Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/efJ7k1vxA_uHw9dZuHAT_yLmVVM.roa
File: efJ7k1vxA_uHw9dZuHAT_yLmVVM.roa (raw, json)
Hash identifier: 8sWd/hD3KWcYpzYQ8wfc2+JpSJAvWBMngAuSY5oxr0g=
Subject key identifier: 79:F2:7B:93:5B:F1:03:FB:87:C3:D7:59:B8:70:13:FF:22:E6:55:53
Certificate issuer: /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Certificate serial: 01879EE182C2311C2A57DDB301BED1F37D7F
Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/efJ7k1vxA_uHw9dZuHAT_yLmVVM.roa
Signing time: Thu 20 Apr 2023 13:36:31 +0000
ROA not before: Thu 20 Apr 2023 13:36:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 185.142.145.0/24 maxlen: 24
185.142.144.0/24 maxlen: 24
185.142.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:e1:82:c2:31:1c:2a:57:dd:b3:01:be:d1:f3:7d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Validity
Not Before: Apr 20 13:36:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79f27b935bf103fb87c3d759b87013ff22e65553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:08:cd:88:6c:9b:8d:7d:cf:b2:48:e8:bb:46:
7d:73:15:0e:73:24:8d:7b:bc:12:87:58:82:37:c3:
95:fb:78:b5:29:d3:95:dc:ee:77:9c:72:d5:18:c5:
f5:d6:d6:e0:ee:e4:a1:91:04:f1:96:54:72:fd:73:
16:af:b6:4a:29:ac:6d:03:c8:8c:17:65:7b:b0:c5:
cb:5f:90:1f:4b:9f:85:da:53:75:dd:c5:31:ea:ab:
45:e4:e4:cf:4b:23:25:b3:27:79:89:94:0d:6d:ff:
14:ca:fe:d7:8d:cd:da:d8:04:09:4b:7b:c4:56:43:
13:74:e9:c2:b8:17:07:59:83:f5:85:ed:68:30:46:
2d:0b:ef:11:12:1f:f5:f1:07:f4:3f:36:e6:94:5d:
94:b1:4e:a1:82:77:c7:e1:4a:b8:af:e6:2c:5e:9d:
c7:24:f6:ce:e4:a3:1d:a7:26:54:ec:bd:97:86:c3:
8f:45:83:46:00:26:88:77:24:13:9b:33:02:f0:ef:
20:07:16:69:95:9b:a4:a7:68:e5:a4:bd:be:12:35:
0e:6a:0f:d8:be:19:fd:87:cb:13:1e:fe:6d:72:21:
e4:4f:de:54:61:6b:ae:a2:78:d5:af:e1:bb:85:d9:
da:e7:0b:60:6f:43:1b:c9:7f:e6:75:c0:db:41:d9:
ca:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F2:7B:93:5B:F1:03:FB:87:C3:D7:59:B8:70:13:FF:22:E6:55:53
X509v3 Authority Key Identifier:
keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/efJ7k1vxA_uHw9dZuHAT_yLmVVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.144.0-185.142.146.255
Signature Algorithm: sha256WithRSAEncryption
41:c0:2e:c8:10:79:c7:c1:f1:d4:61:96:98:77:2c:b8:b5:9a:
46:68:df:b4:79:bb:9b:79:ae:74:dc:94:a9:49:9a:e2:d4:1c:
24:fb:62:8f:ba:f4:2e:1e:a9:8f:0f:c9:1b:52:d8:fa:35:7f:
7f:55:40:f6:f2:b9:a6:e3:55:23:00:7a:2e:38:32:d7:ed:d6:
4d:43:42:c2:5e:2d:24:11:8c:04:e1:97:61:bc:dc:58:c5:05:
c2:07:bb:49:af:e1:95:c9:12:81:3a:14:3a:12:e7:36:6d:53:
cd:19:aa:39:a3:41:e7:c4:28:a7:39:db:fd:58:9c:dc:d4:87:
36:1d:dc:d0:9d:e9:22:97:4a:22:81:d0:67:23:89:e9:ac:1d:
41:92:62:52:40:fd:3c:13:ca:e1:6d:52:47:b2:ef:82:12:26:
09:9f:48:df:37:3f:2d:e8:6f:18:30:d1:35:24:d0:90:e3:4f:
6b:f3:62:09:9e:95:97:37:f7:da:21:c1:e0:91:e7:8a:3b:07:
9d:3d:78:2a:4d:dc:fd:c4:a6:1f:e3:f5:f6:b6:ad:c2:a9:ce:
e1:6a:50:a8:a3:2c:b7:79:2f:20:ee:2a:57:a0:77:b1:13:46:
08:aa:99:e5:41:75:b9:19:ca:7f:f0:cd:ea:6d:a8:99:64:3f:
f7:09:ce:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:34 2024 by rpki-client on console-ams.rpki-client.org