Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/fLvLNdNMTTEIa6nP-S7LX1wSeYI.roa
File: fLvLNdNMTTEIa6nP-S7LX1wSeYI.roa (raw, json)
Hash identifier: bYLrzFPBA5Of5tInMi4o5NdBeWDnbwJnVdqNsUwciNY=
Subject key identifier: 7C:BB:CB:35:D3:4C:4D:31:08:6B:A9:CF:F9:2E:CB:5F:5C:12:79:82
Certificate issuer: /CN=27b2133219989e6a32d71158d0852a516eb6f79f
Certificate serial: 01856CAF3C28D279B34193810D4CBEEC0E9B
Authority key identifier: 27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/fLvLNdNMTTEIa6nP-S7LX1wSeYI.roa
Signing time: Sun 01 Jan 2023 09:35:01 +0000
ROA not before: Sun 01 Jan 2023 09:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202675
IP address blocks: 185.56.218.0/23 maxlen: 24
185.17.106.0/23 maxlen: 24
2a02:5620::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:3c:28:d2:79:b3:41:93:81:0d:4c:be:ec:0e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b2133219989e6a32d71158d0852a516eb6f79f
Validity
Not Before: Jan 1 09:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cbbcb35d34c4d31086ba9cff92ecb5f5c127982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:e4:ed:d5:3d:6c:43:98:13:22:83:67:ef:
df:2c:08:13:71:4b:9b:8e:a1:6d:8e:d8:6f:96:2d:
be:de:08:0e:93:3c:d2:34:25:a3:d5:a3:9b:fa:26:
53:b3:33:48:8f:80:de:ca:7b:67:80:43:b3:f7:cf:
23:54:f1:2b:70:f4:c4:af:71:1f:c3:6a:2d:02:cc:
85:8d:a1:2d:0f:85:68:5b:a5:15:a0:e4:aa:7f:f0:
9e:ef:ac:f6:2f:a4:ef:23:2d:ce:e2:aa:c6:2c:d2:
9e:f5:92:bc:3d:34:fe:11:9f:12:3f:7f:f8:f8:f4:
7f:1e:e6:26:dc:57:6f:87:5b:54:c0:bf:fe:0e:4b:
6b:fb:35:e3:f1:b0:72:bd:d4:6c:aa:9d:b5:79:47:
18:13:54:17:91:7a:f8:c0:0e:3a:c1:65:69:4c:05:
34:fc:4c:e1:96:0c:41:c4:a9:ce:3a:05:53:04:69:
9a:f4:a9:5d:5b:66:d6:fd:f1:b7:e0:db:1f:5a:e2:
e6:ef:a2:6c:d8:43:3c:e0:d1:7d:0f:fc:62:e5:ce:
02:7c:93:00:08:57:b9:5a:2e:e5:d9:34:fd:aa:74:
a3:a2:23:c9:c4:8c:1a:55:f9:2a:38:f8:10:c6:70:
a2:e8:86:25:36:83:5b:4d:77:a4:4b:27:2d:f2:4f:
05:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BB:CB:35:D3:4C:4D:31:08:6B:A9:CF:F9:2E:CB:5F:5C:12:79:82
X509v3 Authority Key Identifier:
keyid:27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/fLvLNdNMTTEIa6nP-S7LX1wSeYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.106.0/23
185.56.218.0/23
IPv6:
2a02:5620::/32
Signature Algorithm: sha256WithRSAEncryption
48:51:5e:36:6c:33:18:a9:5f:0b:d9:88:8e:da:2e:dc:a4:f6:
2e:a9:15:29:89:f4:3e:67:3b:1b:b8:45:e6:d6:aa:41:54:b1:
e3:73:79:5c:11:0c:4a:e6:06:50:c8:f0:35:04:e9:86:26:e6:
fc:07:4b:57:bc:db:72:81:3f:9a:5b:5c:d3:cb:34:30:db:55:
3d:04:45:4b:08:c0:55:19:5b:27:1c:b0:9a:5f:0a:70:78:24:
81:37:09:38:21:f4:70:6e:31:16:24:b6:52:d3:f3:6f:4c:72:
c5:5c:6d:38:01:1d:87:7c:57:c2:78:df:0d:41:16:81:b9:c2:
b6:af:4e:4c:71:d7:dd:4e:11:d1:f5:51:fc:f6:b3:1f:a8:a5:
0c:51:65:66:97:74:53:d1:fc:8c:13:e9:7f:9a:9b:f5:c8:f5:
d9:84:68:32:a1:ac:19:df:b2:20:bc:1d:c7:4c:11:07:04:7d:
35:c2:c7:8c:ee:0d:28:e7:ec:49:45:4f:fd:13:36:4f:c4:e4:
1e:c9:eb:38:96:43:3f:63:d3:93:83:21:38:2f:ef:8d:be:8d:
a5:21:29:cb:cc:83:62:35:40:95:5a:ce:a4:62:ed:99:7d:29:
5a:cc:0c:4e:3f:c0:bf:c6:44:38:54:33:56:c6:56:d2:2f:5c:
86:0a:97:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:56 2024 by rpki-client on console-ams.rpki-client.org