Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/DjvVFXxbEunF2nkIB5nC5nHIeTk.roa
File: DjvVFXxbEunF2nkIB5nC5nHIeTk.roa (raw, json)
Hash identifier: 07UmOm2rSeGGbTrhtmYGdMJN1C/VuRq2QTBrkU/Sb2Y=
Subject key identifier: 0E:3B:D5:15:7C:5B:12:E9:C5:DA:79:08:07:99:C2:E6:71:C8:79:39
Certificate issuer: /CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
Certificate serial: 01857139EE68C2B8B2F158C13B1F90A403A4
Authority key identifier: 1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/DjvVFXxbEunF2nkIB5nC5nHIeTk.roa
Signing time: Mon 02 Jan 2023 06:44:59 +0000
ROA not before: Mon 02 Jan 2023 06:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202936
IP address blocks: 185.241.232.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:ee:68:c2:b8:b2:f1:58:c1:3b:1f:90:a4:03:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
Validity
Not Before: Jan 2 06:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e3bd5157c5b12e9c5da79080799c2e671c87939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:92:92:49:21:01:69:fb:10:dd:5e:86:9f:
71:68:ae:66:ad:fe:71:97:dd:44:22:72:a2:ec:09:
c8:7f:0f:71:7b:c8:a7:f2:91:6c:f8:9d:f8:a4:2f:
6e:c3:e5:bb:a9:c5:9c:5c:c1:13:d1:4f:6a:a4:0a:
ba:15:f5:f7:91:ad:47:28:a6:a0:54:60:30:d9:cc:
f3:65:b2:8b:e8:0e:21:8d:de:33:5d:64:9d:29:3e:
23:2d:28:75:76:74:b4:e4:a6:a5:f1:b5:e5:8b:40:
89:84:ed:ba:78:3a:4d:cc:cc:d5:24:dc:74:c7:c4:
77:54:e9:b5:26:e8:93:24:16:49:eb:bb:32:09:0a:
bc:4d:a2:93:fd:a3:d0:8d:ac:38:b8:f9:9b:27:c0:
07:8b:bd:af:b7:f0:d1:2c:41:ab:af:56:9c:58:9a:
27:34:d3:cd:af:7b:77:8a:bc:ce:fc:56:ec:7d:72:
37:af:eb:f0:d5:04:d6:32:c1:96:1d:42:1a:34:70:
44:95:f8:13:66:93:c2:5e:3f:96:55:5f:bb:d7:dc:
d3:c2:48:27:52:32:7b:d6:95:05:8f:e9:e2:91:f5:
f4:54:06:a4:9f:91:d8:ee:30:a4:5d:05:27:1a:c8:
9a:16:7e:cf:16:17:f7:10:88:fc:0d:de:cd:c7:31:
f8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3B:D5:15:7C:5B:12:E9:C5:DA:79:08:07:99:C2:E6:71:C8:79:39
X509v3 Authority Key Identifier:
keyid:1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/DjvVFXxbEunF2nkIB5nC5nHIeTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.232.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:7b:82:d2:fc:d8:a3:6e:1a:93:47:99:ca:f9:08:f7:c8:f5:
39:84:ae:29:fc:d5:19:5d:36:c8:f1:bd:68:41:1a:c1:d9:59:
49:bd:9a:53:af:84:15:e8:ad:ab:71:47:9f:3e:cc:5a:58:13:
5f:f5:3d:37:18:f8:18:ee:4e:14:13:16:6c:c8:43:4f:41:a2:
55:a4:67:4b:30:1b:03:b5:3f:64:6a:ca:09:50:00:7f:ea:b3:
82:f2:57:7a:16:91:4c:5b:c8:ed:07:4b:0a:8a:ef:78:e4:4b:
cb:5c:e6:4e:44:e4:74:9e:26:81:eb:be:da:b5:dd:1b:28:60:
ef:cd:af:ab:77:8d:28:fb:6a:ba:86:21:38:9e:26:d3:ab:70:
37:c9:20:76:71:60:0c:5d:ed:7b:93:f1:d4:6b:dd:fd:5c:0f:
ef:dd:18:0e:b4:c5:3a:bc:a9:2d:e4:1c:d4:07:85:5e:82:c3:
80:e7:9a:91:5a:5b:e9:35:9e:db:5c:97:ad:c4:a3:ee:7e:09:
15:0d:b9:2b:a4:23:2d:6a:9e:9d:40:dc:d4:cc:c5:c2:a7:0e:
75:e6:b6:ba:bc:39:0b:0e:9e:91:bc:8b:63:e7:b8:e1:1c:a0:
08:63:aa:5b:05:56:a8:11:a8:50:e0:e1:e9:97:e1:d8:c2:78:
1d:30:f0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:50 2023 by rpki-client on console-fra.rpki-client.org