Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/7UA1DO8YCtGnw_0EJ0FvB0KDgCg.roa
File: 7UA1DO8YCtGnw_0EJ0FvB0KDgCg.roa (raw, json)
Hash identifier: jxt8yn+2ZbOxDwAxBUE5/Sfh0zHm/mAKYbt5xuTx3WY=
Subject key identifier: ED:40:35:0C:EF:18:0A:D1:A7:C3:FD:04:27:41:6F:07:42:83:80:28
Certificate issuer: /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Certificate serial: 01856FF02E9741EAF255B43B1B468DC3256D
Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/7UA1DO8YCtGnw_0EJ0FvB0KDgCg.roa
Signing time: Mon 02 Jan 2023 00:44:49 +0000
ROA not before: Mon 02 Jan 2023 00:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35699
IP address blocks: 185.158.170.0/24 maxlen: 24
185.77.158.0/24 maxlen: 24
185.86.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:2e:97:41:ea:f2:55:b4:3b:1b:46:8d:c3:25:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Validity
Not Before: Jan 2 00:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed40350cef180ad1a7c3fd0427416f0742838028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bf:94:a4:07:7b:88:c0:61:2e:c8:63:f1:c9:
9d:30:7d:46:30:d2:18:b4:8f:2b:f5:2b:4b:d4:46:
8a:4d:bb:bc:77:c4:1a:98:01:50:3e:73:4c:3e:19:
16:53:86:ec:f9:ed:15:b5:3d:97:e3:5d:ba:ba:ef:
b1:67:72:31:b8:db:a5:22:d1:fb:ba:92:2b:f4:45:
6d:ac:11:c0:bc:d7:d0:f0:3a:8b:b5:10:3f:2d:17:
1e:25:0d:33:e2:a8:77:9d:ed:eb:61:4c:6c:2e:00:
4e:53:65:50:53:79:01:ca:3b:7d:66:f1:1e:f1:dd:
38:8a:63:e2:9e:c1:a5:20:20:1c:05:77:cb:6e:7b:
f6:ed:fb:79:8f:61:5f:03:20:3f:24:93:84:11:4a:
db:e0:e2:49:e0:45:9b:71:46:20:60:cd:87:4b:79:
10:6e:0a:30:d2:eb:8f:9e:cc:eb:11:29:e8:e8:6d:
a9:e0:81:00:14:4f:bf:04:d1:c1:b5:fd:1a:5c:ee:
a1:82:1d:17:53:62:ed:c0:7c:76:e1:8b:9e:80:0f:
d8:11:3d:73:5b:84:2a:54:b2:16:f2:f5:7c:83:85:
b1:6a:38:56:97:a3:0e:6e:b0:5a:d3:f4:21:57:8f:
47:ed:be:6a:92:be:1e:5c:78:2f:5a:45:df:e2:cd:
68:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:40:35:0C:EF:18:0A:D1:A7:C3:FD:04:27:41:6F:07:42:83:80:28
X509v3 Authority Key Identifier:
keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/7UA1DO8YCtGnw_0EJ0FvB0KDgCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.158.0/24
185.86.9.0/24
185.158.170.0/24
Signature Algorithm: sha256WithRSAEncryption
91:af:57:10:f5:ff:1d:26:6d:6f:23:5e:ed:07:bc:1e:00:43:
e8:16:b9:b9:b9:d5:9c:fc:63:30:5e:0a:2b:6d:69:df:3b:e2:
6a:32:0a:ee:bf:a3:6d:d6:63:0e:f9:42:07:2a:0d:ac:09:32:
e1:51:84:05:c8:fa:b6:33:b1:68:62:ae:1a:a0:47:6c:32:b7:
d4:10:14:5f:92:ec:ee:42:db:6f:8f:a1:e6:a1:1c:f1:80:9c:
e5:a0:f9:e3:3e:9d:73:a5:e7:2b:22:12:ae:b1:15:8c:9a:e6:
68:18:96:f7:aa:95:18:72:75:2b:8d:b7:a7:c3:f6:9c:3f:01:
b8:87:e3:e3:de:1c:98:a1:03:ab:8d:2b:5f:fc:1d:3c:fa:0e:
05:17:6a:58:30:ad:0c:0c:13:9c:bc:54:da:85:94:f7:a3:e9:
1a:27:8d:eb:ce:5f:9e:73:88:dc:b6:46:1e:5d:c8:a0:6c:00:
bd:82:2c:8d:9a:ab:75:0b:96:18:1b:45:b9:61:ea:3d:05:2f:
76:56:37:fb:79:6f:5a:bc:f3:ff:07:81:f3:86:e8:f9:3b:eb:
94:78:d3:d0:7c:6d:63:ee:d5:5d:0e:a0:1c:2e:cc:d9:06:59:
1b:41:26:69:d6:db:79:2f:de:5b:af:7b:a0:97:b4:0f:16:8f:
90:ab:35:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:21 2024 by rpki-client on console-fra.rpki-client.org