Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/E-3nQoPuLS9gvwJAcTrLnQ3bp78.roa
File: E-3nQoPuLS9gvwJAcTrLnQ3bp78.roa (raw, json)
Hash identifier: /BY8R9wpdoomc6BbWwEh2h+InVitDUsEbYxtPcjZnYc=
Subject key identifier: 13:ED:E7:42:83:EE:2D:2F:60:BF:02:40:71:3A:CB:9D:0D:DB:A7:BF
Certificate issuer: /CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Certificate serial: 0188916C463C49D1F42AA77510E229E16520
Authority key identifier: 8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/E-3nQoPuLS9gvwJAcTrLnQ3bp78.roa
Signing time: Tue 06 Jun 2023 15:56:11 +0000
ROA not before: Tue 06 Jun 2023 15:56:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.34.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:6c:46:3c:49:d1:f4:2a:a7:75:10:e2:29:e1:65:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Validity
Not Before: Jun 6 15:56:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13ede74283ee2d2f60bf0240713acb9d0ddba7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:29:ab:73:f1:62:4e:2d:e9:fe:da:64:c4:e5:
99:be:d0:28:ae:f0:76:73:2d:94:f6:6d:e3:05:23:
d4:56:33:31:89:3c:80:45:de:2d:e0:35:bb:e5:33:
6c:04:50:ac:79:04:9d:b0:60:cf:99:2a:b3:c1:6c:
19:72:6a:f8:f5:c6:03:6b:67:0d:28:fe:8f:84:08:
70:e3:23:75:fa:8d:38:b6:20:50:7d:9d:69:90:59:
27:fc:70:f3:ef:20:15:5b:d1:98:1c:9a:84:56:95:
0f:83:df:34:91:91:63:36:3f:ea:f1:41:94:52:03:
9d:07:e2:c6:68:d1:36:cc:9d:18:65:36:31:00:f1:
53:ed:b5:6f:62:09:b3:e1:7b:8b:ee:d9:29:6a:d5:
73:98:95:7f:02:aa:fb:f9:dd:ab:8c:86:ea:fe:8a:
bc:44:50:9e:0b:31:96:56:40:f6:d2:cd:42:18:9a:
a8:8f:9d:49:62:14:18:12:e5:8d:53:29:29:e4:1d:
59:a0:38:e1:44:53:a2:fc:94:6e:91:2a:7e:8b:86:
cd:05:b4:ae:cb:e4:fd:27:f0:8b:75:a7:61:c4:fc:
82:a3:c2:1a:30:e2:97:50:5b:9a:99:69:7d:df:46:
e3:0a:36:b4:bd:cc:97:55:6b:ef:07:ce:4b:6f:e0:
f4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:ED:E7:42:83:EE:2D:2F:60:BF:02:40:71:3A:CB:9D:0D:DB:A7:BF
X509v3 Authority Key Identifier:
keyid:8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/E-3nQoPuLS9gvwJAcTrLnQ3bp78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.188.0/24
Signature Algorithm: sha256WithRSAEncryption
51:26:31:45:95:d3:cc:8a:39:96:86:6d:a6:7b:99:7b:7c:05:
cf:f4:12:b3:34:d0:3f:e7:9d:7e:d8:de:11:31:fc:5b:6c:f7:
d5:d2:ea:92:93:ee:29:68:f1:29:1c:ed:0b:2a:5b:56:0e:ae:
59:d7:9f:11:10:92:68:75:fe:7b:18:d1:aa:7b:48:c5:1b:0c:
34:3b:d8:58:f9:f0:f9:93:81:6c:1b:c6:45:f1:a9:32:cb:2a:
90:e0:ec:0d:6c:20:d5:03:7e:8c:71:89:89:23:df:b4:35:c4:
a1:27:7d:e1:21:dc:3e:b8:6d:fb:a1:83:ce:eb:cb:fb:1e:f9:
2e:95:ec:e3:9b:0a:f6:1c:6d:c9:ed:43:82:7b:e2:72:39:59:
3f:cc:63:0e:76:f9:a0:6b:26:39:4f:ff:2a:cb:45:ab:7c:89:
09:a1:40:d5:36:e6:8c:71:55:02:09:e2:5e:85:fd:23:63:15:
c3:ee:46:cc:78:f8:6e:ff:af:a9:6b:88:13:eb:ae:0e:8d:c1:
43:70:9d:17:74:50:57:b2:20:87:75:be:81:83:96:a5:ca:3c:
b6:fc:7e:71:aa:df:1b:65:8e:09:66:e3:0f:5e:5a:76:44:05:
57:72:4e:35:bf:4a:25:e3:c3:cb:f2:69:03:a4:bf:55:04:cc:
92:79:35:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:09 2023 by rpki-client on console-fra.rpki-client.org