ROA not before: Mon 02 Jan 2023 00:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47388
IP address blocks: 188.215.93.0/24 maxlen: 24
94.176.42.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:22:f7:a1:24:b8:fa:33:02:f7:e5:e6:9b:e2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7b1acd3ba19532e53d476c9deee0b5b99e7e9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f5:38:58:e5:65:82:a5:97:6b:f7:c3:21:ef:
11:37:85:d3:32:21:13:3b:e1:61:44:5b:7a:d1:0b:
be:c1:8f:3e:99:cf:aa:e6:f4:9f:54:9e:2a:4c:93:
ee:0b:43:71:e6:ea:78:ec:9c:e1:a9:22:24:b7:d5:
a3:41:6a:3f:25:bb:c3:31:f5:1d:67:b9:00:88:8b:
65:23:92:42:2f:5f:61:03:53:3d:dc:e6:12:c4:86:
cd:29:cc:90:bb:09:6c:db:a8:c2:e4:72:fd:52:59:
27:e0:8e:ea:be:6f:96:ed:89:5a:d8:8b:9b:5b:bf:
27:28:b7:76:8b:15:81:08:cc:8f:70:dc:8c:18:f5:
90:0c:ff:e2:1e:a4:c8:ad:87:09:4c:a0:a5:99:a0:
c7:48:79:bc:78:d7:3c:e1:20:36:e4:9a:65:52:95:
13:8c:d2:23:4c:d4:f2:29:43:85:03:fa:3e:db:2b:
24:51:70:84:32:a4:a5:3e:a2:6c:f3:99:0c:03:9d:
3c:c7:22:f0:d1:29:51:42:f6:2b:d5:5d:70:b2:b0:
81:02:f2:1f:9e:4e:e6:e2:ca:52:41:fd:52:23:44:
72:1c:64:4b:45:37:72:38:fa:57:54:14:4d:89:16:
04:77:e6:5b:50:75:1d:30:67:0d:41:ce:69:68:4c:
1d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B1:AC:D3:BA:19:53:2E:53:D4:76:C9:DE:EE:0B:5B:99:E7:E9:E4
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/t7Gs07oZUy5T1HbJ3u4LW5nn6eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.42.0/23
188.215.93.0/24
Signature Algorithm: sha256WithRSAEncryption
73:b6:90:7e:2c:7d:c9:6f:66:67:02:40:ca:25:8c:0a:7f:0f:
4a:c4:c3:d5:67:4b:ec:5e:a6:55:06:f5:26:02:b0:8d:36:51:
16:0a:ae:e0:1d:27:48:62:8c:2f:30:e3:a3:81:07:0c:26:6b:
54:30:e8:1b:f3:9e:00:72:1a:a5:8b:45:9b:2d:34:f9:7e:bb:
ef:2d:1b:bc:ce:7b:a8:0e:d7:9e:e2:e6:88:92:3e:2f:39:6b:
e9:40:c9:39:9f:61:85:a9:24:60:eb:d1:7a:de:34:75:54:05:
00:8e:31:21:1e:3c:03:81:f5:50:28:84:07:9d:07:c0:fe:1c:
26:79:c6:63:07:6a:fe:5f:91:f7:53:68:7d:13:3c:d0:86:55:
39:69:2d:90:f1:a4:b9:30:07:f0:45:df:de:f9:32:2a:7e:c3:
ef:71:49:ff:4a:cf:1e:95:42:c5:07:d5:d0:1d:cf:48:88:21:
03:92:4d:20:17:19:a0:94:d2:71:a2:df:5e:83:17:80:17:7c:
37:2d:b1:55:08:2a:da:5d:75:fc:d7:82:b6:c9:4a:77:31:ee:
d9:37:b6:41:53:2c:0e:6d:39:58:2a:7a:93:36:a3:7e:08:82:
7e:ea:ee:b2:e7:13:f6:86:3c:0f:76:79:35:3b:c3:05:7f:0f:
e7:25:18:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:52 2024 by rpki-client on console-fra.rpki-client.org