Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5f83db-efae-4091-b347-746543ccf489/1/7tGo0ntnURJFHF0yQLSBc4GPy2o.roa
File: 7tGo0ntnURJFHF0yQLSBc4GPy2o.roa (raw, json)
Hash identifier: MUr05XYyv0qvpsTskmabUnbNKjXrmc3J1TaQFcNYRqI=
Subject key identifier: EE:D1:A8:D2:7B:67:51:12:45:1C:5D:32:40:B4:81:73:81:8F:CB:6A
Certificate issuer: /CN=fbd9676b39d0f44ac1015d009f026424602d12f7
Certificate serial: 01857321E549E9DE8E0C1CB033CF99D2057A
Authority key identifier: FB:D9:67:6B:39:D0:F4:4A:C1:01:5D:00:9F:02:64:24:60:2D:12:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9lnaznQ9ErBAV0AnwJkJGAtEvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5f83db-efae-4091-b347-746543ccf489/1/7tGo0ntnURJFHF0yQLSBc4GPy2o.roa
Signing time: Mon 02 Jan 2023 15:37:59 +0000
ROA not before: Mon 02 Jan 2023 15:37:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48095
IP address blocks: 185.189.44.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:21:e5:49:e9:de:8e:0c:1c:b0:33:cf:99:d2:05:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd9676b39d0f44ac1015d009f026424602d12f7
Validity
Not Before: Jan 2 15:37:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eed1a8d27b675112451c5d3240b48173818fcb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:98:51:7e:c3:aa:b4:53:00:12:c0:10:9e:09:
8f:bb:9a:fc:c8:8d:01:52:fc:78:de:2c:ec:0f:f5:
f6:f9:42:07:61:bd:a3:5c:6e:e3:4c:fb:e7:c2:ce:
2d:f5:15:c4:04:27:d4:21:d3:64:a0:bd:6a:3c:25:
38:1b:8d:c7:3d:8b:5c:ba:fa:ca:e1:0b:75:ae:4b:
fc:d1:31:7a:98:c3:2d:e0:ab:11:85:08:c2:0f:71:
ea:17:ca:5c:19:76:6d:3f:48:8b:d0:22:e7:ed:a7:
6c:4c:15:da:23:09:fe:5a:49:c4:00:cd:47:be:5d:
85:76:cd:3e:9f:01:2a:01:4f:2d:a3:5a:73:da:26:
cf:8d:5b:9e:06:f4:63:06:5c:04:ba:0a:8b:3c:7f:
67:dd:a6:64:90:99:1b:61:b9:b3:7d:02:00:e0:b2:
f2:da:a8:b2:17:77:27:21:66:f4:9e:c6:56:16:a2:
38:29:bb:0c:b2:4c:e9:4f:5f:db:60:25:ca:60:c7:
41:f2:c1:d9:8e:fb:84:fc:3a:e2:35:fa:87:2c:df:
7d:c2:32:26:d9:89:49:e0:91:ae:23:77:7c:a0:7d:
1b:f5:3c:f7:cd:93:cd:f0:d3:d7:38:37:3f:21:ee:
25:de:8d:63:7b:3f:ed:94:ab:b6:d4:82:36:74:28:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D1:A8:D2:7B:67:51:12:45:1C:5D:32:40:B4:81:73:81:8F:CB:6A
X509v3 Authority Key Identifier:
keyid:FB:D9:67:6B:39:D0:F4:4A:C1:01:5D:00:9F:02:64:24:60:2D:12:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9lnaznQ9ErBAV0AnwJkJGAtEvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5f83db-efae-4091-b347-746543ccf489/1/7tGo0ntnURJFHF0yQLSBc4GPy2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5f83db-efae-4091-b347-746543ccf489/1/1-9lnaznQ9ErBAV0AnwJkJGAtEvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.44.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:08:74:48:49:d7:09:64:ef:92:ed:8e:e4:26:b0:09:75:14:
34:22:d9:04:71:a2:fa:53:5d:1e:35:f3:b9:06:ce:09:66:bd:
06:92:0a:8e:1f:c9:74:b1:4f:ec:76:30:bc:7a:6e:cc:18:cf:
78:e3:7d:13:35:a5:65:ba:91:17:58:07:7e:ce:df:89:d7:6c:
9f:c7:0b:03:8c:13:ed:03:eb:b2:b7:e8:e8:52:a7:58:78:66:
18:da:b2:7c:3e:99:d5:a6:28:6f:8a:17:0e:27:51:10:11:a0:
91:f3:20:d7:39:79:59:4d:da:1d:0c:80:7e:c8:7e:57:3a:4e:
77:cc:b7:89:47:6d:f0:3a:c8:9c:11:1b:2c:36:3c:8d:4e:e3:
e7:05:cd:20:ab:15:c6:33:e0:85:ba:1c:65:d2:dd:49:8e:91:
5a:50:31:2d:17:77:93:03:91:0d:3c:8f:5f:20:b7:b2:19:e9:
69:36:3e:a0:b1:8c:60:62:27:46:99:bb:f0:07:92:79:ea:37:
8d:78:f0:8e:1a:0e:1b:c7:9a:81:5d:bd:84:08:28:6e:58:0b:
d0:e7:ba:ad:82:20:40:68:43:b4:ed:c5:4f:42:e2:49:47:25:
0b:a5:3d:76:3f:7f:88:2b:ed:6d:99:59:a6:b1:8e:86:40:77:
60:32:4d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:47 2024 by rpki-client on console-ams.rpki-client.org