Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/k7jp-rCuko_Qh--u5Zoh8EQp6qM.roa
File: k7jp-rCuko_Qh--u5Zoh8EQp6qM.roa (raw, json)
Hash identifier: fMgOmvAxiB8jUm+Nm3+Vr2lnWHsBHTV2uS0iS9VrDwE=
Subject key identifier: 93:B8:E9:FA:B0:AE:92:8F:D0:87:EF:AE:E5:9A:21:F0:44:29:EA:A3
Certificate issuer: /CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Certificate serial: 01856E0B093038286663B1E86B3D2E1E69EF
Authority key identifier: D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/k7jp-rCuko_Qh--u5Zoh8EQp6qM.roa
Signing time: Sun 01 Jan 2023 15:54:55 +0000
ROA not before: Sun 01 Jan 2023 15:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206652
IP address blocks: 185.180.36.0/24 maxlen: 24
185.180.36.0/23 maxlen: 23
185.180.36.0/22 maxlen: 22
185.180.38.0/24 maxlen: 24
185.180.37.0/24 maxlen: 24
2a0a:d180::/29 maxlen: 29
2a0a:d180:b00::/40 maxlen: 40
2a0a:d180:300::/40 maxlen: 40
2a0a:d180:100::/40 maxlen: 40
2a0a:d180:600::/40 maxlen: 40
2a0a:d180:900::/40 maxlen: 40
2a0a:d180:c00::/40 maxlen: 40
2a0a:d180:700::/40 maxlen: 40
2a0a:d180:a00::/40 maxlen: 40
2a0a:d180:e00::/40 maxlen: 40
2a0a:d180::/40 maxlen: 40
2a0a:d180:d00::/40 maxlen: 40
2a0a:d180:200::/40 maxlen: 40
2a0a:d180:500::/40 maxlen: 40
2a0a:d180:800::/40 maxlen: 40
2a0a:d180:400::/40 maxlen: 40
2a0a:d180:f00::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:09:30:38:28:66:63:b1:e8:6b:3d:2e:1e:69:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Validity
Not Before: Jan 1 15:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93b8e9fab0ae928fd087efaee59a21f04429eaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cf:b4:dc:3e:fc:bf:74:58:e2:00:39:f2:15:
c1:a3:0a:7d:47:57:2d:01:17:85:da:56:35:b6:06:
50:91:7a:40:5f:4c:94:9d:74:a5:f0:6a:31:09:f6:
ac:6c:a7:1c:57:43:a2:9f:68:32:6e:4e:67:2e:f5:
04:c3:aa:45:e1:59:08:ee:59:24:8b:cf:0a:a2:c2:
11:9a:9b:a2:d3:f8:4f:e7:4a:9e:d2:59:e0:2d:19:
6b:d6:ba:b2:d8:eb:05:9b:ca:fa:e7:3c:a4:1b:80:
ba:40:27:c4:7d:40:20:20:13:30:bc:5c:5a:64:d4:
c3:e1:de:ba:2b:16:96:da:0c:9d:f9:25:af:a2:e0:
7f:b5:bf:fb:35:10:56:c3:4f:45:3a:01:da:b1:83:
cb:14:7c:75:a2:16:c8:50:9a:7a:b2:20:ac:d2:47:
f3:84:36:d0:a8:b9:ab:07:02:d0:79:33:5a:e5:27:
00:98:7c:bc:1a:3e:62:f4:9b:06:16:2a:e3:83:46:
b0:75:e5:e6:35:d6:f4:cd:e0:36:01:84:6b:4c:1b:
bf:f7:4b:79:6e:62:3e:cf:56:7a:87:17:b9:ab:9b:
a1:88:1d:02:e2:6c:6f:9a:f9:10:73:ce:b3:a4:7a:
78:68:e5:2f:2b:01:1c:8c:e3:a5:45:ab:b5:54:a9:
38:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B8:E9:FA:B0:AE:92:8F:D0:87:EF:AE:E5:9A:21:F0:44:29:EA:A3
X509v3 Authority Key Identifier:
keyid:D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/k7jp-rCuko_Qh--u5Zoh8EQp6qM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.36.0/22
IPv6:
2a0a:d180::/29
Signature Algorithm: sha256WithRSAEncryption
38:38:ba:81:5c:bc:90:44:0b:82:08:49:6a:04:fa:8c:cc:62:
49:52:f4:4d:91:f2:c4:40:2d:5e:9c:fd:6f:77:7a:db:ae:7b:
bc:57:9a:f5:ce:a8:db:5e:bf:06:b0:22:56:0b:5d:ec:6a:20:
d4:09:92:30:72:b0:49:64:1b:c1:7b:40:c6:55:a2:4e:22:cc:
39:19:02:79:b8:fc:41:a4:d2:79:6f:93:10:69:9c:80:47:1a:
36:72:37:63:9e:c9:29:2e:f6:55:99:17:36:f9:fb:4d:10:b0:
a0:54:8b:06:b8:a5:46:39:07:db:fd:1a:4e:05:e4:51:1b:dc:
38:99:2f:ac:6a:44:a3:54:0d:a3:84:e4:60:39:75:a2:5a:0d:
54:c3:19:b5:13:42:12:c3:3c:39:a3:1e:64:3e:58:c9:2d:e8:
53:a0:a0:57:51:a3:ee:5c:1e:82:73:ff:83:d7:2f:0a:32:fc:
a0:a2:89:d5:7d:20:06:24:4c:0c:19:58:fc:2b:a4:e0:69:d0:
d9:89:ee:14:00:75:c2:67:1b:e3:cd:9d:2f:72:0e:a7:0e:91:
6b:93:9f:56:cb:37:31:60:ea:d0:63:66:60:a6:86:5c:42:7d:
75:3e:21:97:e1:63:d6:a5:47:08:93:ac:4f:ad:8f:a1:73:37:
e4:71:17:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:41 2024 by rpki-client on console-fra.rpki-client.org