Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/N7skdCqa4vQJYyEmH0mS1TadVLA.roa
File: N7skdCqa4vQJYyEmH0mS1TadVLA.roa (raw, json)
Hash identifier: IXhv3DZxxLQYus0ggRhf7mdHpZiUqo3UV1Ce762kVsQ=
Subject key identifier: 37:BB:24:74:2A:9A:E2:F4:09:63:21:26:1F:49:92:D5:36:9D:54:B0
Certificate issuer: /CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Certificate serial: 01856CB85F936CB8B1B6C37B226F9C84C5BD
Authority key identifier: 61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/N7skdCqa4vQJYyEmH0mS1TadVLA.roa
Signing time: Sun 01 Jan 2023 09:45:00 +0000
ROA not before: Sun 01 Jan 2023 09:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207335
IP address blocks: 185.106.133.0/24 maxlen: 24
2a10:1380::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:5f:93:6c:b8:b1:b6:c3:7b:22:6f:9c:84:c5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Validity
Not Before: Jan 1 09:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37bb24742a9ae2f4096321261f4992d5369d54b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:55:d7:8b:03:1b:da:48:ba:10:a8:06:93:1e:
a5:ac:d6:3b:ad:5c:f5:6f:cc:16:c4:8f:a7:e7:67:
1d:fa:e6:de:b8:c7:d9:c2:7b:e6:88:88:d6:a9:16:
6f:22:00:a6:04:e4:a7:5f:a8:8c:b4:ad:d1:cc:03:
a8:12:8f:95:5b:05:50:54:16:9f:6b:9f:d9:22:9c:
f8:44:a4:70:0f:b2:12:fb:07:20:89:91:de:63:30:
33:78:d4:e1:a8:26:6c:f2:d8:81:d4:1d:9b:ac:74:
4b:95:d2:a8:b8:0d:25:2d:0c:2b:04:17:9b:fd:7b:
70:51:35:cc:ab:82:5d:3d:65:14:60:47:b2:c5:9f:
ca:34:6d:fd:bc:c3:1d:f6:87:d3:8a:4e:c5:37:66:
2e:c1:05:a4:df:ab:ae:f6:2f:b6:0d:13:ef:2f:1b:
a6:17:57:3d:b2:04:b8:fa:37:dc:19:a9:c5:56:da:
f3:c5:92:92:3c:5a:97:43:f0:f5:7a:cd:48:6b:7b:
f1:93:92:77:02:b9:a2:3d:7e:21:57:0e:52:db:92:
8b:86:53:f6:53:1d:06:6c:dc:af:ed:8a:b2:3c:fc:
12:95:cb:dc:17:ef:fe:a7:1b:f7:32:28:b7:f1:4a:
8f:6e:6a:ef:cf:83:3e:c8:b5:ba:03:e9:79:10:6c:
e3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BB:24:74:2A:9A:E2:F4:09:63:21:26:1F:49:92:D5:36:9D:54:B0
X509v3 Authority Key Identifier:
keyid:61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/N7skdCqa4vQJYyEmH0mS1TadVLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.133.0/24
IPv6:
2a10:1380::/29
Signature Algorithm: sha256WithRSAEncryption
f9:cf:f4:4e:50:96:a4:69:b4:a9:cf:7b:b9:4a:6d:31:6f:e1:
75:6d:59:9b:fb:bb:27:5d:04:63:dd:c8:f1:49:56:93:07:95:
33:67:7f:42:c3:30:88:7a:89:cb:15:14:d5:ed:51:32:a8:9d:
60:58:96:ef:f5:39:90:c1:98:14:dd:62:a0:10:06:90:8d:08:
74:08:29:db:ab:98:66:70:9f:f8:ec:b2:4d:49:de:fa:77:d9:
81:56:96:00:c1:06:6b:87:85:a2:1a:71:97:19:88:e8:9b:22:
80:88:68:e9:31:e0:1f:b3:e1:ed:3a:2b:17:d5:dc:4d:05:f8:
74:01:02:27:ea:51:c1:27:b4:54:c2:80:9a:aa:49:f0:db:da:
b4:3c:e1:38:12:d7:21:84:aa:42:ed:f1:88:ab:4d:87:de:30:
0c:dd:f7:27:f1:69:8f:87:c1:fe:47:99:29:ab:fb:36:7a:d5:
99:3b:fc:24:df:07:6f:61:03:09:3d:df:d5:24:9d:7b:1c:68:
29:08:e4:0a:05:67:99:91:64:8b:da:f8:5b:29:c4:0f:c1:2d:
c5:d8:4d:ae:13:de:ce:87:7e:52:fd:ec:3c:20:28:8c:5c:b1:
fa:bc:a9:23:86:89:d8:ab:ec:1b:37:ac:28:b7:94:2c:a4:32:
61:97:c0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:09 2024 by rpki-client on console-fra.rpki-client.org