Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/SgtGWoii39kWRYT7KnmlX3AsgUA.roa
File: SgtGWoii39kWRYT7KnmlX3AsgUA.roa (raw, json)
Hash identifier: a/WIw2ZtnN7oo7AQ+sbgs206VVruNBHlpwBm1iWj18s=
Subject key identifier: 4A:0B:46:5A:88:A2:DF:D9:16:45:84:FB:2A:79:A5:5F:70:2C:81:40
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C541F3F72E4F74511389AB7BE4EBF9D
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/SgtGWoii39kWRYT7KnmlX3AsgUA.roa
Signing time: Sun 01 Jan 2023 07:55:30 +0000
ROA not before: Sun 01 Jan 2023 07:55:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397268
IP address blocks: 185.207.179.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:1f:3f:72:e4:f7:45:11:38:9a:b7:be:4e:bf:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a0b465a88a2dfd9164584fb2a79a55f702c8140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f3:4a:86:4a:91:bd:12:a9:8f:97:a1:d5:05:
16:a6:55:1d:bc:27:00:c6:63:f3:64:82:e7:63:50:
1b:c2:7c:21:6f:6d:d9:d7:74:13:cd:74:51:96:72:
7b:e4:5d:cf:bb:02:f6:79:bc:c6:5b:83:09:12:f0:
50:b5:80:e1:cf:6e:ef:9d:5e:32:5d:ab:8f:95:82:
86:da:75:1c:94:bf:7e:7e:c3:09:88:48:b9:7d:d0:
e6:12:5c:fb:6e:3c:cd:6d:68:25:55:9b:e6:41:b9:
98:25:f6:11:90:24:b5:85:6a:72:60:a3:19:53:3b:
fc:a6:bd:cb:4d:cd:c6:ed:c6:c4:9c:96:8d:b6:ae:
bd:72:8b:85:4c:22:4b:61:ae:04:50:63:73:72:0e:
79:11:82:02:08:e4:d2:de:e1:a0:05:f3:cd:5b:79:
2a:a9:7f:e9:f4:da:2a:07:65:f2:4f:c6:7a:28:f1:
ce:54:d9:cc:4d:d9:9e:26:22:72:5f:11:16:59:3b:
3e:04:93:02:bb:a8:6f:c4:63:a6:c0:bd:1a:1a:1f:
b0:bd:73:d0:4e:69:08:c8:81:63:7a:d4:82:a5:da:
b0:aa:04:46:47:28:b7:53:ed:ea:32:5b:19:06:d1:
7d:94:10:85:73:4c:c3:8d:85:72:9b:24:3c:ed:c4:
d4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0B:46:5A:88:A2:DF:D9:16:45:84:FB:2A:79:A5:5F:70:2C:81:40
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/SgtGWoii39kWRYT7KnmlX3AsgUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.179.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:a5:07:ff:77:c7:86:25:cc:38:b4:4f:48:9a:b2:91:a1:fa:
43:73:d5:a0:89:f3:01:c3:fe:dd:e2:49:90:f4:d4:eb:bf:87:
eb:f5:41:96:e6:84:89:b3:61:85:87:26:13:6d:c9:3b:6d:d2:
b4:53:f4:7f:41:d9:24:b1:47:b5:88:36:65:8c:7b:82:45:87:
b3:b3:79:cc:c6:60:94:d7:61:8a:4d:c5:3d:70:0b:d1:ac:71:
47:69:d0:42:7a:ed:14:0c:50:9b:65:77:23:39:25:ef:b6:df:
d5:ce:cb:78:6e:17:79:30:59:12:2e:f8:07:53:71:f0:dd:ab:
09:75:8b:64:b2:db:36:ae:6f:d9:c3:b7:27:70:a4:43:53:5e:
55:bf:1f:9f:1a:39:5d:ba:66:eb:96:25:ca:d3:32:e9:ed:5b:
53:91:80:89:95:0a:7e:9c:64:3f:ff:85:51:7c:97:c5:b4:31:
b8:a8:9a:c1:78:d4:61:b1:7a:1f:84:6f:94:54:2f:76:4f:64:
ac:36:26:bc:5e:b8:fe:a6:9f:a3:85:12:a5:7d:a9:b9:b2:9e:
63:bf:ec:3c:34:f9:b0:82:8f:03:1f:62:64:78:ba:fb:2d:ac:
7a:9a:3f:05:eb:72:43:6a:23:63:d7:fb:91:39:bb:d4:1e:04:
47:ce:6f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:55 2024 by rpki-client on console-fra.rpki-client.org