Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8a44d5-3d74-4b8a-93c0-0436250277ff/1/07o1_MLmP6GjlJPU3Q__Vdv7RBg.roa
File: 07o1_MLmP6GjlJPU3Q__Vdv7RBg.roa (raw, json)
Hash identifier: EQftBJbQ//YeNf5mrj0979BCTf+instHulV7s3pApEc=
Subject key identifier: D3:BA:35:FC:C2:E6:3F:A1:A3:94:93:D4:DD:0F:FF:55:DB:FB:44:18
Certificate issuer: /CN=abce214564c2f48ebe97a4376ed127e31c50b974
Certificate serial: 018570302ABB438D9CA5C5B50B10B8DEF505
Authority key identifier: AB:CE:21:45:64:C2:F4:8E:BE:97:A4:37:6E:D1:27:E3:1C:50:B9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q84hRWTC9I6-l6Q3btEn4xxQuXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8a44d5-3d74-4b8a-93c0-0436250277ff/1/07o1_MLmP6GjlJPU3Q__Vdv7RBg.roa
Signing time: Mon 02 Jan 2023 01:54:42 +0000
ROA not before: Mon 02 Jan 2023 01:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.234.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:2a:bb:43:8d:9c:a5:c5:b5:0b:10:b8:de:f5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abce214564c2f48ebe97a4376ed127e31c50b974
Validity
Not Before: Jan 2 01:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3ba35fcc2e63fa1a39493d4dd0fff55dbfb4418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:28:03:5b:ec:5b:a1:a2:e7:ba:04:7e:c6:4f:
d1:8f:70:1b:1e:14:bf:4c:7b:30:a0:c4:e7:5f:41:
a6:7d:51:c6:ba:b8:0e:86:76:b2:c4:74:57:19:ab:
43:6d:a1:b8:10:d6:fe:5d:5a:0c:e0:59:fc:f8:b9:
27:e2:26:a5:b9:81:ab:a1:53:2c:b2:dd:df:ee:f6:
19:3c:b9:1f:68:f3:f2:fe:94:eb:5b:46:9a:91:ee:
d0:81:66:7e:d6:2b:6f:cd:42:ce:d5:0b:7d:d8:c5:
1a:41:3a:fe:d0:68:7b:1c:c1:78:73:cb:46:12:e6:
11:7e:53:a1:0c:b7:9a:b4:02:cd:06:b7:56:aa:1d:
19:83:e5:17:b3:3d:9f:95:3c:7b:f2:ee:84:14:69:
b4:f5:94:27:81:3d:c7:5d:45:34:d7:00:2a:d3:a4:
55:2a:31:48:05:be:31:83:ce:14:ec:e1:a8:b0:c3:
3a:38:4b:d7:70:e0:ac:bc:9e:f2:6c:a0:f4:92:8a:
3c:88:2f:31:78:23:10:fe:3c:4a:6b:3c:c3:3a:5b:
9a:e8:6d:a7:52:a5:59:dd:a2:60:71:fd:6b:29:4f:
b6:e5:f8:cc:75:de:17:f5:d3:d5:bb:36:9a:31:f0:
42:78:69:e2:1f:81:69:ff:6a:a8:83:6e:50:50:63:
04:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BA:35:FC:C2:E6:3F:A1:A3:94:93:D4:DD:0F:FF:55:DB:FB:44:18
X509v3 Authority Key Identifier:
keyid:AB:CE:21:45:64:C2:F4:8E:BE:97:A4:37:6E:D1:27:E3:1C:50:B9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q84hRWTC9I6-l6Q3btEn4xxQuXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8a44d5-3d74-4b8a-93c0-0436250277ff/1/07o1_MLmP6GjlJPU3Q__Vdv7RBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8a44d5-3d74-4b8a-93c0-0436250277ff/1/q84hRWTC9I6-l6Q3btEn4xxQuXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.15.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ce:cf:06:af:6d:13:2e:86:d3:18:00:a0:1e:50:51:f5:c8:
a8:c6:6c:a1:ce:16:28:61:c4:e4:ef:6c:64:0c:62:2e:14:6a:
30:f2:da:82:34:9d:c0:9a:0d:82:a4:99:5b:26:84:7b:74:96:
eb:f6:b8:0c:e8:b7:2f:3a:ab:08:77:0f:2a:84:25:0c:af:18:
c9:a7:8c:e0:58:9a:2b:ca:2c:71:1c:b1:24:21:a2:54:50:5a:
f0:40:4b:07:19:8b:c2:16:b5:91:b8:62:4f:4c:21:62:30:c3:
ee:a5:7c:87:b4:f0:44:b1:36:0d:7f:ae:6c:ad:b4:70:f5:6f:
02:9f:e8:8b:3a:9d:af:54:d3:1a:1d:e8:28:10:c0:d7:f6:80:
db:ac:17:3f:f3:c0:de:f4:bc:b9:71:09:25:10:c3:1b:f7:72:
22:82:8e:3a:f0:48:93:84:2a:76:a2:9b:55:33:25:64:11:88:
98:0b:8d:18:8b:5a:4d:8c:5b:22:dd:63:28:0b:9c:ca:9c:0a:
a5:cf:b5:84:43:88:b5:66:82:96:79:08:7c:77:e8:59:60:ea:
50:a1:50:1c:6e:05:95:15:1e:17:2a:7a:32:32:36:75:77:50:
1f:af:89:94:14:8e:b5:5a:2e:ee:f5:d9:a2:a7:18:47:58:88:
6b:fb:e1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:03 2023 by rpki-client on console-ams.rpki-client.org