Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e19744-dabe-4096-8e67-ff65ae2c1032/1/_CZFdv9mRvm0mp8WfAg84AeEHaU.roa
File: _CZFdv9mRvm0mp8WfAg84AeEHaU.roa (raw, json)
Hash identifier: svQaXybIHNSBKrCPRuSDeszfEKpwozTAOi263EusSz0=
Subject key identifier: FC:26:45:76:FF:66:46:F9:B4:9A:9F:16:7C:08:3C:E0:07:84:1D:A5
Certificate issuer: /CN=041f2ec8e276c17d76f95c78d4a92a2b87ef2542
Certificate serial: 018570304176533970A4C20B6706407DD7BE
Authority key identifier: 04:1F:2E:C8:E2:76:C1:7D:76:F9:5C:78:D4:A9:2A:2B:87:EF:25:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BB8uyOJ2wX12-Vx41KkqK4fvJUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e19744-dabe-4096-8e67-ff65ae2c1032/1/_CZFdv9mRvm0mp8WfAg84AeEHaU.roa
Signing time: Mon 02 Jan 2023 01:54:48 +0000
ROA not before: Mon 02 Jan 2023 01:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202599
IP address blocks: 185.186.180.0/24 maxlen: 24
185.186.182.0/24 maxlen: 24
185.186.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:41:76:53:39:70:a4:c2:0b:67:06:40:7d:d7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041f2ec8e276c17d76f95c78d4a92a2b87ef2542
Validity
Not Before: Jan 2 01:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc264576ff6646f9b49a9f167c083ce007841da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:5d:52:0d:67:fb:9a:cc:3a:06:d7:18:ff:
85:1d:af:9a:81:88:74:16:8e:c9:96:b7:1c:18:21:
5a:99:ba:21:5b:18:89:63:fd:8c:f7:47:78:d0:6f:
60:df:eb:ef:dc:d5:d4:97:25:e1:04:88:29:2d:14:
c5:94:48:08:22:f6:e8:c0:69:85:9e:eb:cb:6f:fc:
7b:97:55:f5:f4:93:d4:d6:e7:c9:4e:72:5b:86:61:
4c:81:b8:30:b6:26:b6:75:9c:d9:08:e1:d5:04:59:
64:73:5e:c1:7d:ef:a0:7a:49:5f:cd:f9:f8:63:7b:
98:a0:58:40:04:1b:89:70:16:45:91:3d:2e:9e:79:
db:37:04:5a:65:03:c8:68:bc:64:0b:33:7c:b7:7b:
ce:94:98:b9:71:08:7d:e1:42:6a:b7:81:c3:e4:9a:
b8:5b:57:c0:29:27:d3:f0:06:c7:92:fb:03:18:c9:
f9:8a:02:20:58:33:23:f3:62:60:ef:87:41:3f:24:
d3:ea:90:ce:e3:9d:c8:15:59:ee:e0:11:c4:c5:af:
d0:43:eb:b7:2b:cb:1a:f2:2a:7a:36:da:c3:5c:61:
17:42:aa:0f:3d:48:26:39:d2:20:69:88:bf:06:1d:
62:36:d4:60:50:83:55:1a:70:77:3f:96:4c:a2:f1:
e7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:26:45:76:FF:66:46:F9:B4:9A:9F:16:7C:08:3C:E0:07:84:1D:A5
X509v3 Authority Key Identifier:
keyid:04:1F:2E:C8:E2:76:C1:7D:76:F9:5C:78:D4:A9:2A:2B:87:EF:25:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BB8uyOJ2wX12-Vx41KkqK4fvJUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e19744-dabe-4096-8e67-ff65ae2c1032/1/_CZFdv9mRvm0mp8WfAg84AeEHaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e19744-dabe-4096-8e67-ff65ae2c1032/1/BB8uyOJ2wX12-Vx41KkqK4fvJUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.180.0-185.186.182.255
Signature Algorithm: sha256WithRSAEncryption
41:b2:d8:f3:b2:a8:da:8d:a7:76:5c:6c:ec:33:10:df:6d:c2:
91:86:02:e4:98:a8:25:40:e8:6e:31:13:2b:72:31:7f:5d:d8:
01:75:25:05:50:17:e8:c4:2a:7f:3b:39:0e:67:5d:ac:e5:19:
72:73:c0:17:bc:19:0a:c4:33:dd:9c:57:dd:6a:19:f8:f4:24:
4c:73:ba:3b:4a:f8:34:63:af:1f:14:66:15:a4:a7:d0:a8:52:
c4:9e:a4:d4:61:f9:fe:d4:91:01:32:66:fc:dc:a1:67:78:0c:
30:82:4f:a2:3a:d9:2f:4d:59:94:8a:8b:ab:40:e3:dc:37:f7:
1a:69:de:c0:46:fa:97:c9:ec:89:81:17:20:79:d1:82:67:43:
d7:cd:f0:dd:76:4e:ab:1a:a5:a6:58:cd:88:72:07:9d:c6:0d:
3b:49:ef:bc:71:59:52:13:23:da:fb:78:4c:80:4a:f4:c7:9b:
ff:94:6e:e0:bc:d8:f1:8d:59:67:48:af:32:bb:59:9c:4f:78:
39:75:4c:af:70:b8:da:e2:be:45:1a:a6:55:69:84:6f:10:c2:
e2:c9:d1:9c:a0:5c:05:89:73:bd:8b:4a:51:25:9e:c0:a2:d7:
23:a8:b8:c8:d1:ae:2d:13:01:b5:db:5f:ed:ea:b7:c0:d8:98:
00:76:1d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 4 13:31:34 2023 by rpki-client on console-fra.rpki-client.org