Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/Sv41c___c4evytKrHCIHVD7LUlc.roa
File: Sv41c___c4evytKrHCIHVD7LUlc.roa (raw, json)
Hash identifier: SxoT/SRmoEAN6g/84DsrdZW3BLn6bW63Oe8NMGppxaY=
Subject key identifier: 4A:FE:35:73:FF:FF:73:87:AF:CA:D2:AB:1C:22:07:54:3E:CB:52:57
Certificate issuer: /CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Certificate serial: 018570C2CC5FA49D517D21B03FE9DC7D5433
Authority key identifier: 37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/Sv41c___c4evytKrHCIHVD7LUlc.roa
Signing time: Mon 02 Jan 2023 04:34:52 +0000
ROA not before: Mon 02 Jan 2023 04:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.206.120.0/24 maxlen: 24
2a10:a200::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:cc:5f:a4:9d:51:7d:21:b0:3f:e9:dc:7d:54:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Validity
Not Before: Jan 2 04:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4afe3573ffff7387afcad2ab1c2207543ecb5257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:a7:60:51:e1:5c:2c:1c:e0:1f:9d:52:0d:
99:1e:1c:77:84:33:83:cd:b9:9d:b6:35:38:69:1a:
c2:f2:a7:e4:b5:72:02:86:c1:11:3f:de:74:88:32:
a7:e6:03:a9:99:4f:ac:bf:75:64:d9:79:e8:8b:67:
90:f8:ef:c1:df:b4:57:1c:32:d3:ad:13:0e:cd:3b:
40:8f:aa:db:a8:6c:aa:94:6c:f2:41:4a:f7:8f:35:
a2:0b:ba:67:e1:ff:42:26:b6:30:8f:d5:78:ba:51:
ac:cd:b5:2c:8d:b1:86:44:ec:96:2f:b1:68:6b:98:
53:ce:dc:b1:ed:43:df:14:6b:ec:a4:d8:53:1e:55:
98:fc:84:c8:71:a5:de:b9:c2:97:65:a4:9f:bc:81:
30:19:2d:26:51:2d:da:7b:f6:fe:3a:6d:cf:c5:fb:
71:56:fa:db:05:cf:02:32:fb:f1:57:e6:72:1f:e5:
a6:6c:48:2c:24:73:d7:f0:5a:df:00:20:06:d5:03:
77:6b:1b:b5:99:76:4f:5d:83:ae:72:61:65:7d:4f:
79:30:d3:33:1b:17:0f:1d:4c:86:98:81:ba:60:b6:
91:60:8b:92:57:d2:4b:65:7f:93:c6:1d:e7:4d:b9:
8c:e8:bb:1f:ca:63:54:10:31:6a:d6:af:49:e4:2f:
67:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FE:35:73:FF:FF:73:87:AF:CA:D2:AB:1C:22:07:54:3E:CB:52:57
X509v3 Authority Key Identifier:
keyid:37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/Sv41c___c4evytKrHCIHVD7LUlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.120.0/24
IPv6:
2a10:a200::/48
Signature Algorithm: sha256WithRSAEncryption
44:ea:90:e6:9b:b0:39:6f:6a:ad:70:2c:96:58:0c:47:4f:35:
be:27:eb:02:f1:61:1b:38:90:b5:47:73:b9:5e:87:15:b9:1b:
9a:56:62:78:c9:01:bb:a8:02:1c:59:0b:9f:e7:6a:33:99:ef:
7e:3a:c4:de:c6:86:7c:c0:59:e6:08:c1:39:e6:c9:4d:08:59:
79:c4:96:c8:d5:0f:ac:92:21:80:1a:48:75:68:2d:de:51:da:
01:b4:25:b7:f4:77:ca:bc:c3:56:ba:63:75:fc:67:70:1e:d9:
f6:0c:a0:ee:88:1c:40:fe:68:87:4e:be:ca:c1:3c:74:07:70:
95:b2:b2:85:2d:60:ff:96:3b:cc:90:40:20:a6:b9:06:bc:2b:
3f:79:8a:ee:8d:dc:a9:1a:07:17:ce:6c:ef:27:35:96:93:35:
92:ee:dc:63:36:2e:7d:dd:08:4f:b0:a2:ca:72:42:5c:fe:1c:
57:cf:33:c6:86:42:58:73:c5:35:3a:6d:ba:31:d1:a6:ed:2e:
a3:c6:e5:b0:0a:75:f3:8c:19:5e:da:f3:a3:bc:ba:6e:e2:aa:
db:de:98:f5:30:4a:b6:a4:1c:20:5e:c5:fc:b4:02:83:76:d7:
8c:98:e3:14:84:05:05:c7:b2:7b:fa:1b:67:38:21:15:ea:51:
b4:35:e7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:48 2024 by rpki-client on console-fra.rpki-client.org