Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/deP_yA6oWDKd90_43iduilWqgqc.roa
File: deP_yA6oWDKd90_43iduilWqgqc.roa (raw, json)
Hash identifier: VjRrLR1ao3OjAUY7d5/OYz22Hu6xjF0rVUmQHL4iXZE=
Subject key identifier: 75:E3:FF:C8:0E:A8:58:32:9D:F7:4F:F8:DE:27:6E:8A:55:AA:82:A7
Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial: 01856F9DEF6BEA97C4A08E1F41FA0EDD9585
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/deP_yA6oWDKd90_43iduilWqgqc.roa
Signing time: Sun 01 Jan 2023 23:14:59 +0000
ROA not before: Sun 01 Jan 2023 23:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60775
IP address blocks: 185.177.144.0/22 maxlen: 22
185.177.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:ef:6b:ea:97:c4:a0:8e:1f:41:fa:0e:dd:95:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Validity
Not Before: Jan 1 23:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75e3ffc80ea858329df74ff8de276e8a55aa82a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7f:56:47:1c:eb:1e:f5:6e:ed:06:62:9d:40:
b4:8b:29:0f:6b:a0:1b:85:4e:1a:85:56:9c:37:1e:
aa:82:50:01:df:e6:aa:cd:43:7d:47:18:a8:71:ae:
64:56:02:16:26:bc:6a:52:c1:a1:32:95:c8:a5:f8:
26:29:82:d4:6f:e8:d5:bd:9c:a9:1d:c7:0a:53:f2:
b4:55:54:38:bf:d4:5f:cb:0d:2d:42:d3:7b:ff:b6:
be:39:10:88:ed:c8:2f:2a:8d:1e:24:82:04:5e:52:
5f:9a:f2:fe:65:cd:a5:4d:4d:c5:4c:82:41:85:62:
6f:e2:52:c2:ee:2f:18:d0:15:b8:fb:ea:d0:e3:6b:
8f:e6:3b:9b:bc:87:54:b9:ea:09:d2:f2:bc:92:e7:
57:f4:a3:02:bd:d2:84:55:f1:dd:df:b9:2d:e0:7f:
f8:aa:8f:8a:10:20:61:5a:65:20:31:4c:c5:a8:69:
4c:6a:d8:9b:2f:4b:f0:8a:80:db:01:d2:79:b4:6b:
01:dc:ee:75:1b:10:76:11:79:af:e1:b9:43:6f:6f:
3b:79:55:0e:55:6b:df:ac:28:34:08:78:ea:c5:1d:
2b:7c:69:25:c8:a0:9a:a3:1b:4a:44:bd:0f:21:68:
03:bb:04:ef:cf:60:8d:89:0b:bc:da:9a:50:64:30:
54:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E3:FF:C8:0E:A8:58:32:9D:F7:4F:F8:DE:27:6E:8A:55:AA:82:A7
X509v3 Authority Key Identifier:
keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/deP_yA6oWDKd90_43iduilWqgqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.144.0/22
Signature Algorithm: sha256WithRSAEncryption
04:ac:fe:d8:14:8e:a7:81:e9:7d:ad:e5:fb:b6:37:20:9b:1c:
02:d8:74:7d:0e:5d:4a:0c:98:10:cc:4e:32:fe:fa:39:05:a7:
9a:15:8b:82:6b:4c:38:8f:a2:b6:f8:80:16:2e:b3:09:99:1c:
09:d4:b7:66:39:c4:0b:d2:a7:70:13:fa:42:32:e0:55:a9:c3:
58:0b:48:99:84:26:6f:75:76:c5:67:20:7a:8d:b4:cc:36:b1:
41:62:5c:4f:ba:29:96:83:8f:40:54:25:ac:05:d5:9b:f0:5f:
18:cb:17:65:ad:97:35:48:53:e8:96:03:c5:5e:f7:ee:8b:70:
d9:bc:ac:19:0e:79:71:24:41:cd:c2:78:c3:d2:11:13:09:9f:
52:ad:d3:07:21:4f:5c:ca:a7:3b:ac:fe:86:cb:eb:11:e9:87:
96:dc:cb:7c:a6:59:80:32:d2:5d:b5:25:72:10:59:95:eb:69:
b9:2d:31:b6:d3:d7:80:d6:f5:4b:97:6d:3c:01:0d:07:f1:55:
b0:6d:de:d4:a9:5b:1c:7e:ce:1c:8c:ac:94:11:97:66:a3:38:
81:01:ea:e1:e4:0a:7e:4c:47:db:43:12:39:48:a9:83:bf:80:
45:46:8f:0e:0b:76:a0:11:5e:c2:46:40:a7:be:6f:a7:12:09:
25:22:7f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:37 2024 by rpki-client on console-fra.rpki-client.org