Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3D_W-FT-gh05LoFVivADWEJhIA4.roa
File: 3D_W-FT-gh05LoFVivADWEJhIA4.roa (raw, json)
Hash identifier: 0aVOug2V5AaDolQDD9P0YIGR8y8/ODTGuoPi8E2JkB0=
Subject key identifier: DC:3F:D6:F8:54:FE:82:1D:39:2E:81:55:8A:F0:03:58:42:61:20:0E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185EA65543B1B6CC6D2D979A33A6559571D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3D_W-FT-gh05LoFVivADWEJhIA4.roa
Signing time: Wed 25 Jan 2023 19:26:27 +0000
ROA not before: Wed 25 Jan 2023 19:26:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 185.135.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ea:65:54:3b:1b:6c:c6:d2:d9:79:a3:3a:65:59:57:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 25 19:26:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc3fd6f854fe821d392e81558af003584261200e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:68:a2:8c:c0:3b:5c:d3:8c:ed:3d:59:72:
ac:63:72:64:9c:fa:6f:44:da:61:1d:41:a2:66:3d:
af:89:5f:25:44:28:a1:31:96:1d:c8:c8:f9:01:12:
0e:a0:3d:6e:ea:1a:70:3a:bd:be:6a:11:72:3d:5c:
93:11:b7:52:04:73:e1:fd:97:df:72:7f:d2:b6:30:
8a:a6:a0:ed:a2:d7:7f:89:66:b0:0c:01:d1:d1:8c:
21:8c:c7:04:52:8b:f6:37:ca:40:da:cc:ea:6d:8e:
d0:6c:87:5f:54:a7:02:10:24:8d:3a:9f:5f:32:ed:
e4:5b:b7:19:40:fc:08:77:6a:dd:db:bf:d3:b9:3b:
9d:de:16:df:4b:6b:06:14:0c:63:43:00:d7:6c:6e:
60:df:6b:a7:75:61:9b:73:df:4e:f3:90:57:17:65:
57:1c:98:a2:7d:e0:d2:de:a7:c9:8b:41:fd:12:1b:
3f:89:3c:cd:b5:cf:ee:7e:af:b8:7b:9e:d0:a3:18:
70:4b:f2:cb:26:e9:e7:bb:17:cb:0b:3c:e6:9b:de:
31:f9:50:c8:b7:62:a1:ab:56:c2:c8:75:93:3f:9c:
9f:5a:57:5f:a1:76:01:f3:1c:5d:6f:7f:7e:3c:1b:
0c:73:03:a7:54:f0:2d:41:ac:72:73:8a:1d:ca:ea:
2a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3F:D6:F8:54:FE:82:1D:39:2E:81:55:8A:F0:03:58:42:61:20:0E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3D_W-FT-gh05LoFVivADWEJhIA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.140.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:8d:ae:1c:03:92:b9:5c:3a:d4:e1:d0:b9:66:da:1c:a5:fc:
9b:e5:0a:a5:cb:74:9a:60:30:ba:e9:f0:47:8a:5d:5e:3e:ad:
aa:0f:8d:7d:b6:f3:94:6b:9c:36:e1:9c:a2:cc:d8:42:8a:92:
ef:28:96:d6:c4:ff:32:c2:79:c6:79:6b:94:4f:50:64:69:d1:
5e:6e:18:bd:8e:f8:16:2c:d6:58:a6:59:bc:02:b2:9d:55:ae:
dd:a8:2f:b0:9b:54:20:7b:a8:a2:b4:d8:19:97:0b:2b:b2:06:
87:8b:94:48:cf:71:81:5d:0b:88:38:f4:cd:14:b5:b9:55:6e:
9f:1a:ac:29:9d:70:a8:2c:9a:bd:3e:ee:fe:0b:92:e0:0b:0f:
0d:10:a0:44:61:4a:f6:57:28:4b:db:67:75:4d:4a:64:aa:d2:
e6:8f:ee:61:a8:ae:54:60:d1:d5:e2:bc:e3:4f:86:46:b3:b2:
34:4c:c8:bb:81:aa:53:7f:fd:59:f9:da:89:0e:7a:18:1b:ed:
08:d1:4e:8b:79:39:e3:f5:3d:cc:b8:49:64:92:4b:d8:ae:2e:
fc:48:05:2d:ef:5e:89:20:80:9d:c4:29:79:a6:b8:85:79:c2:
9d:f3:4a:45:8a:23:67:da:5e:07:b0:dd:39:35:b6:7a:b9:b1:
61:a7:a4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:53 2023 by rpki-client on console-ams.rpki-client.org