Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/7N4OsacN-4uVZX1wlS3vIEZGtTo.roa
File: 7N4OsacN-4uVZX1wlS3vIEZGtTo.roa (raw, json)
Hash identifier: 4k0u+qprPJUv0AKYmZ/RfvN1xwpd5dBj9kP8agyyNV8=
Subject key identifier: EC:DE:0E:B1:A7:0D:FB:8B:95:65:7D:70:95:2D:EF:20:46:46:B5:3A
Certificate issuer: /CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Certificate serial: 018626136106EC3C320642C96162A1D61DFF
Authority key identifier: F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/7N4OsacN-4uVZX1wlS3vIEZGtTo.roa
Signing time: Mon 06 Feb 2023 09:34:09 +0000
ROA not before: Mon 06 Feb 2023 09:34:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.169.81.0/24 maxlen: 24
185.169.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:13:61:06:ec:3c:32:06:42:c9:61:62:a1:d6:1d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Validity
Not Before: Feb 6 09:34:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecde0eb1a70dfb8b95657d70952def204646b53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:de:bf:85:38:d5:aa:a6:e5:5d:88:69:10:f6:
2e:4a:4b:cb:ab:70:fb:74:ec:a5:d0:31:cf:40:73:
4e:8e:a4:c4:e6:15:9d:7e:8f:14:13:47:f3:35:d4:
d8:15:54:3d:5c:1f:b3:0d:e0:4b:4a:1c:5f:a2:1b:
5d:84:55:29:27:02:82:40:a6:5a:4c:a1:ca:26:a0:
88:f5:87:7c:2e:d5:90:a7:4b:e2:cf:72:ea:46:24:
7b:4f:6f:9b:f9:7d:a4:df:00:cd:34:e8:a2:34:09:
03:73:9e:f7:8d:99:34:51:d9:a9:c3:d8:55:23:a2:
8d:a5:57:65:ef:76:33:0e:9c:dd:66:45:0f:45:f8:
cf:00:79:10:70:39:7f:2d:8d:13:ca:11:9c:7a:3a:
ba:32:87:91:45:d4:5c:25:62:01:c5:eb:7f:b0:a5:
5a:c1:48:71:ef:f9:2a:41:b4:5f:29:7d:07:41:f7:
2e:24:27:ee:32:90:d4:f4:98:bd:91:08:11:41:be:
63:04:c7:41:a0:30:96:6b:39:cb:3d:e6:fb:52:49:
96:88:d7:22:5c:aa:61:a2:a6:2a:97:34:3f:0a:83:
ee:4b:cb:1f:ec:20:ec:39:68:b7:70:83:b7:3d:b5:
31:66:49:d0:10:36:4c:e7:bb:3b:06:f8:af:a7:e3:
d3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DE:0E:B1:A7:0D:FB:8B:95:65:7D:70:95:2D:EF:20:46:46:B5:3A
X509v3 Authority Key Identifier:
keyid:F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/7N4OsacN-4uVZX1wlS3vIEZGtTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.80.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:65:44:75:2b:9f:00:d9:6e:c2:2f:e8:e9:e8:2c:51:8f:c2:
75:20:76:9f:43:e9:1b:d2:a4:62:be:31:25:b1:dd:fc:1f:7f:
91:7b:f0:5c:95:44:a0:ba:95:29:90:54:aa:a7:96:4f:5e:a5:
c9:bc:02:3c:19:2e:37:11:e0:cd:9b:ea:ab:53:80:5e:00:08:
8f:0a:85:4b:81:94:98:1f:a8:db:c7:4c:f2:c9:31:03:59:8c:
81:8b:c3:08:e1:ae:80:06:a8:be:4c:ec:29:37:2f:27:c9:fd:
4a:a2:35:75:bb:1f:e6:2e:bd:cc:de:2c:35:97:87:47:c5:ba:
22:f1:c9:7d:a5:7c:72:c9:0a:a4:78:a1:d5:d5:03:b8:2f:ed:
0a:2b:38:7e:44:a8:16:00:d5:32:b5:d2:d0:6f:42:3d:e7:a2:
d1:79:5f:f8:f2:33:ea:94:1e:40:28:8c:b8:ae:ca:44:b0:ba:
8b:2a:d6:64:04:4b:b1:94:dd:96:f0:d5:31:bb:c6:d7:0e:02:
b8:fa:7e:50:ce:49:9c:3e:cb:e8:d4:fd:ab:6b:77:cb:02:3a:
b2:ff:3a:d1:8a:a6:e3:b3:1c:38:5a:71:d3:f9:bd:fb:eb:a8:
94:78:6a:54:39:e5:57:e1:aa:c7:2a:29:90:28:1a:eb:4b:77:
77:d4:a9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:31 2024 by rpki-client on console-fra.rpki-client.org