Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/7qLWNn6QjHgir80veo5jlnCkBMA.roa
File: 7qLWNn6QjHgir80veo5jlnCkBMA.roa (raw, json)
Hash identifier: q4/PcX97ta8nVOqERLVg+5os6+Pge6rVp57eilU0C/8=
Subject key identifier: EE:A2:D6:36:7E:90:8C:78:22:AF:CD:2F:7A:8E:63:96:70:A4:04:C0
Certificate issuer: /CN=83286fa6da7d252e7828f84923f55919142b007f
Certificate serial: 01856F54769EC04395C30C21D3B2CC5FB8AD
Authority key identifier: 83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/7qLWNn6QjHgir80veo5jlnCkBMA.roa
Signing time: Sun 01 Jan 2023 21:54:44 +0000
ROA not before: Sun 01 Jan 2023 21:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199714
IP address blocks: 185.65.240.0/24 maxlen: 24
185.65.240.0/22 maxlen: 22
185.65.242.0/24 maxlen: 24
2a05:400::/36 maxlen: 36
2a05:400::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:76:9e:c0:43:95:c3:0c:21:d3:b2:cc:5f:b8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83286fa6da7d252e7828f84923f55919142b007f
Validity
Not Before: Jan 1 21:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eea2d6367e908c7822afcd2f7a8e639670a404c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:bc:6b:e4:d2:92:86:d5:7a:9d:a1:a4:72:
25:ca:13:cc:f6:d5:52:60:86:a8:a6:f5:f0:02:45:
4e:fa:91:60:68:92:0c:cb:c8:33:0b:95:54:e7:2d:
b5:db:4a:f0:23:5d:71:e6:95:96:6c:8f:c0:46:5a:
02:f6:7c:be:0f:d4:8f:34:32:cb:8e:55:9e:8a:2f:
af:db:61:00:78:45:89:42:79:d6:75:92:9b:dc:d5:
05:86:20:71:27:6f:31:4c:71:30:0d:19:03:60:70:
a0:da:b0:31:23:de:c4:2d:e6:c1:44:bf:e9:bc:3a:
fe:df:ce:8f:7f:fb:79:9e:3a:4b:4a:2f:1a:94:7e:
3b:d3:a6:ea:8f:a7:e4:78:46:c2:fa:cc:ac:5f:40:
8c:f5:e4:03:d3:c9:6c:b0:74:e2:dd:3b:bf:98:e0:
84:b5:f0:96:60:da:56:f8:d5:af:73:69:b3:da:6c:
f0:12:fc:ee:3c:d0:f7:8a:81:59:2d:fc:6e:b0:65:
d4:40:f7:20:b8:54:4d:b4:2f:98:91:df:82:e6:ce:
ca:70:69:3f:5f:6e:7c:b9:3c:36:33:26:e3:07:e6:
8c:e5:fe:9b:ce:eb:cc:de:ee:10:71:5f:19:a9:32:
e5:15:9f:3c:8a:28:45:95:7f:d7:7a:05:27:23:87:
ca:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A2:D6:36:7E:90:8C:78:22:AF:CD:2F:7A:8E:63:96:70:A4:04:C0
X509v3 Authority Key Identifier:
keyid:83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/7qLWNn6QjHgir80veo5jlnCkBMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.240.0/22
IPv6:
2a05:400::/29
Signature Algorithm: sha256WithRSAEncryption
41:bd:15:08:8b:e1:7c:54:68:66:50:e1:97:7a:0e:43:77:8b:
8e:59:84:f1:5c:fc:16:11:0d:15:10:dc:b7:fd:34:84:dc:0e:
a7:2d:a2:28:f0:42:97:b5:7b:a0:6c:2d:15:5c:c3:dc:32:62:
c5:ef:09:f1:1c:33:be:c6:43:e2:45:0b:c1:26:1a:bf:07:d6:
d8:16:21:b9:bf:a6:7d:b7:1f:4d:15:72:46:ea:d7:35:8a:5c:
ea:88:41:0d:3b:18:08:01:21:2a:ca:22:0d:eb:26:f1:03:66:
ed:82:ec:91:f0:52:ea:1e:a2:fb:13:b8:c3:c8:8f:2e:7c:36:
dc:ac:3f:4f:98:01:66:42:e8:de:9a:f6:cc:ed:f9:d0:9e:be:
d1:fc:f5:b1:58:62:57:47:c9:91:ec:c3:95:07:fc:f9:14:df:
9a:cc:cc:6f:16:f4:9d:6a:a4:54:72:1c:8d:d8:d0:40:26:13:
3c:71:ae:3b:5f:2f:39:6b:73:08:d5:ca:c7:72:0a:1c:30:b6:
6e:f5:d0:51:0a:25:13:6c:76:85:6c:b6:cf:31:5f:7f:26:ec:
38:3e:60:cd:dd:f6:58:e7:12:57:8e:56:21:28:22:98:71:fe:
90:c5:bf:45:e7:ed:15:5c:36:f6:ee:a6:db:c3:e5:66:37:81:
70:67:46:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:46 2024 by rpki-client on console-ams.rpki-client.org