Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/lT_7YTMTZjwJ9k5dtT6wi6QjGks.roa
File: lT_7YTMTZjwJ9k5dtT6wi6QjGks.roa (raw, json)
Hash identifier: tZokk8Ic8uvqpgDRj+AwO50pcPBjVotTPy3gVehUilA=
Subject key identifier: 95:3F:FB:61:33:13:66:3C:09:F6:4E:5D:B5:3E:B0:8B:A4:23:1A:4B
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 018A3B7BBD2F50ED14995BB90DD5E513FC45
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/lT_7YTMTZjwJ9k5dtT6wi6QjGks.roa
Signing time: Mon 28 Aug 2023 09:31:19 +0000
ROA not before: Mon 28 Aug 2023 09:31:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213005
IP address blocks: 185.219.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3b:7b:bd:2f:50:ed:14:99:5b:b9:0d:d5:e5:13:fc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Aug 28 09:31:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=953ffb613313663c09f64e5db53eb08ba4231a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:dc:42:a0:09:55:f1:1b:81:d2:42:f5:5f:d6:
dc:31:2f:81:68:fe:5e:1e:6c:ad:e4:8e:25:ef:45:
28:7a:59:57:1f:01:dc:bb:9a:53:01:63:f5:e4:28:
1a:7f:9d:98:d2:4b:09:da:d5:0b:28:ec:68:62:fb:
df:83:a1:e2:dd:02:b3:b3:9d:d5:0e:79:fd:91:87:
96:7b:16:6e:84:5d:f8:98:50:43:cb:7a:76:d9:01:
97:b7:7c:96:0f:11:76:2e:16:00:6e:64:df:cf:47:
fa:11:e2:9d:71:42:1a:7b:22:b0:32:da:06:0d:73:
87:be:a6:d0:7d:61:e2:dc:d7:5e:15:9a:d4:4a:63:
4b:69:c0:ed:66:b5:45:cb:25:dd:c6:25:c3:0c:01:
d8:44:ca:34:f2:ed:1d:2b:0e:71:98:8e:ad:1d:b3:
a0:40:92:09:91:63:b1:f7:72:77:82:d6:ed:6a:51:
78:4d:fd:f8:7a:9e:c5:b3:fd:66:3b:62:8d:a5:ea:
ba:98:04:6b:9f:7a:8c:45:91:9d:1b:bc:de:35:cf:
f7:70:e1:ff:97:14:c3:38:d4:6f:75:52:f0:32:b1:
99:e5:19:b1:3e:33:04:ba:20:4a:54:a8:d7:da:2a:
b0:8b:08:56:27:7a:ba:aa:2c:50:f7:11:79:3f:0f:
a2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3F:FB:61:33:13:66:3C:09:F6:4E:5D:B5:3E:B0:8B:A4:23:1A:4B
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/lT_7YTMTZjwJ9k5dtT6wi6QjGks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.7.0/24
Signature Algorithm: sha256WithRSAEncryption
27:9f:c8:5b:c5:f4:27:71:43:67:cd:91:c7:f7:aa:7c:10:b7:
65:ba:fc:d7:b0:90:21:7c:b5:88:bf:cc:ff:57:c3:96:d7:78:
c6:f8:af:e2:e6:2b:50:47:b0:ef:75:f1:44:ea:fc:47:bc:39:
53:08:02:0e:ac:2a:9a:c4:71:c4:02:83:72:e8:1f:85:cf:38:
6f:e0:77:e5:e8:26:26:a1:92:ab:9e:9a:a7:18:03:b8:e7:ec:
2f:76:71:24:51:2d:e5:92:d1:8b:75:de:c7:21:25:18:15:2f:
13:c4:c6:d5:6e:7b:7c:35:15:f9:8f:1a:37:70:2b:fe:ce:0e:
90:0c:e1:38:f4:3a:f3:d5:7b:51:61:ac:6d:40:a7:91:59:84:
1f:ea:b7:21:ff:6c:da:35:a7:ba:4d:76:06:30:b4:fd:ed:5a:
72:10:d7:46:82:42:67:4a:70:e8:5c:c3:36:61:a3:ea:b4:be:
35:db:9f:d8:03:61:30:c4:7d:28:3f:16:0a:ae:3b:0e:11:66:
b0:fe:77:f0:ca:7d:6b:a7:a2:69:3e:83:71:ff:bf:53:5c:71:
3c:d0:32:d1:bd:b4:ff:7a:41:e1:f6:5d:80:82:25:16:2f:01:
25:c5:c5:f3:b6:4f:e5:c5:b6:26:81:7e:ff:0d:1c:d3:f8:ab:
49:98:a7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 11:59:32 2023 by rpki-client on console-fra.rpki-client.org