Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/vuL3SMkYcDM8fHfluc5hmvNejDU.roa
File: vuL3SMkYcDM8fHfluc5hmvNejDU.roa (raw, json)
Hash identifier: PfPJWMJjLiVooAEc+Ib+pobWROZkBg1uqt/N5oN9YtY=
Subject key identifier: BE:E2:F7:48:C9:18:70:33:3C:7C:77:E5:B9:CE:61:9A:F3:5E:8C:35
Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial: 01869C747EC35BFBA096AA54A56B02CF679E
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/vuL3SMkYcDM8fHfluc5hmvNejDU.roa
Signing time: Wed 01 Mar 2023 09:15:25 +0000
ROA not before: Wed 01 Mar 2023 09:15:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 185.155.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:74:7e:c3:5b:fb:a0:96:aa:54:a5:6b:02:cf:67:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Validity
Not Before: Mar 1 09:15:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bee2f748c91870333c7c77e5b9ce619af35e8c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:f6:5c:35:2d:64:21:46:7f:d1:f7:0c:10:
ed:82:9a:03:85:6b:13:85:ef:7d:c5:65:9c:17:7a:
c9:98:c3:b9:e9:d3:d5:8f:3b:34:35:ae:05:bd:eb:
10:23:1a:c9:5f:c3:25:de:e6:81:32:50:a6:8a:3d:
0e:70:4c:2f:c4:65:42:54:16:2f:31:a9:20:6e:20:
e8:08:c7:a7:51:59:35:7f:ea:f0:a0:e1:71:e2:7d:
90:29:72:53:ff:7c:9f:d3:e7:a2:51:03:63:26:ac:
0b:10:7b:e8:cf:08:43:e1:10:17:92:35:5c:b7:1e:
6c:ab:50:36:15:7c:25:0d:a3:cf:d6:93:ce:82:73:
14:2f:64:7d:c4:55:66:e4:b7:44:1c:76:c8:d0:99:
7c:10:ec:b0:e2:95:90:f7:9b:15:9a:d4:c9:70:df:
3f:e7:80:c1:df:ec:8d:1f:20:3c:42:f3:36:55:d1:
08:78:04:1f:09:cf:50:96:48:d9:7c:b6:63:65:af:
82:2f:f3:64:06:62:52:a6:4a:d2:44:10:3d:62:3d:
1a:e6:ab:25:9f:f2:97:65:df:55:ff:31:0e:a9:66:
e7:6e:bc:2d:43:96:e3:7c:1b:4a:c8:fa:56:91:f1:
a9:c1:6b:d3:40:ca:71:76:7f:2a:e9:fd:23:38:70:
f1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E2:F7:48:C9:18:70:33:3C:7C:77:E5:B9:CE:61:9A:F3:5E:8C:35
X509v3 Authority Key Identifier:
keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/vuL3SMkYcDM8fHfluc5hmvNejDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.234.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:be:60:56:19:ae:b8:c2:68:8c:26:dc:3b:f1:fb:d9:5d:f0:
26:7b:bb:1f:a5:a4:b5:6d:a5:39:34:0f:79:ed:8a:cd:8f:0f:
58:fa:bf:e9:9b:70:69:6b:96:64:1b:08:de:19:a2:ff:0c:cf:
f7:41:a4:58:6a:e2:aa:b4:8b:00:0f:f6:f7:ee:51:e9:8b:5a:
88:0b:3f:19:4d:8f:8a:1b:29:4e:1d:94:39:71:10:8a:8b:3b:
06:18:4c:9b:89:9f:99:8d:59:b8:ae:1b:3a:f9:68:4e:fe:10:
82:49:5e:cd:17:28:3a:29:dd:4d:d3:f9:50:28:25:20:98:1f:
b5:20:2d:79:fb:4b:91:e7:38:b8:1a:f4:75:30:49:47:a7:7e:
d8:88:ea:48:1b:fc:18:f6:31:f3:ff:bd:af:f6:17:40:b0:c8:
b8:9e:a7:f1:f2:08:6d:c5:e8:93:d6:3d:96:a0:95:1e:bd:02:
24:62:cf:43:49:47:e1:d2:e4:b4:73:31:2d:ad:1f:ff:e3:a6:
8b:1d:3a:7d:65:7e:ea:ca:41:4c:58:73:51:e7:3f:96:78:cf:
8d:a4:f0:eb:f4:a0:32:57:d6:0d:28:aa:ae:b8:4b:9a:4d:0d:
6a:bf:f0:32:7a:c1:cd:e6:f6:15:d2:72:4e:7a:64:c6:03:20:
8b:bb:b4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:43 2023 by rpki-client on console-fra.rpki-client.org