Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/N-EpeLnujbKivZw2AKs3BtDhU-8.roa
File: N-EpeLnujbKivZw2AKs3BtDhU-8.roa (raw, json)
Hash identifier: fTjMjUnreYukowSbsIL6/HCzaNBRT8fbDYGeqm2AZh4=
Subject key identifier: 37:E1:29:78:B9:EE:8D:B2:A2:BD:9C:36:00:AB:37:06:D0:E1:53:EF
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018571C321DBE6A83E9BCC3DD95289774CC2
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/N-EpeLnujbKivZw2AKs3BtDhU-8.roa
Signing time: Mon 02 Jan 2023 09:14:51 +0000
ROA not before: Mon 02 Jan 2023 09:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207537
IP address blocks: 185.133.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:21:db:e6:a8:3e:9b:cc:3d:d9:52:89:77:4c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 09:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37e12978b9ee8db2a2bd9c3600ab3706d0e153ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:68:36:25:37:a0:f5:e8:ba:c5:ef:1f:d6:94:
1c:11:35:d5:da:da:46:12:63:50:5e:3e:e9:3e:94:
91:69:31:fd:c4:fd:56:10:e1:53:f5:b1:db:6c:30:
3f:44:de:ec:cf:74:fc:d1:84:0a:ab:c7:ff:e2:84:
b4:e2:80:02:9d:f9:dc:cf:92:39:c2:08:d6:bb:b1:
90:2f:14:90:04:26:6c:da:fc:70:58:2a:6e:65:3d:
83:b0:46:ee:7a:65:7e:55:91:24:c2:0b:09:04:d8:
be:54:f9:7d:2e:28:55:2b:30:c1:db:cf:04:f0:cf:
55:c0:8c:3b:54:bf:6b:a9:2c:23:74:cc:a3:9b:a8:
26:e9:79:82:3d:6b:07:3d:8c:20:61:3e:1d:4e:f8:
55:6f:21:f1:93:56:2e:fa:5d:ef:c8:a5:99:c1:5f:
e8:76:7c:50:da:97:2e:cf:d9:d2:64:d4:a9:7f:79:
f1:3a:b7:f1:3e:de:46:c4:ba:11:12:04:3d:3e:ae:
0a:af:34:b4:5e:68:c8:f1:11:2e:d3:a1:e8:2a:85:
37:b9:c8:50:63:d4:82:17:9b:a6:8f:4e:b7:f4:1a:
c0:76:c6:b6:13:ae:75:3b:d4:3e:73:82:31:56:95:
e6:67:f0:d4:84:21:da:f3:2c:e6:7b:0f:54:51:a3:
92:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E1:29:78:B9:EE:8D:B2:A2:BD:9C:36:00:AB:37:06:D0:E1:53:EF
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/N-EpeLnujbKivZw2AKs3BtDhU-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.211.0/24
Signature Algorithm: sha256WithRSAEncryption
41:fb:ec:fd:46:55:34:ad:ea:56:74:ed:f7:85:da:62:98:af:
f2:54:3c:16:91:a7:9b:4f:4c:fd:67:81:3e:71:6e:9b:db:2d:
9c:5f:9f:2e:4b:d4:c0:3b:0b:ce:83:c1:97:62:d3:0e:5c:0b:
49:5b:88:6c:5e:ef:e9:9e:0a:51:7c:ee:4c:8d:34:87:d1:1b:
d8:2f:29:45:ae:d1:0b:c6:c7:6c:aa:89:e1:7e:74:15:54:22:
8d:cd:0a:0a:26:73:8e:28:1b:1f:a7:94:a9:90:b8:65:2c:65:
48:14:5f:06:76:e7:6d:6a:b4:41:5f:40:ea:7f:94:e3:ae:c1:
e8:02:5a:43:f0:6d:23:70:e0:c6:23:4a:49:a9:81:3f:08:08:
f2:40:fe:18:5e:fb:70:82:80:79:3b:15:fc:f9:ff:be:e0:f1:
bb:cd:9a:07:67:77:fd:ce:4a:a1:f3:3b:ab:79:b1:fd:09:37:
db:03:ab:e0:2d:45:8b:0f:3f:12:c2:e4:6c:a9:35:17:c3:83:
8b:99:80:03:d9:55:c2:c1:77:f1:e8:55:34:e2:66:6e:f6:51:
84:9b:e3:2a:a3:13:7a:48:ac:02:f7:1f:cb:34:65:35:72:0e:
7d:51:24:92:23:33:36:fd:2d:b0:f2:e0:ae:65:46:48:50:e0:
00:a6:3e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:16 2024 by rpki-client on console-fra.rpki-client.org