Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/XO7fg9NQZ7hE7HiCdU-OI3NWxsM.roa
File: XO7fg9NQZ7hE7HiCdU-OI3NWxsM.roa (raw, json)
Hash identifier: VorJpsuYGoCoRPwK3+WI4mLMITISDyffDMD9r6XaSO8=
Subject key identifier: 5C:EE:DF:83:D3:50:67:B8:44:EC:78:82:75:4F:8E:23:73:56:C6:C3
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 018AB1ECCA5107C872D57BF89D601284ECDC
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/XO7fg9NQZ7hE7HiCdU-OI3NWxsM.roa
Signing time: Wed 20 Sep 2023 09:30:00 +0000
ROA not before: Wed 20 Sep 2023 09:30:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 185.255.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:ec:ca:51:07:c8:72:d5:7b:f8:9d:60:12:84:ec:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Sep 20 09:30:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ceedf83d35067b844ec7882754f8e237356c6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:ce:b1:37:55:9a:d2:7c:50:dd:8a:dc:3f:
a2:8b:13:a9:b3:8d:a0:29:9c:15:3c:11:53:ea:8b:
ed:96:91:10:8e:4e:22:68:c7:90:f8:fc:b1:b7:4c:
b0:c4:8c:19:73:ac:25:af:a4:e5:0e:49:84:55:f7:
eb:a2:8e:95:67:b3:6b:4a:50:aa:ff:c5:93:9e:a9:
a6:47:6d:a9:58:2e:53:b4:ba:4b:f9:e5:8c:df:d8:
f7:f8:c6:28:61:3b:41:59:4f:a1:57:53:30:7f:52:
b6:b3:6c:18:94:64:30:85:0d:22:13:ca:dc:5c:a2:
66:8e:ab:24:8c:71:1f:00:d2:61:61:50:68:d9:81:
c5:68:94:e7:0b:61:2a:6b:32:7f:48:ac:be:65:de:
88:27:1c:2f:67:82:96:1b:8f:57:79:30:8b:d1:63:
74:56:03:98:27:d2:93:18:d3:a1:3d:e0:9d:2c:6f:
ef:91:bf:57:71:83:6b:90:ef:09:ee:a9:80:a9:a1:
e7:3a:30:ed:3e:af:ad:3f:20:bf:c7:26:ea:06:b0:
18:95:5c:eb:0d:39:76:f9:85:b1:ce:12:ea:9c:ff:
83:8d:55:cb:c3:f8:5d:d9:59:f4:29:9f:31:c8:fd:
72:be:3b:a0:ed:67:3a:5b:61:63:53:b0:97:ac:64:
e4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EE:DF:83:D3:50:67:B8:44:EC:78:82:75:4F:8E:23:73:56:C6:C3
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/XO7fg9NQZ7hE7HiCdU-OI3NWxsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.7.0/24
Signature Algorithm: sha256WithRSAEncryption
37:c9:e9:25:2d:03:e7:d5:9d:ad:8b:82:a7:b2:73:a5:91:70:
3c:a9:bd:78:64:43:5f:69:a6:e8:a0:2e:b0:12:64:ae:1b:80:
02:f6:ca:da:60:9c:03:8e:b3:2c:b2:b7:5d:8c:2b:bb:dd:41:
ca:f2:ac:f8:e0:ca:ce:db:32:11:e9:5b:7c:25:97:f6:96:38:
64:91:eb:da:f8:9d:29:70:63:0d:81:c3:45:82:6a:02:a4:b0:
5e:c5:6c:ce:f0:76:a6:47:8a:68:59:10:9e:00:a9:26:47:31:
ba:d9:46:6e:f9:ca:26:35:53:0c:89:a4:28:f6:29:bb:15:fa:
ab:fa:be:52:0c:fc:0c:54:fc:8d:51:d7:45:1c:00:07:7f:15:
06:4d:a6:90:93:63:0f:21:60:87:18:19:5c:b1:97:1b:bd:e3:
f4:6d:50:18:49:58:32:52:fb:ac:f0:88:c0:d5:4d:1c:59:56:
52:f8:30:d4:1f:5a:d0:98:35:f7:4b:1d:a1:25:ce:14:e1:b1:
51:05:14:fd:20:10:9e:66:c6:b4:04:b3:4d:ea:11:0e:45:4d:
49:1d:f4:7d:e2:f4:af:22:5b:4b:63:cb:89:94:9a:f5:fa:76:
da:f5:1d:e8:89:61:b0:90:e7:3c:67:1d:48:06:60:d0:77:c6:
e6:bd:b1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 3 22:10:40 2023 by rpki-client on console-ams.rpki-client.org