Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/773JPARHdPlqn0NUn5_3P3Jrj_w.roa
File: 773JPARHdPlqn0NUn5_3P3Jrj_w.roa (raw, json)
Hash identifier: UAu7L/ITsJ6M5c2cYLJqDCBdw8MuTxdU2yw+gHTkpPE=
Subject key identifier: EF:BD:C9:3C:04:47:74:F9:6A:9F:43:54:9F:9F:F7:3F:72:6B:8F:FC
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 018B04AFADD0D7DF867A29BAD3DBB94AB689
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/773JPARHdPlqn0NUn5_3P3Jrj_w.roa
Signing time: Fri 06 Oct 2023 11:11:43 +0000
ROA not before: Fri 06 Oct 2023 11:11:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207046
IP address blocks: 185.232.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:04:af:ad:d0:d7:df:86:7a:29:ba:d3:db:b9:4a:b6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Oct 6 11:11:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efbdc93c044774f96a9f43549f9ff73f726b8ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6f:f4:ae:9f:d1:ba:ea:fd:f0:6a:8b:cd:34:
8b:b1:8e:2a:66:98:c5:00:73:5d:45:a0:ea:e8:be:
0b:ab:72:79:7e:ee:de:fc:14:34:fa:a6:e8:b4:7d:
c9:fd:9b:02:dd:32:81:99:7f:26:e4:8c:bf:87:86:
40:7a:5d:bc:be:bb:8e:98:4a:33:7c:41:ac:51:29:
5a:f5:db:c4:ff:04:d8:c1:5d:13:36:dc:df:6a:51:
50:a2:7e:9a:3a:71:11:52:cd:45:ab:bb:52:4a:68:
c3:f2:0e:2e:e4:57:de:a7:80:75:ff:77:c5:74:a4:
1a:43:a1:6a:9f:db:ae:02:8e:e9:2d:0d:6a:9d:b5:
20:1a:3a:17:a6:a2:bc:cb:df:70:be:db:27:c0:4f:
72:32:57:39:7c:98:2b:69:f1:60:02:51:e5:0b:5b:
8a:08:03:e9:56:b1:cd:db:18:9c:cd:d3:96:27:5c:
93:89:58:8c:00:1a:86:e2:62:5a:60:80:d1:9b:92:
d1:8f:5a:f4:ab:92:54:6c:05:a8:de:51:70:83:66:
43:f6:89:77:bc:8d:c0:5a:60:8d:4a:13:27:8e:1d:
5a:e2:b0:f9:33:fd:89:40:99:f7:3a:1e:57:f5:20:
be:88:7b:0d:92:a6:7a:ac:89:7e:b2:bf:94:84:53:
e6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BD:C9:3C:04:47:74:F9:6A:9F:43:54:9F:9F:F7:3F:72:6B:8F:FC
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/773JPARHdPlqn0NUn5_3P3Jrj_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.41.0/24
Signature Algorithm: sha256WithRSAEncryption
09:2f:bd:16:e4:5b:44:fb:61:a2:08:96:f2:c3:08:33:87:26:
0b:39:3c:9b:6f:1e:18:a5:6b:ee:25:aa:a7:52:f3:b5:00:70:
af:a7:00:94:bc:57:1d:e0:6d:a1:08:28:e1:90:10:13:19:ed:
70:9d:09:84:6e:fb:d5:3c:4d:54:a3:80:3d:5a:45:82:e9:89:
32:b8:51:23:bf:3a:c4:36:c9:57:6b:a8:20:58:93:08:75:76:
81:f2:b0:db:f7:39:6f:d3:f6:97:e5:31:4e:3c:34:1b:f2:fa:
77:79:ff:37:e9:0b:e0:f8:e4:f2:8c:52:5c:d0:07:b3:ba:e4:
9e:60:01:9f:c9:79:0e:7a:ad:17:3f:ce:4c:59:52:bc:6e:c8:
6f:71:02:1a:df:6a:33:86:69:f0:0f:f7:5f:b3:1f:04:eb:9e:
22:87:82:d2:bb:06:00:d2:e7:79:ee:d3:dd:29:27:3e:bb:46:
68:53:69:68:60:a8:1f:d5:63:53:e3:0c:68:cf:2e:66:f7:c2:
35:ff:c3:db:5a:29:ec:11:bb:9d:c2:95:84:34:64:9b:34:e4:
7e:d1:83:83:ec:ea:84:37:bc:66:81:d5:64:64:9f:ef:62:b3:
ec:5e:aa:3b:61:4e:1d:98:b7:3e:d8:cf:a3:4f:cb:a5:2d:28:
4a:ef:da:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:17 2024 by rpki-client on console-fra.rpki-client.org