Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/dRqFeHIapWnO93bhG3lSABr0Xhc.roa
File: dRqFeHIapWnO93bhG3lSABr0Xhc.roa (raw, json)
Hash identifier: mg8mFlWH0Wn8KUa5aiZcsvTUfqk7BmlXo09DUbsROBE=
Subject key identifier: 75:1A:85:78:72:1A:A5:69:CE:F7:76:E1:1B:79:52:00:1A:F4:5E:17
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 0189261E320BA42BC81227146818E0BF2B32
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/dRqFeHIapWnO93bhG3lSABr0Xhc.roa
Signing time: Wed 05 Jul 2023 12:54:20 +0000
ROA not before: Wed 05 Jul 2023 12:54:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.255.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:1e:32:0b:a4:2b:c8:12:27:14:68:18:e0:bf:2b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jul 5 12:54:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=751a8578721aa569cef776e11b7952001af45e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9b:69:84:0f:72:af:77:cb:22:6f:93:3f:73:
2a:4d:16:ab:19:f7:3b:d4:89:45:f3:85:a1:01:9e:
f7:38:90:5f:f7:f6:62:40:a9:91:de:d0:26:16:e4:
c6:57:5e:98:34:22:d4:6d:06:60:f0:d1:c1:1d:d7:
ce:8b:32:4f:7e:a5:d3:d2:37:00:34:d8:38:d2:3c:
1a:48:49:c0:1f:30:8d:e7:7d:3c:e1:86:fa:24:15:
23:7f:04:c1:67:14:58:88:ea:e0:c9:ed:12:07:90:
30:d9:cd:bb:d8:ce:70:8a:9f:1a:c1:64:20:f1:52:
2e:74:6a:10:4e:ca:55:17:60:0d:07:a4:4b:2f:76:
5f:96:c6:d0:25:b5:f8:47:ba:2f:37:16:3f:4e:55:
2f:7d:9c:75:40:3b:99:4b:f5:d2:65:0e:c0:46:86:
20:0d:a8:9c:7a:7a:af:e1:5d:fd:90:8c:10:6e:05:
a5:ed:d8:c8:bb:a8:56:89:f0:8d:21:57:51:c5:af:
28:89:c0:34:23:c3:3f:4c:f4:ab:19:5a:f4:64:1d:
82:01:7b:e2:76:d2:0a:96:c1:c1:aa:8f:83:77:0b:
3f:b0:9a:03:65:64:bf:9c:7c:32:4f:05:df:71:2e:
02:9e:98:d6:a7:50:8c:a8:69:0d:6b:24:be:cd:57:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1A:85:78:72:1A:A5:69:CE:F7:76:E1:1B:79:52:00:1A:F4:5E:17
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/dRqFeHIapWnO93bhG3lSABr0Xhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.4.0/24
Signature Algorithm: sha256WithRSAEncryption
82:86:40:74:6b:db:86:c0:6e:2b:69:bd:1b:fb:00:de:96:e1:
5a:99:a5:93:b1:38:99:1c:df:5a:cf:87:14:71:3f:99:bc:e4:
1b:07:e3:04:f1:f6:a5:16:8a:a9:f5:f7:f0:58:8c:49:f9:db:
e7:9c:7a:52:ce:4e:98:c5:47:ad:fe:e4:50:58:8e:ef:25:87:
f5:bc:74:01:04:f1:f0:81:91:bc:c5:6d:0a:27:3d:cd:7c:5e:
6c:d1:4b:ec:12:a4:09:24:3b:8a:78:f9:64:e9:1d:f3:e2:61:
da:67:72:e0:14:04:bd:25:05:3a:2f:f1:c7:e1:7d:7c:29:6f:
b6:7e:f8:6e:0e:a9:88:4f:ac:7c:d9:9b:d3:6a:77:13:60:70:
80:58:4b:34:15:64:4a:27:f3:21:e5:19:3d:7c:34:91:0f:9d:
01:8e:db:03:7d:71:8b:97:ee:26:20:ef:39:7b:13:ce:67:f2:
7b:ac:28:df:93:12:d1:cd:31:b0:49:3e:b2:58:84:af:3d:05:
fc:69:57:7c:79:05:6f:5c:02:02:2c:77:0d:c2:74:07:1f:da:
c6:e0:59:5c:a7:9a:77:8a:1a:06:99:26:40:5a:0d:b2:3d:6c:
e1:0e:66:95:2a:36:65:a2:13:90:30:80:23:08:20:97:d3:e2:
5a:af:79:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:53 2023 by rpki-client on console-fra.rpki-client.org