Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/76v3b9cas3k0Enhe3X-Ai_H84AU.roa
File: 76v3b9cas3k0Enhe3X-Ai_H84AU.roa (raw, json)
Hash identifier: erNcuNIZjyZE8k8sV6A9nnZvyuRA7s/JZsArSxevROE=
Subject key identifier: EF:AB:F7:6F:D7:1A:B3:79:34:12:78:5E:DD:7F:80:8B:F1:FC:E0:05
Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial: 018570D53A143A53A3AC7321EF553FB68FD7
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/76v3b9cas3k0Enhe3X-Ai_H84AU.roa
Signing time: Mon 02 Jan 2023 04:55:00 +0000
ROA not before: Mon 02 Jan 2023 04:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13030
IP address blocks: 185.198.204.0/23 maxlen: 23
2a00:f080::/42 maxlen: 42
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:3a:14:3a:53:a3:ac:73:21:ef:55:3f:b6:8f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Validity
Not Before: Jan 2 04:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efabf76fd71ab3793412785edd7f808bf1fce005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:47:ec:3d:da:0b:d7:09:2e:46:78:ef:e9:2f:
3c:07:6e:7c:e4:2f:bf:76:f1:62:41:8d:2f:14:79:
96:a8:d3:73:40:b2:8f:f4:ed:da:7f:a2:8b:30:a9:
ac:3d:1f:5a:23:1b:72:0d:94:d2:c6:87:13:63:03:
64:83:38:6d:92:b2:2a:f8:7d:03:ff:00:dd:d5:e3:
9f:af:98:a6:ff:a7:3e:16:72:1e:b0:a6:76:6c:12:
cf:52:a9:7b:76:0b:17:6c:1d:18:63:1e:2f:e7:82:
62:a3:f1:fb:ae:34:d2:54:48:54:4f:dd:1b:ba:b5:
5d:dd:a6:03:a4:a8:8d:3d:24:04:5d:42:83:8f:5e:
be:9c:b9:e5:8c:cd:b8:ab:a5:f7:d1:8f:cb:c5:72:
df:34:9f:42:e8:60:44:36:b4:09:18:59:4b:0b:37:
50:94:b2:64:26:6a:2e:75:f6:97:01:1f:47:2f:02:
1f:d5:e1:0f:5b:b0:0b:5f:03:f6:76:80:f0:c0:5e:
8b:5b:61:bc:b7:d4:fe:d2:7d:d0:91:20:ef:e8:80:
c1:19:41:ba:49:dd:7f:0f:ff:21:e5:ca:61:f4:0e:
66:55:be:e8:ca:ae:b7:57:95:37:49:b2:a7:55:c5:
3c:fc:67:71:ad:2c:7c:e6:fe:1e:b1:02:1f:a9:93:
74:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AB:F7:6F:D7:1A:B3:79:34:12:78:5E:DD:7F:80:8B:F1:FC:E0:05
X509v3 Authority Key Identifier:
keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/76v3b9cas3k0Enhe3X-Ai_H84AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.204.0/23
IPv6:
2a00:f080::/42
Signature Algorithm: sha256WithRSAEncryption
a8:2d:60:2b:db:f5:66:7f:4d:11:53:18:eb:2c:51:df:e2:23:
f3:51:5d:97:b9:c2:16:80:8d:2a:cc:15:1b:c2:36:5e:25:d4:
0c:04:e1:85:1c:f7:30:97:9c:56:85:c4:97:d5:27:f4:a0:e7:
05:4d:c5:b1:88:9e:d7:dd:97:27:5f:51:a9:7a:74:98:b2:42:
dc:ac:da:9b:5e:8f:87:92:f8:0c:14:dd:ca:0a:fb:ac:b6:67:
2d:96:74:04:4e:e3:1e:8e:8a:71:56:78:09:c9:4b:71:ee:81:
5d:5b:51:c0:1e:71:45:b1:07:b5:97:da:6d:ed:8d:c7:48:d4:
41:1a:18:50:75:43:c1:aa:31:dd:a1:f9:30:e3:16:e1:09:92:
80:12:c8:58:9e:6e:bc:a9:f7:a5:25:fe:85:3d:e7:66:8b:43:
1a:20:f7:8f:9a:31:03:58:d0:ca:1b:dc:44:fb:49:4e:90:bf:
2d:cd:59:f7:05:2e:e3:63:a6:f4:22:11:c0:67:62:c4:96:75:
76:1e:a0:56:7b:30:53:36:f5:e4:8d:0d:9a:72:e2:ef:16:ed:
54:01:d4:0e:47:7e:79:2f:f5:19:9b:90:d0:65:38:15:ff:fe:
04:dc:cc:25:7d:45:68:69:e1:32:76:77:2d:a6:87:2c:89:df:
00:c5:b7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:38 2024 by rpki-client on console-fra.rpki-client.org