Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/tx7CuhewJXXVaZ_AMrb1b8_P9QQ.roa
File: tx7CuhewJXXVaZ_AMrb1b8_P9QQ.roa (raw, json)
Hash identifier: m3jHaJ8hAJJKhGlPSLJR0+1WjzY961AIGi1WoHrNLrw=
Subject key identifier: B7:1E:C2:BA:17:B0:25:75:D5:69:9F:C0:32:B6:F5:6F:CF:CF:F5:04
Certificate issuer: /CN=3ed79628b5a60ff1489f473be12d6cefdee135e6
Certificate serial: 01856C9CBB81C4D68E3F61A5ACC0730319AF
Authority key identifier: 3E:D7:96:28:B5:A6:0F:F1:48:9F:47:3B:E1:2D:6C:EF:DE:E1:35:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PteWKLWmD_FIn0c74S1s797hNeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/tx7CuhewJXXVaZ_AMrb1b8_P9QQ.roa
Signing time: Sun 01 Jan 2023 09:14:49 +0000
ROA not before: Sun 01 Jan 2023 09:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57514
IP address blocks: 185.225.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:bb:81:c4:d6:8e:3f:61:a5:ac:c0:73:03:19:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed79628b5a60ff1489f473be12d6cefdee135e6
Validity
Not Before: Jan 1 09:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b71ec2ba17b02575d5699fc032b6f56fcfcff504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:49:cb:45:8b:a9:6f:fe:c6:9f:f7:45:ed:5a:
00:bb:56:f1:41:3e:e4:e6:82:8f:c6:01:84:2b:ca:
02:64:3c:ca:4e:c8:eb:7c:58:1b:82:5e:d8:fd:50:
cd:2c:2b:e0:07:9b:a4:f8:86:f9:76:96:5b:0c:e5:
21:8a:f3:54:8c:6a:ee:c5:0f:d8:e6:61:87:90:40:
2d:ad:1d:92:75:8e:5f:30:3f:a3:13:01:e5:21:47:
74:0d:91:0b:c9:14:b7:e5:ad:cd:34:91:fc:0e:f7:
6b:a2:a4:ec:1f:59:42:a5:24:2c:bb:7b:0c:2d:20:
c0:8a:e1:a9:e1:29:26:81:e3:0f:49:db:4e:c0:ba:
cd:13:1e:cd:7b:b9:cf:e5:b1:2b:ba:a4:38:9b:f1:
4c:e6:4b:ca:a7:a9:01:2d:6e:49:c5:74:e0:68:55:
de:c5:27:dc:92:a3:d1:78:c5:30:25:fe:90:c9:17:
27:03:91:0b:f6:e7:6f:b4:01:f8:74:a2:26:74:13:
08:4b:35:ec:08:59:99:62:b3:62:a6:50:da:36:7f:
29:8c:26:d0:64:01:2e:df:73:05:71:89:d2:ce:c7:
e8:28:89:59:94:fe:d4:28:23:0f:dc:f3:dd:6a:da:
45:2f:49:88:5f:29:0f:df:61:27:b9:69:16:ae:1c:
a9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1E:C2:BA:17:B0:25:75:D5:69:9F:C0:32:B6:F5:6F:CF:CF:F5:04
X509v3 Authority Key Identifier:
keyid:3E:D7:96:28:B5:A6:0F:F1:48:9F:47:3B:E1:2D:6C:EF:DE:E1:35:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PteWKLWmD_FIn0c74S1s797hNeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/tx7CuhewJXXVaZ_AMrb1b8_P9QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/PteWKLWmD_FIn0c74S1s797hNeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.76.0/24
Signature Algorithm: sha256WithRSAEncryption
52:d2:0a:a0:80:95:51:04:a0:b5:c7:96:0b:f4:ed:45:3e:ba:
b8:e2:f0:25:7a:84:e5:51:20:b3:6f:92:7b:91:e9:e6:c1:fe:
5e:e6:07:59:56:5d:0d:70:5b:75:b9:1a:2f:b7:e7:7b:c3:e3:
ef:38:90:32:f2:32:b9:8e:75:88:86:94:2d:d9:57:66:f6:27:
ee:34:3b:b0:1e:1e:f4:e5:44:1a:03:65:d6:b8:e2:aa:e0:d2:
02:1c:6d:0d:6c:f4:a1:2d:49:77:e2:d0:86:ca:ef:9c:5e:ab:
90:b8:3f:50:e5:94:43:3f:ab:e6:6f:31:19:56:da:c0:37:fc:
0b:e3:a6:7e:d8:07:d8:05:37:ff:f2:82:4f:7b:bc:6f:6d:89:
84:af:a8:7b:23:b2:b6:57:3c:ff:24:33:50:77:67:f1:00:4a:
fc:57:f0:65:6b:7b:25:68:58:f9:fa:dd:23:d5:9e:77:2b:58:
85:93:03:64:4a:92:0d:01:f4:8f:ce:29:77:d2:bc:a0:f6:00:
93:51:51:d0:70:b8:99:10:1a:a6:00:ec:fa:6b:84:9f:2e:01:
d9:8e:9a:9c:5c:59:10:b1:c2:99:f7:7c:d5:a1:4e:d0:3d:91:
11:7e:ae:43:3d:53:a2:a9:91:f5:1a:42:e1:7f:6f:84:c7:98:
2d:19:96:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:29 2024 by rpki-client on console-ams.rpki-client.org