Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/7BtXBanjNx1hHTk74yVJb0Frb6k.roa
File: 7BtXBanjNx1hHTk74yVJb0Frb6k.roa (raw, json)
Hash identifier: AEF+c+LNf8z7ZeGGKcrpcWlNHjRAwB/BqHX+aN8Hi38=
Subject key identifier: EC:1B:57:05:A9:E3:37:1D:61:1D:39:3B:E3:25:49:6F:41:6B:6F:A9
Certificate issuer: /CN=4de1d371cd9f26a11fb64946674c31975f7c2edf
Certificate serial: 018570798116E7B8D574680CB43D1ECFAE57
Authority key identifier: 4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/7BtXBanjNx1hHTk74yVJb0Frb6k.roa
Signing time: Mon 02 Jan 2023 03:14:49 +0000
ROA not before: Mon 02 Jan 2023 03:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205057
IP address blocks: 185.231.94.0/24 maxlen: 24
185.231.95.0/24 maxlen: 24
185.231.92.0/22 maxlen: 22
185.231.92.0/24 maxlen: 24
185.231.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:81:16:e7:b8:d5:74:68:0c:b4:3d:1e:cf:ae:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de1d371cd9f26a11fb64946674c31975f7c2edf
Validity
Not Before: Jan 2 03:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec1b5705a9e3371d611d393be325496f416b6fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:29:98:2f:72:17:0b:62:2a:6f:1d:43:b7:6d:
a3:05:62:4e:d5:a4:7a:90:1c:2b:72:38:4c:93:5a:
61:18:49:7b:5a:2e:a8:88:4a:a9:95:05:3a:e1:61:
68:01:5b:f1:a9:00:d2:1f:d7:0d:d3:f3:e6:fc:a9:
52:0b:ab:86:a9:2c:ce:f4:2c:c8:ba:5d:c3:3a:39:
6e:a3:b2:99:96:7f:65:58:d4:10:1e:e7:4f:5e:8f:
63:05:10:fe:e3:72:e9:40:33:18:76:cf:58:83:15:
89:84:3a:ad:0f:dc:45:34:15:1f:01:b1:33:db:e2:
c4:c6:a3:c0:59:06:5b:b6:bd:f5:70:9c:ab:d0:61:
fd:28:0c:73:b4:da:53:f6:e3:ee:d9:fe:9a:7c:db:
b6:d9:01:d4:53:76:5b:67:98:d6:10:b1:87:d9:0f:
b8:33:92:3d:cc:08:2b:15:f0:70:cf:5e:88:2a:06:
8f:5b:c5:01:b1:89:bb:09:dc:78:b6:ec:da:52:47:
d6:4a:99:60:47:22:97:24:98:8e:e5:a1:6d:b3:cb:
87:36:3e:5c:a4:79:e7:42:a0:31:45:34:cd:52:84:
e0:5a:46:dd:f2:d8:a7:ee:43:03:b8:8a:71:f5:af:
b8:40:9e:18:11:a6:fd:f7:af:8c:0b:eb:b8:38:ad:
7e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1B:57:05:A9:E3:37:1D:61:1D:39:3B:E3:25:49:6F:41:6B:6F:A9
X509v3 Authority Key Identifier:
keyid:4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/7BtXBanjNx1hHTk74yVJb0Frb6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.92.0/22
Signature Algorithm: sha256WithRSAEncryption
06:82:9b:9b:16:cc:a7:47:31:15:ca:10:20:53:82:17:d5:e5:
ba:e4:e9:95:e5:ce:61:20:83:a9:ab:77:11:ae:e5:1a:d1:00:
a8:af:d4:72:1e:ff:db:ed:57:49:73:a8:a9:7e:98:f8:05:49:
e1:57:e5:f5:ac:38:17:eb:6d:95:02:8c:f4:1c:5c:56:bf:f9:
e2:fa:b2:d6:63:c9:d2:88:d1:50:1d:88:f0:e5:f2:82:f0:ea:
99:a8:c9:b7:fe:b4:0c:a3:99:ce:c9:a8:46:32:e3:9d:18:0d:
a8:d6:98:cd:f6:9a:9c:60:76:ef:39:ab:d1:3d:b9:6f:f0:be:
1a:a1:0f:11:58:d1:a1:69:a3:d2:85:e2:66:e7:2e:50:02:ac:
00:df:4a:1b:25:ca:44:84:71:b3:9c:04:c1:2a:62:85:f0:6b:
b8:36:c1:47:e4:b1:f5:58:fd:22:79:f8:50:42:87:ca:06:c7:
6e:4d:cf:dd:93:fb:ad:56:3f:2a:e5:96:67:b1:60:84:07:8f:
16:ee:f5:4e:b6:c7:72:ed:67:8d:17:31:6d:52:4f:a4:91:53:
c5:81:95:03:56:ec:b1:ca:32:1c:fa:f8:e4:10:b1:ce:37:c3:
b4:6f:fe:81:0d:1a:58:1f:b9:21:ff:16:4e:f6:75:84:ae:e3:
38:ea:ee:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:08 2024 by rpki-client on console-ams.rpki-client.org