Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/CjUC2yQ2BCYd8_yACyih570pk4Q.roa
File: CjUC2yQ2BCYd8_yACyih570pk4Q.roa (raw, json)
Hash identifier: XjRubVRD0jBJ8iC5R9720mWoDSFDPZ8oRZ2ev8nUqbM=
Subject key identifier: 0A:35:02:DB:24:36:04:26:1D:F3:FC:80:0B:28:A1:E7:BD:29:93:84
Certificate issuer: /CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
Certificate serial: 0185718C2E6166F8B152EA04495313FEB467
Authority key identifier: EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/CjUC2yQ2BCYd8_yACyih570pk4Q.roa
Signing time: Mon 02 Jan 2023 08:14:50 +0000
ROA not before: Mon 02 Jan 2023 08:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204773
IP address blocks: 185.66.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:2e:61:66:f8:b1:52:ea:04:49:53:13:fe:b4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
Validity
Not Before: Jan 2 08:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a3502db243604261df3fc800b28a1e7bd299384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:af:72:cd:24:fa:f9:55:5a:e7:c1:3f:a0:39:
8b:b8:dd:aa:80:34:2c:51:7e:5a:93:8b:66:d1:d8:
42:91:83:b4:7c:62:6e:12:f1:30:a6:62:32:be:3c:
c7:c9:88:dd:df:39:d4:37:06:18:70:ce:7c:60:5e:
98:47:65:4c:a9:d2:7e:9a:6c:bd:c0:ea:a5:36:33:
a6:b6:ed:9d:e7:df:cd:95:ec:cb:b5:8f:44:4c:e3:
00:4e:51:8f:52:2c:de:61:14:1f:98:dd:52:fd:c1:
b1:ff:dc:f5:fb:91:71:61:23:d7:39:0e:fc:9d:d5:
f9:52:34:a8:05:9f:f7:a1:96:8c:65:35:b7:f0:c3:
99:c1:ce:a7:93:99:fc:70:fd:bc:74:ee:bc:e5:8f:
e0:b8:08:57:5d:0f:00:30:20:f4:a3:a6:aa:2a:71:
6b:62:00:11:22:45:0f:46:20:37:c5:30:36:98:b2:
c8:be:01:6c:3d:23:31:25:2b:03:34:f6:d7:6f:d1:
2a:a2:38:f4:a5:c5:36:54:ad:fd:6c:85:26:72:b0:
17:e6:77:93:4d:1c:8b:1e:bc:10:85:4d:c6:49:17:
ba:28:bf:08:ca:8d:b0:fc:2a:df:3c:aa:d3:28:be:
b2:75:00:b7:cf:30:3c:58:f5:59:87:d9:07:62:e5:
24:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:35:02:DB:24:36:04:26:1D:F3:FC:80:0B:28:A1:E7:BD:29:93:84
X509v3 Authority Key Identifier:
keyid:EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/CjUC2yQ2BCYd8_yACyih570pk4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.75.0/24
Signature Algorithm: sha256WithRSAEncryption
59:47:4f:d2:36:00:2f:af:b4:31:ab:8f:7c:34:31:4d:44:4d:
cb:84:71:60:59:5f:50:6e:af:bd:5d:79:8c:d5:0e:04:f6:c5:
20:f0:05:4f:b5:9b:c4:ba:fb:9b:a1:4b:73:4d:e2:0e:91:f7:
ed:2a:12:13:c9:d8:6c:37:4d:fd:9d:15:50:bb:e7:99:a7:af:
58:39:7d:77:6e:39:5d:12:15:03:2a:58:04:e6:e8:f1:8e:69:
23:d5:77:0c:b0:fa:f1:b4:ab:f2:ea:4a:37:c5:79:5a:68:c8:
f5:b2:b6:2a:23:08:4d:8e:d9:c0:0e:af:88:8d:ff:17:27:ef:
56:a3:42:2b:15:de:65:61:cc:dd:e1:a8:1b:a0:d2:71:ec:93:
92:ce:c7:47:54:0d:7a:8c:22:29:5d:6d:55:1d:c2:74:7d:fe:
f8:45:d5:de:ab:10:f6:79:1f:3b:39:ca:8f:14:f7:4d:e2:fa:
87:a5:70:20:62:e9:3c:1e:0a:b1:7d:2f:40:ea:ea:4d:0f:32:
3c:f7:56:f0:54:17:a3:6b:c3:35:92:70:2f:7f:e7:5c:22:24:
52:3f:ee:02:cb:d5:8a:a1:d5:e8:95:7e:13:fc:58:b3:7d:69:
f4:4e:80:ce:9f:41:4a:10:12:b9:69:e0:52:e0:66:4f:aa:30:
49:89:b8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:16 2023 by rpki-client on console-fra.rpki-client.org