Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/7X3xsv_W8YpCWCDIn5bKAZ0aDNQ.roa
File: 7X3xsv_W8YpCWCDIn5bKAZ0aDNQ.roa (raw, json)
Hash identifier: yeGeZLchWOpMny03gpSOkmpYrlBXI7pZ3kWm+5lci5c=
Subject key identifier: ED:7D:F1:B2:FF:D6:F1:8A:42:58:20:C8:9F:96:CA:01:9D:1A:0C:D4
Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial: 01856DA65DED93CF6C9D960BEBAB65350BC4
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/7X3xsv_W8YpCWCDIn5bKAZ0aDNQ.roa
Signing time: Sun 01 Jan 2023 14:04:57 +0000
ROA not before: Sun 01 Jan 2023 14:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34154
IP address blocks: 185.237.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:a6:5d:ed:93:cf:6c:9d:96:0b:eb:ab:65:35:0b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Validity
Not Before: Jan 1 14:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed7df1b2ffd6f18a425820c89f96ca019d1a0cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:66:74:5a:f0:1d:27:92:8b:d0:37:09:64:06:
b4:23:47:34:f1:de:61:33:6c:29:7e:71:98:2b:f7:
9a:1a:e6:5a:68:0d:d5:35:c9:7a:b5:37:a7:2d:59:
5b:bb:51:11:01:8b:13:6f:e6:f1:7e:cb:b8:63:60:
f1:c6:4e:9d:36:b3:4d:90:d0:ea:bf:ca:ae:50:e9:
2b:c7:4e:e7:8d:75:fd:f7:02:19:6d:24:d7:9c:fa:
f5:9a:40:6a:1b:a7:c7:2a:77:56:6f:03:b8:8d:61:
1d:dd:75:bf:c7:b7:e2:03:d7:08:bd:9a:97:9a:7e:
0e:dd:16:3a:16:12:96:ee:b5:c4:68:a1:97:95:41:
35:41:c7:05:32:4b:e9:65:74:b6:30:3d:c7:0b:65:
19:6d:ed:e8:5e:0b:38:da:16:7b:9b:eb:d0:5c:9b:
68:88:57:fe:be:b0:c2:77:7a:e9:35:d4:ee:3b:70:
ff:c6:01:b4:34:b1:6d:a3:e0:9f:77:a6:cf:67:31:
ac:96:e7:f3:47:ee:72:3b:41:2f:1f:2f:eb:ae:ce:
d4:bc:37:53:70:e5:9e:a3:39:dd:5a:02:7c:ca:72:
e2:85:8b:1c:bc:9c:eb:17:d3:fa:ae:5d:d9:44:67:
7a:cc:71:5b:03:d1:d9:69:00:61:e8:16:bb:d7:f9:
27:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7D:F1:B2:FF:D6:F1:8A:42:58:20:C8:9F:96:CA:01:9D:1A:0C:D4
X509v3 Authority Key Identifier:
keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/7X3xsv_W8YpCWCDIn5bKAZ0aDNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.34.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c7:d8:da:0d:4f:03:af:88:a1:8b:fc:73:03:b9:0b:6d:33:
0f:fd:c9:ad:fa:63:56:f1:0a:b5:f8:d1:0c:ba:1f:04:ff:1d:
df:df:db:ed:b3:16:2f:e4:f3:db:3a:96:d1:7e:b1:64:fb:80:
47:8f:e6:9a:cf:db:b7:9b:e1:ed:43:36:2d:8f:cf:2d:40:99:
0a:c7:61:91:fe:d7:b8:70:2e:23:17:07:63:7e:c2:a0:fc:5c:
b0:0f:09:bb:28:1c:59:59:21:fd:21:d0:72:3e:61:ac:ba:36:
37:29:d6:00:04:a1:c9:53:c0:a0:df:14:75:eb:95:ac:12:1d:
0e:f4:7b:de:6a:b4:91:cc:26:04:c2:07:93:3e:21:7f:f5:9a:
46:59:18:b8:fe:8f:6a:47:ac:b9:fa:de:6f:bf:23:21:d1:51:
5b:c3:5d:95:59:01:6d:7f:71:18:8e:34:73:75:f6:ad:ce:dc:
16:0d:40:60:5c:28:45:1d:d1:7d:29:6d:85:3e:51:c8:b0:ed:
01:6f:ed:01:cb:ba:ce:5e:3e:fb:f1:85:fd:29:31:13:45:46:
93:e1:8b:99:20:b2:06:ce:0a:5f:e1:b2:94:6c:19:6f:49:da:
ed:0d:e7:6e:6b:86:67:e2:46:9a:dd:b4:02:c9:ad:ad:5f:23:
4b:d6:d6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:14 2024 by rpki-client on console-ams.rpki-client.org