Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/xZ3ey08s8rP9p4ODWbqeP6jMFtg.roa
File: xZ3ey08s8rP9p4ODWbqeP6jMFtg.roa (raw, json)
Hash identifier: N5qUwq2LFIQxTRhPpt5EFgTJ03gyKE4cjCTDwdsfenk=
Subject key identifier: C5:9D:DE:CB:4F:2C:F2:B3:FD:A7:83:83:59:BA:9E:3F:A8:CC:16:D8
Certificate issuer: /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Certificate serial: 01856D6634323F6389CE5C7D7C7C57E6BEF6
Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/xZ3ey08s8rP9p4ODWbqeP6jMFtg.roa
Signing time: Sun 01 Jan 2023 12:54:52 +0000
ROA not before: Sun 01 Jan 2023 12:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29605
IP address blocks: 185.207.44.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:34:32:3f:63:89:ce:5c:7d:7c:7c:57:e6:be:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Validity
Not Before: Jan 1 12:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c59ddecb4f2cf2b3fda7838359ba9e3fa8cc16d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ea:99:40:f8:04:e4:3b:63:ea:80:df:a9:a1:
60:ef:ff:86:35:40:39:65:50:e9:36:12:36:b8:f8:
16:c7:e3:79:f5:cf:43:c0:28:b2:9d:90:0b:09:52:
bb:12:2b:d0:55:f0:c0:05:7b:8b:07:54:65:e3:d3:
45:cd:2e:70:40:94:81:72:7b:db:ed:34:fa:8b:91:
df:6e:49:72:ae:6b:ea:24:35:a3:e8:dd:16:cf:de:
ab:55:b3:e2:f7:7d:fa:2b:46:90:f0:60:65:aa:02:
db:4b:19:87:95:6d:18:67:5a:57:ae:15:66:50:b0:
1d:32:04:5c:49:77:c6:b1:c3:a0:ea:7e:8c:26:d0:
33:e4:11:95:9f:17:d2:ba:13:b9:19:6d:cb:5d:95:
0b:d3:61:77:c8:6d:07:fa:af:0d:7d:e7:ce:47:3b:
11:95:e9:e3:ae:fc:e1:7f:a3:40:44:63:05:e9:10:
5f:b0:3e:c2:c6:fb:d2:53:9f:ca:89:54:ae:01:ed:
0f:84:fc:ca:92:4c:12:0f:67:99:70:d4:4f:ba:17:
04:22:8b:66:3e:1d:91:76:42:91:b4:a5:29:c7:65:
f9:8c:c3:04:74:6a:ba:91:08:e6:2a:86:37:c1:77:
f8:e3:04:5f:45:d8:8e:73:38:fd:6d:4f:de:7d:59:
e1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9D:DE:CB:4F:2C:F2:B3:FD:A7:83:83:59:BA:9E:3F:A8:CC:16:D8
X509v3 Authority Key Identifier:
keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/xZ3ey08s8rP9p4ODWbqeP6jMFtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.44.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:05:ff:9c:d5:8d:93:ef:68:82:e5:8d:69:16:9c:02:35:2c:
fb:ce:da:92:9d:b6:1f:c7:20:81:7e:00:0e:21:d7:e0:d9:bc:
bf:36:b6:8d:57:d3:49:97:70:b0:83:d0:ec:cd:10:8f:16:4d:
b3:05:b9:6b:64:22:27:6a:7d:61:4d:b2:94:34:4f:04:c6:3f:
d9:4b:4c:0b:3c:24:d5:1a:05:2d:23:eb:d5:c7:8a:4b:70:51:
f6:6f:fd:6e:2d:5c:8d:85:f8:1e:fe:f5:06:3c:63:92:43:6f:
f2:fa:fa:a9:af:45:af:40:5e:0d:c3:08:f3:d5:f8:a0:ff:9d:
ab:cc:07:63:28:33:e6:62:15:4e:57:72:92:5b:77:cf:79:6f:
62:9c:c6:db:31:30:4a:c9:14:7d:f8:d6:bb:81:61:1a:20:2e:
86:12:ab:3a:db:a3:d1:ce:5c:eb:75:a4:98:7c:a0:97:28:7d:
8a:17:6c:5e:d3:5e:33:a7:90:9a:49:db:fd:02:b8:01:e6:47:
68:43:25:d2:64:1e:85:02:9b:e8:c4:81:d8:09:8c:33:75:8f:
35:a4:b7:9c:38:80:22:f9:0c:62:10:c8:86:45:f8:f0:7e:40:
5e:f8:16:4d:39:78:1e:65:38:ab:ec:27:19:e0:07:8e:f7:26:
95:81:c7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:37 2024 by rpki-client on console-fra.rpki-client.org