Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/djECh6OtVjmzeKFILEiQRtflkFs.roa
File: djECh6OtVjmzeKFILEiQRtflkFs.roa (raw, json)
Hash identifier: X2Jka+m86Gdukp1WfTSuTBb/WsBqzuNZ92AC6btr1OA=
Subject key identifier: 76:31:02:87:A3:AD:56:39:B3:78:A1:48:2C:48:90:46:D7:E5:90:5B
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 01856CCB0AC90FB3F947AD0741A9C3E27DA4
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/djECh6OtVjmzeKFILEiQRtflkFs.roa
Signing time: Sun 01 Jan 2023 10:05:23 +0000
ROA not before: Sun 01 Jan 2023 10:05:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56912
IP address blocks: 185.75.150.0/24 maxlen: 24
185.75.149.0/24 maxlen: 24
188.74.32.0/22 maxlen: 22
2a03:4b20::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 19 Oct 2023 13:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:0a:c9:0f:b3:f9:47:ad:07:41:a9:c3:e2:7d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Jan 1 10:05:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76310287a3ad5639b378a1482c489046d7e5905b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:54:67:c3:a3:09:ab:7c:cf:53:fc:e3:63:89:
2e:10:75:2c:ed:df:2c:f5:ec:dc:c8:71:42:02:28:
94:bb:4b:11:c1:d8:65:93:30:4a:ca:a3:be:b7:a4:
c1:59:03:7d:2a:ba:f4:f9:33:c2:ae:8e:f7:27:b0:
5f:2f:2d:82:e6:6e:a7:da:30:0c:81:4b:c8:32:69:
58:ef:55:7d:a8:29:c9:43:c6:db:04:db:85:47:17:
93:8f:6d:e8:07:e5:ca:e6:e9:78:d8:89:b3:ae:60:
3b:8d:0a:28:58:fa:d7:5f:89:77:a1:cb:f9:f6:3e:
b6:53:01:c1:22:f7:59:7c:d7:49:87:3f:9f:54:e2:
66:32:f3:ef:1e:60:db:15:af:6a:37:47:42:5d:61:
88:f9:09:ab:16:b0:9c:ea:a2:8a:b6:1d:c6:2a:da:
38:91:8c:60:96:42:87:ca:3b:df:7a:62:92:31:d1:
74:7b:74:49:2e:37:db:78:7b:2b:f2:67:95:91:13:
c0:f5:63:f5:05:60:e3:04:30:92:e0:c8:82:01:15:
61:e6:c4:49:40:1a:68:04:44:b5:92:38:a7:ff:ef:
1d:cf:83:73:33:cc:0e:e3:3a:5f:30:25:2d:da:cf:
0c:92:6c:31:44:20:cb:c0:32:86:3f:dc:c4:e9:f2:
b6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:31:02:87:A3:AD:56:39:B3:78:A1:48:2C:48:90:46:D7:E5:90:5B
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/djECh6OtVjmzeKFILEiQRtflkFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.149.0-185.75.150.255
188.74.32.0/22
IPv6:
2a03:4b20::/32
Signature Algorithm: sha256WithRSAEncryption
1c:8f:0b:ea:2f:5f:b2:60:e1:4f:93:30:ab:96:96:66:0b:25:
c1:0a:bb:e0:38:16:ad:02:75:ac:2a:fc:3b:be:3b:70:83:6b:
c9:b4:62:b3:7c:b3:d0:3a:7c:b1:dd:0f:80:da:00:97:fa:6f:
3b:99:00:15:71:e0:90:80:67:3c:09:32:5c:0e:a2:3b:14:b2:
7c:44:32:5d:50:fe:35:03:4a:d0:1e:c1:0e:5e:15:40:e9:ad:
fd:56:23:4a:c9:1a:e1:fc:64:83:8a:d7:55:2c:86:8d:bc:76:
35:d0:2f:76:5e:25:f8:c8:b7:75:a7:d7:cf:d2:1b:02:a7:55:
90:21:da:e5:75:32:e5:68:cb:4a:84:42:cd:7e:31:a8:4e:41:
a9:fc:85:b1:cb:ba:f0:50:b2:ee:58:44:1c:c1:0b:c1:de:51:
6c:9b:10:83:ce:ef:96:e3:f7:ba:91:af:f2:b6:e4:0e:f8:9e:
a3:f8:1d:ac:64:f2:14:fe:78:8b:85:b1:32:50:80:8f:18:df:
17:0a:98:84:75:65:0c:9d:c3:5d:7a:fc:52:bb:03:cf:41:0a:
5a:1b:d5:85:b1:71:ed:85:ef:51:9c:b2:1f:16:4f:88:5e:da:
a1:65:1c:5c:53:4e:b3:ab:11:3f:2f:cc:96:00:50:3d:18:a6:
5a:c7:8d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:28 2024 by rpki-client on console-fra.rpki-client.org