Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/xxBr_bbf7z6-nUlEf65JZN4l6wU.roa
File: xxBr_bbf7z6-nUlEf65JZN4l6wU.roa (raw, json)
Hash identifier: lEyacIRABZ1HTsnB+v7zmKHxN4Ob1/OejCDH8qrgetU=
Subject key identifier: C7:10:6B:FD:B6:DF:EF:3E:BE:9D:49:44:7F:AE:49:64:DE:25:EB:05
Certificate issuer: /CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Certificate serial: 018570C2A96852C54016F6AC693FB0CB9E20
Authority key identifier: F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/xxBr_bbf7z6-nUlEf65JZN4l6wU.roa
Signing time: Mon 02 Jan 2023 04:34:43 +0000
ROA not before: Mon 02 Jan 2023 04:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15657
IP address blocks: 185.79.208.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:a9:68:52:c5:40:16:f6:ac:69:3f:b0:cb:9e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Validity
Not Before: Jan 2 04:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7106bfdb6dfef3ebe9d49447fae4964de25eb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:67:1f:20:67:fa:94:06:03:ba:0e:75:12:9a:
a3:b1:a0:2f:ae:73:ec:3d:2d:50:ad:15:6d:38:95:
23:2b:ae:cc:2d:89:85:43:66:e3:0a:c7:f4:3e:6a:
c6:7b:56:be:b2:fe:9e:77:32:e7:f9:78:ee:6c:24:
6a:4d:21:e7:a0:1a:61:f4:44:68:de:79:5f:09:e2:
d4:2b:c6:4f:12:5c:aa:de:33:31:6c:84:1b:97:63:
b1:ca:be:1e:55:50:8e:a8:e7:65:70:64:f6:38:53:
51:38:98:2d:30:35:94:ef:0f:10:de:cd:9c:8c:12:
23:22:df:43:19:7d:ee:fd:ee:25:16:03:2e:3b:67:
02:90:ba:21:e6:5d:94:88:e8:1e:14:1d:0f:96:41:
44:fc:27:fe:98:90:43:2d:9a:cc:f6:01:29:ad:fc:
fe:65:2c:2b:6e:d6:31:20:c2:26:27:ec:b0:44:b9:
e0:2c:95:31:25:e2:f0:74:1c:1e:03:64:a9:1d:25:
93:c2:f3:54:8d:ba:8d:a7:a3:31:e3:df:f5:ee:f4:
83:88:89:7b:29:07:e0:ca:8b:b2:86:df:13:93:69:
b6:1f:28:8a:69:7c:66:a5:9c:03:4c:1a:10:28:c2:
f0:77:b4:f3:7d:1e:0a:e2:91:dd:64:70:47:43:31:
c5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:10:6B:FD:B6:DF:EF:3E:BE:9D:49:44:7F:AE:49:64:DE:25:EB:05
X509v3 Authority Key Identifier:
keyid:F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/xxBr_bbf7z6-nUlEf65JZN4l6wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.208.0/22
Signature Algorithm: sha256WithRSAEncryption
13:6c:b7:38:a6:0e:b7:ab:84:ea:f9:09:19:c4:d7:67:6d:a8:
84:0f:00:e7:ba:03:93:63:aa:ff:7b:c0:62:d9:cd:fd:da:af:
d0:48:f4:8c:75:90:aa:65:06:fc:7d:7e:ba:96:ce:de:99:cf:
64:eb:e3:1f:85:f8:2e:b1:ef:4d:e3:c4:4e:95:0f:83:08:e0:
c6:b8:af:4a:ae:21:54:53:d1:7e:d2:c0:c0:61:5e:ec:f7:df:
53:f4:5c:53:c1:5d:3b:64:27:cf:45:23:54:9b:c8:bf:ad:59:
34:f4:91:56:87:f3:6c:84:b2:3e:58:97:4b:f0:06:60:7e:e1:
b9:fd:59:4f:96:f7:00:b7:bb:2a:fa:d4:3b:4d:13:5a:43:a1:
68:29:ac:a1:8e:05:df:b4:f8:f4:c8:28:41:e3:80:cd:64:63:
51:5e:0b:72:f7:83:c0:0b:19:26:ae:44:6a:2e:d0:c0:04:dd:
b4:bb:33:2d:54:d0:ad:95:08:95:93:5c:a8:4d:44:71:c5:67:
3f:12:25:ea:40:f6:6e:76:d5:e7:0e:f7:e9:e1:20:c6:7d:2c:
ac:5d:8b:06:fb:de:34:8f:67:ea:c0:7d:af:e0:c6:c2:44:e5:
95:2f:03:c7:a5:ac:7b:4c:dd:06:15:ce:60:1b:5a:8b:94:99:
ca:80:5d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:44 2024 by rpki-client on console-ams.rpki-client.org