Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/7Bj5cz9F9_4nSbelRoFBZAqeC-c.roa
File: 7Bj5cz9F9_4nSbelRoFBZAqeC-c.roa (raw, json)
Hash identifier: ggv3vxzMN9tcIac0tTvC8JU8lf7ZgxrkSQpr5kB5aTo=
Subject key identifier: EC:18:F9:73:3F:45:F7:FE:27:49:B7:A5:46:81:41:64:0A:9E:0B:E7
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 0185719575D84F612BD0B69704B2D2761ABF
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/7Bj5cz9F9_4nSbelRoFBZAqeC-c.roa
Signing time: Mon 02 Jan 2023 08:24:58 +0000
ROA not before: Mon 02 Jan 2023 08:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59729
IP address blocks: 185.162.10.0/24 maxlen: 24
93.188.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Jun 2023 06:10:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:75:d8:4f:61:2b:d0:b6:97:04:b2:d2:76:1a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Jan 2 08:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec18f9733f45f7fe2749b7a5468141640a9e0be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f5:9b:64:94:a0:ad:18:2f:98:df:d7:0a:e7:
41:09:13:63:20:78:16:dc:30:d1:5c:d4:a8:c8:97:
c5:a8:8f:6c:2e:00:b5:67:e8:ab:b8:fd:fc:8b:da:
08:36:af:8a:d8:bd:08:40:6d:b1:61:fc:09:e0:59:
18:8e:56:fc:f5:aa:42:c1:3c:b3:c8:e9:45:ae:b9:
17:16:19:54:15:3b:73:11:7b:ff:15:4c:ec:ee:03:
c8:46:7a:ae:d5:16:f3:b2:fc:8f:58:f1:f0:64:92:
3d:96:c1:6d:3d:46:14:59:18:5c:ba:6a:40:90:d3:
f7:2a:80:e9:6c:1e:1a:c8:c9:bd:1d:ee:45:67:13:
cc:6d:f3:ce:5f:2e:b8:a4:c0:af:17:33:1b:42:34:
b9:bf:75:59:02:b6:b0:a2:76:06:ee:b6:17:c5:20:
e5:ab:be:b5:76:39:6f:10:7a:6e:a6:08:7c:ab:22:
4b:d1:5d:e9:9e:ae:38:d0:6e:d7:b1:00:e1:77:25:
54:07:b0:0c:b2:31:88:77:ac:20:31:21:0c:e1:bc:
5b:ff:f8:c3:ec:bf:03:7c:06:e8:27:fe:b8:cf:a1:
54:89:47:ae:78:68:f1:67:aa:fd:2e:0a:3d:d7:5f:
69:54:22:66:12:7f:88:a6:81:35:bd:0c:3a:3e:cd:
46:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:18:F9:73:3F:45:F7:FE:27:49:B7:A5:46:81:41:64:0A:9E:0B:E7
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/7Bj5cz9F9_4nSbelRoFBZAqeC-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.155.0/24
185.162.10.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:67:74:e8:11:d8:3f:3e:69:9c:78:da:ff:30:46:ca:ce:6b:
e0:b2:a9:50:65:8b:f4:4f:95:33:f3:f1:ed:b3:ab:77:33:22:
4d:f9:f1:71:95:11:f5:38:85:2a:99:e0:c0:ac:e3:80:a4:6a:
bd:c3:c0:f4:11:e8:fa:2e:3d:b2:f6:d8:5f:f1:f2:5e:dc:81:
d1:cd:79:ad:38:20:95:8a:8c:4d:2b:c0:fd:12:0e:fa:4d:19:
fc:be:20:93:20:fd:fd:fa:fe:77:d6:59:7c:ca:65:19:6a:e6:
27:c0:a7:93:c7:87:95:cf:f1:ec:c9:97:a6:38:29:09:b1:28:
e5:48:53:98:15:11:2c:a6:c1:21:21:dd:fe:45:fd:62:0d:ef:
c1:06:94:01:50:60:34:7b:d6:cd:76:2c:5b:92:d1:cf:f8:26:
5f:58:e4:ed:31:e7:e1:ad:32:3e:3b:bd:5f:46:0c:62:cc:94:
d2:da:d7:9a:fb:4b:c7:17:12:04:46:1d:2a:bd:c3:80:76:3d:
d5:33:b9:b9:4b:92:ab:54:97:06:5f:8e:f9:5d:a4:13:19:c4:
c8:07:14:5b:bc:31:86:58:cf:d3:c9:c8:b5:e8:a4:69:cc:7e:
83:78:da:38:32:5c:4e:3f:37:26:da:88:2f:c0:cf:44:8f:07:
42:d6:d6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:57 2024 by rpki-client on console-ams.rpki-client.org