Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/7QuunsHikajCNyIvvSuIWLe29bE.roa
File: 7QuunsHikajCNyIvvSuIWLe29bE.roa (raw, json)
Hash identifier: +ps0sxoJmWJbehzsjKn5BQnT9llPmEMft+UaXdgKBVw=
Subject key identifier: ED:0B:AE:9E:C1:E2:91:A8:C2:37:22:2F:BD:2B:88:58:B7:B6:F5:B1
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 018570796D60EC91767909F224DC463CE217
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/7QuunsHikajCNyIvvSuIWLe29bE.roa
Signing time: Mon 02 Jan 2023 03:14:43 +0000
ROA not before: Mon 02 Jan 2023 03:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 27176
IP address blocks: 185.73.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:6d:60:ec:91:76:79:09:f2:24:dc:46:3c:e2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Jan 2 03:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed0bae9ec1e291a8c237222fbd2b8858b7b6f5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:55:2a:d1:76:6c:d8:cb:42:2c:ce:df:9d:
2d:1c:d4:dd:f1:a7:3f:37:21:ef:97:58:b0:1d:61:
20:e4:42:60:15:99:88:0b:43:f1:d4:8a:a1:29:26:
98:a3:8d:b0:4d:79:da:24:8d:b9:12:8f:db:83:f2:
fa:8a:db:e7:54:62:45:ae:cb:17:60:31:3b:74:c2:
8c:d5:27:97:15:5e:5f:43:0c:e9:a9:cf:ca:97:70:
8a:5f:c6:58:80:eb:ba:55:c8:7b:29:76:1b:dd:49:
f8:64:ca:bf:f4:60:09:1b:1d:88:d6:bf:cd:3f:59:
ee:cf:8f:8c:10:63:0a:81:0f:59:dc:fb:15:3b:32:
2d:e4:89:bf:ee:02:0e:f5:c6:29:0b:fd:79:a7:8a:
3c:c9:25:2d:fb:07:cf:32:21:81:ce:3c:48:d7:6f:
6e:10:a6:26:6c:be:7f:21:b9:cd:be:9e:14:2c:3f:
f9:e4:eb:46:db:88:db:66:3c:c9:c1:03:67:52:1b:
7e:fe:f5:05:d8:c9:50:33:0b:35:02:c4:5f:c3:a0:
40:37:15:7d:4d:b1:5d:54:0c:e9:d5:b0:47:5d:dc:
44:ca:36:7f:a7:e0:f1:27:4f:d3:94:37:a8:eb:1b:
b7:34:61:8b:cc:93:89:c4:98:14:a7:87:1d:39:7f:
d5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0B:AE:9E:C1:E2:91:A8:C2:37:22:2F:BD:2B:88:58:B7:B6:F5:B1
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/7QuunsHikajCNyIvvSuIWLe29bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.243.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:2c:88:a2:71:4b:c0:92:ec:79:20:ab:90:e2:fd:1b:25:5e:
e7:f6:8c:32:9f:18:4e:fb:34:9f:44:e3:89:77:98:1d:c8:f9:
48:82:9c:6e:9a:8d:2b:ea:70:b8:2b:5b:a4:82:c9:08:54:43:
c5:93:fc:8c:5c:de:11:ad:b9:58:28:0d:d9:ab:36:65:70:f1:
94:5e:c0:bf:b7:f1:a9:88:c4:8a:a7:e7:1b:5c:7b:97:8a:7f:
16:6a:e3:dd:d3:14:4c:17:cc:19:71:8d:00:33:9f:ab:d2:fb:
9e:ea:bd:c0:22:06:0e:dd:b2:ba:6d:ac:c8:bf:32:f2:7a:d6:
5c:6a:2f:c7:f9:c5:bc:01:85:b9:0e:fa:7a:64:24:de:d5:92:
e1:34:55:f1:90:1e:7b:88:e6:fa:40:67:61:34:28:cf:ec:6a:
04:09:c0:b8:71:1a:99:32:c6:5f:98:21:7c:00:36:81:e5:19:
36:fb:97:29:27:b6:f8:1d:f8:fd:76:2e:71:67:3d:d6:32:f6:
11:f6:bf:d7:c9:23:fe:f6:d9:b9:f7:9d:5b:62:8f:23:d7:c4:
cd:37:12:78:88:51:2f:bc:e1:61:db:90:a6:4b:2f:7b:2b:4c:
cd:9d:67:58:5c:6a:04:ce:80:51:38:9a:1a:9d:fd:59:24:07:
6c:56:67:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 02:56:35 2024 by rpki-client on console.sobornost.net