Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/7jxNDJEIS7ZvET-c4EWS22WkQHE.roa
File: 7jxNDJEIS7ZvET-c4EWS22WkQHE.roa (raw, json)
Hash identifier: SUVUzn2SuPB2MqWirG+KLtmSFbH1bJY4zEu94POeR6o=
Subject key identifier: EE:3C:4D:0C:91:08:4B:B6:6F:11:3F:9C:E0:45:92:DB:65:A4:40:71
Certificate issuer: /CN=cbe970980d565cc74adb294aa68c7b06f5132890
Certificate serial: 0187278F03994A3381C64BB7576E679E218B
Authority key identifier: CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/7jxNDJEIS7ZvET-c4EWS22WkQHE.roa
Signing time: Tue 28 Mar 2023 09:31:36 +0000
ROA not before: Tue 28 Mar 2023 09:31:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203195
IP address blocks: 185.141.80.0/22 maxlen: 22
2a03:a8a0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:27:8f:03:99:4a:33:81:c6:4b:b7:57:6e:67:9e:21:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe970980d565cc74adb294aa68c7b06f5132890
Validity
Not Before: Mar 28 09:31:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee3c4d0c91084bb66f113f9ce04592db65a44071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:cf:5f:73:47:44:e0:ef:22:c7:1a:e4:77:
4f:19:c5:c2:e2:d3:85:02:a4:f2:94:51:ff:e3:a3:
90:e0:6e:23:bf:82:4c:cf:c8:39:6a:e0:c6:1e:73:
1a:08:ac:f2:fd:48:8b:2c:70:ac:60:41:8d:8a:87:
cf:1d:4b:54:10:d5:12:e7:ba:d5:a3:6d:38:cf:e7:
07:3d:b3:85:8d:55:e4:fd:7e:8f:01:54:25:9a:65:
de:e8:37:e9:e5:12:35:17:f8:ca:d0:f4:30:b1:2b:
e2:91:b2:82:4a:e3:77:a6:aa:2a:a1:c3:1a:7a:06:
fa:df:6b:06:66:ea:65:ef:1b:4d:53:23:20:57:1e:
b7:e2:49:a8:6b:33:eb:e8:4f:be:73:1b:26:c7:eb:
a4:be:a1:a7:c7:c6:99:d8:d2:47:69:df:bc:af:3a:
07:92:d6:a7:5e:58:ff:94:3b:6b:fe:ac:06:9e:30:
18:46:3d:c4:75:18:cb:17:81:46:5a:14:c4:17:d0:
d4:e0:76:c7:9b:7c:57:27:94:16:f3:44:9c:26:33:
46:a7:4d:6c:6b:ef:c4:56:1d:19:e8:bf:0a:be:bc:
72:87:a5:3a:c2:c9:cd:83:96:cb:c0:fc:6c:92:5e:
d1:77:f0:9e:68:22:b6:56:2b:5e:b5:4a:43:e0:34:
fd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3C:4D:0C:91:08:4B:B6:6F:11:3F:9C:E0:45:92:DB:65:A4:40:71
X509v3 Authority Key Identifier:
keyid:CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/7jxNDJEIS7ZvET-c4EWS22WkQHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.80.0/22
IPv6:
2a03:a8a0::/29
Signature Algorithm: sha256WithRSAEncryption
6a:02:de:ff:3e:f5:5d:3b:03:6e:a6:99:33:52:bb:9e:8a:b3:
dd:30:4f:d4:ad:11:5b:8b:8a:fb:6c:e3:13:e3:b8:ac:1d:fd:
2a:03:d1:24:2d:51:80:bb:99:33:b8:f4:50:a2:90:8f:d2:bb:
34:b4:62:c2:76:de:b5:6a:c8:57:aa:b2:dc:3f:f5:40:b1:7a:
d4:fe:b4:89:6e:b8:46:c8:a9:b7:f8:e1:9b:a6:d9:37:49:5f:
56:bf:bf:d8:82:b2:21:26:30:40:26:43:ce:be:ff:12:7a:ab:
6e:e3:83:08:67:21:64:ed:20:1f:25:17:db:9b:fb:d6:9b:e5:
06:68:e0:c1:75:24:de:9f:28:30:f4:92:58:fd:50:e7:46:79:
7f:52:59:8a:b7:06:9a:36:5b:56:20:11:0a:93:11:1c:a1:de:
1d:4c:95:e2:3e:8c:4d:07:dc:45:44:f2:85:21:b0:2e:39:10:
8c:6c:11:d3:1d:2b:65:f6:9c:1c:d0:92:9a:5e:2b:c2:41:f6:
ce:50:c1:08:7c:77:47:7b:c9:cb:37:52:a1:84:60:0f:6c:51:
56:c7:17:35:90:7d:b5:84:2a:82:4f:55:b6:10:4a:04:b8:47:
09:3a:5a:1e:d4:cd:66:e5:0b:80:cd:0e:0b:e9:33:a9:e1:71:
2c:3f:50:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:40 2024 by rpki-client on console.sobornost.net