Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/7WwFhJ4m3BmPyDGWgSt7ala7L-U.roa
File: 7WwFhJ4m3BmPyDGWgSt7ala7L-U.roa (raw, json)
Hash identifier: DWf3Sk7tHQVQceiah6cst4m67HL2L9TiHczdm+7I+qs=
Subject key identifier: ED:6C:05:84:9E:26:DC:19:8F:C8:31:96:81:2B:7B:6A:56:BB:2F:E5
Certificate issuer: /CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Certificate serial: 0187B2669A92A4239A47E0B74A688AD017EC
Authority key identifier: 47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/7WwFhJ4m3BmPyDGWgSt7ala7L-U.roa
Signing time: Mon 24 Apr 2023 08:34:41 +0000
ROA not before: Mon 24 Apr 2023 08:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212907
IP address blocks: 185.187.84.0/24 maxlen: 24
185.187.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b2:66:9a:92:a4:23:9a:47:e0:b7:4a:68:8a:d0:17:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Validity
Not Before: Apr 24 08:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed6c05849e26dc198fc83196812b7b6a56bb2fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8b:a7:53:4b:23:10:e6:c0:02:c9:ba:83:1b:
c7:43:75:f9:39:16:11:fd:51:c8:ce:e5:4a:30:2a:
fd:85:ec:29:9f:4b:14:6a:3e:6a:b4:7c:fb:da:d1:
ce:25:81:0e:81:c0:b7:8d:91:1b:44:35:e5:be:65:
40:77:99:58:06:a1:ed:a6:6a:bb:60:8c:24:02:bb:
e1:23:ce:a5:78:87:72:83:cd:7f:2d:c8:31:49:b2:
76:e4:50:9e:db:ef:5c:82:84:41:6a:e8:46:00:62:
30:45:37:52:3d:c6:4d:7c:ce:39:9e:1c:97:c2:8e:
df:da:47:c7:f2:d8:da:48:db:30:89:7e:20:c1:66:
9b:b3:52:35:2c:26:2e:e0:f4:55:72:19:64:48:8a:
8f:de:8d:b1:3c:53:d1:47:11:c1:24:d1:b2:dc:10:
45:d0:6f:16:e0:bd:61:6a:e3:b6:5b:48:cb:ca:a1:
83:19:36:f2:73:0b:38:56:11:01:fd:77:35:b3:28:
d6:0b:f6:7f:06:cb:c4:79:55:e3:1e:6c:57:14:b6:
95:bf:6e:e4:0e:9d:89:0f:b2:01:30:a7:07:71:45:
d5:16:bd:0d:bd:af:48:22:5c:5b:35:b9:70:bf:a2:
d8:35:a4:a9:da:31:63:fb:21:2b:5f:33:3c:34:f1:
10:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6C:05:84:9E:26:DC:19:8F:C8:31:96:81:2B:7B:6A:56:BB:2F:E5
X509v3 Authority Key Identifier:
keyid:47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/7WwFhJ4m3BmPyDGWgSt7ala7L-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.84.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:09:d1:d6:7f:8e:db:3c:c9:b9:11:91:f7:10:04:1c:1b:50:
22:4a:7a:41:df:4c:44:7f:c9:a8:fe:83:68:5e:a7:43:40:a2:
92:2e:a4:26:de:c5:98:f4:8b:15:ed:6b:51:9d:3a:87:72:12:
02:e1:7b:8d:ae:95:77:c2:78:42:82:65:19:fa:f4:8d:63:8e:
83:67:6d:41:71:a8:c0:a5:cb:bc:97:f4:80:10:fa:9a:45:32:
d0:40:88:a0:3c:50:aa:46:6b:08:85:c6:fa:10:02:63:10:46:
48:d4:8e:0a:b9:c6:20:d4:81:54:d4:db:cf:dd:26:61:f5:95:
67:eb:7d:3c:d2:cc:9c:5f:93:6b:d8:55:dc:00:94:47:eb:6f:
a0:5c:a5:71:82:90:b9:99:55:32:30:b1:a4:0a:6f:5e:a6:59:
36:09:2a:b6:8f:35:1e:c0:80:11:52:ce:dd:22:b3:a2:f1:52:
b3:a4:41:9f:53:7b:29:40:c2:0b:09:cf:74:37:db:26:9f:7f:
05:f1:f5:cd:04:b3:52:ca:d2:ba:51:cc:9e:e8:38:ca:38:c7:
8d:76:11:dd:54:69:56:e9:0a:16:26:fc:1b:a2:53:41:41:0c:
23:ca:8e:84:ed:97:a7:43:4f:c6:3d:8c:a9:ae:ef:b4:9d:2b:
64:b0:b1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:21 2024 by rpki-client on console-ams.rpki-client.org