Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/rR7p_F1bgUy9_JTHVL3AQBpEw9Y.roa
File: rR7p_F1bgUy9_JTHVL3AQBpEw9Y.roa (raw, json)
Hash identifier: 8qK/hOBkYAhmEJdnWkAFsDADJCCw6oGNq2QeNXQ4e14=
Subject key identifier: AD:1E:E9:FC:5D:5B:81:4C:BD:FC:94:C7:54:BD:C0:40:1A:44:C3:D6
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 01857246BF05DEA92D53891098D3A6E0578D
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/rR7p_F1bgUy9_JTHVL3AQBpEw9Y.roa
Signing time: Mon 02 Jan 2023 11:38:37 +0000
ROA not before: Mon 02 Jan 2023 11:38:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 185.180.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:bf:05:de:a9:2d:53:89:10:98:d3:a6:e0:57:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Jan 2 11:38:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad1ee9fc5d5b814cbdfc94c754bdc0401a44c3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:dd:f1:11:41:94:94:6e:b7:ae:88:b0:10:
10:d3:9e:a8:5d:65:60:08:d4:65:f7:88:f8:15:ff:
25:e7:76:22:bb:e5:b3:b6:01:e3:ec:0d:3b:cd:c7:
83:8e:b4:1f:4e:d5:64:7e:f2:b2:e3:6e:f4:d6:2e:
04:4e:6b:e7:d4:d2:d7:b0:64:5e:0b:db:9c:af:16:
39:94:fa:5e:5d:eb:ee:88:ae:e5:f5:f2:84:df:03:
ec:2a:bf:e1:92:58:15:84:1f:b2:6d:e9:dd:50:ce:
b6:ca:e3:bf:46:cd:d9:24:30:63:6f:29:52:eb:e7:
e6:a3:c5:b1:7b:c7:f9:80:4a:06:11:9f:84:8d:f2:
e3:46:48:b9:d3:12:bc:15:b3:b7:10:5c:0b:6b:fd:
05:32:52:62:27:c7:7d:43:42:eb:33:fc:a9:1d:3a:
2b:06:71:82:fe:bf:25:75:84:40:7d:29:8b:d1:01:
9d:ce:55:19:cb:9b:d4:53:80:67:75:74:f0:ca:98:
07:7e:cb:f6:f2:79:ae:e4:07:b9:b6:12:9c:62:b7:
84:ea:02:28:7d:02:f8:d9:06:4c:cb:5b:20:7c:6a:
80:12:50:f3:e7:86:29:1e:22:f7:65:37:09:86:60:
0d:92:19:9c:6b:2e:99:52:56:f0:81:b0:a5:6c:80:
32:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1E:E9:FC:5D:5B:81:4C:BD:FC:94:C7:54:BD:C0:40:1A:44:C3:D6
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/rR7p_F1bgUy9_JTHVL3AQBpEw9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.144.0/24
Signature Algorithm: sha256WithRSAEncryption
82:4d:c8:0f:49:f2:cc:8f:00:b2:40:0d:59:a2:d4:ef:f2:05:
a5:14:51:e0:bc:51:f8:ff:34:d8:d0:8c:13:fc:27:a0:79:bc:
ba:ea:76:4a:0a:aa:42:ec:c7:d2:05:5d:24:90:e2:99:5e:69:
b8:af:2b:86:86:c5:ac:69:4b:95:af:d2:3f:3b:b5:c8:c5:b9:
88:12:f6:81:e8:a7:08:54:dc:dc:28:d8:5b:b0:3c:87:59:14:
89:38:7b:ab:1d:90:2d:bd:d9:18:ce:c5:3b:06:20:f9:39:3e:
4c:96:41:6b:36:c8:a3:8a:e8:e3:ab:b0:ee:0a:e7:a1:f4:ba:
b2:26:e6:e2:c3:17:ac:e2:be:9a:aa:bc:dd:a2:6c:3e:92:59:
c4:bf:14:d3:0d:de:fe:62:c2:ae:f2:51:46:ca:72:29:55:b3:
b5:ca:f8:4c:23:3a:26:7b:fd:0e:0e:8d:38:54:18:68:cf:65:
68:43:c3:43:f1:15:24:58:b4:2f:d0:d2:34:a2:57:5d:c8:c8:
98:f7:48:8e:ea:f7:15:5e:87:db:e2:07:af:83:dd:4b:c5:ce:
52:68:60:94:ac:a9:5e:c8:05:8c:2f:0a:2b:50:b1:31:02:a6:
c1:63:78:10:ba:81:1b:a4:db:59:8e:1d:ca:31:f8:72:5f:aa:
62:b1:3a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:14 2023 by rpki-client on console-fra.rpki-client.org