Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/Jd9pxrPRRpZaMmIZtnq1IBEpbes.roa
File: Jd9pxrPRRpZaMmIZtnq1IBEpbes.roa (raw, json)
Hash identifier: z1fEvPDjP3gEVDoGVzO6robQ054A/SPdeXaR3nqAe28=
Subject key identifier: 25:DF:69:C6:B3:D1:46:96:5A:32:62:19:B6:7A:B5:20:11:29:6D:EB
Certificate issuer: /CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Certificate serial: 0185720C84121632A081991DA8B6E1E4C46A
Authority key identifier: 75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/Jd9pxrPRRpZaMmIZtnq1IBEpbes.roa
Signing time: Mon 02 Jan 2023 10:35:00 +0000
ROA not before: Mon 02 Jan 2023 10:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205913
IP address blocks: 185.202.76.0/24 maxlen: 24
185.202.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:84:12:16:32:a0:81:99:1d:a8:b6:e1:e4:c4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Validity
Not Before: Jan 2 10:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25df69c6b3d146965a326219b67ab52011296deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:91:ad:7a:fd:4c:5e:54:95:c4:b8:a2:71:90:
7b:76:9a:a6:50:41:65:0d:be:7c:70:73:c5:23:ab:
62:cf:be:61:d6:f9:b6:5c:84:47:66:d9:70:17:66:
02:6c:be:52:c2:e3:d6:fb:1d:db:fa:52:13:78:12:
6b:58:c2:0d:e7:61:88:f5:cd:7c:87:ae:2f:9a:6b:
3f:66:30:f9:b0:57:c1:36:82:ce:f3:54:92:1f:cd:
e7:d6:9f:6f:bc:4d:63:bb:19:61:9f:f1:c0:9e:2a:
1b:b9:9d:8c:57:0a:73:ed:21:f7:63:64:18:04:d5:
47:56:14:a2:0d:ff:5d:48:fb:8a:d9:da:67:29:cf:
f3:68:0d:17:fd:55:2f:64:e2:cc:69:47:fc:95:c8:
65:82:7f:8c:31:24:e9:0f:0b:68:94:0d:b8:5e:67:
3e:1b:a1:a6:9f:a4:ef:b7:10:60:cd:6e:7e:e5:40:
1b:a2:16:c5:52:2e:9a:a8:5b:ba:68:9a:c7:a4:a5:
57:b8:f8:ff:8e:1a:a1:55:5b:81:b1:56:01:9b:0c:
bd:31:c7:a1:d2:84:5d:9c:f8:0f:28:01:20:78:bb:
ab:04:60:6b:74:16:25:fc:96:a7:2d:56:a3:ec:b2:
ef:f0:ab:51:2b:4e:11:7e:a5:4a:c7:b0:44:2d:fc:
e8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DF:69:C6:B3:D1:46:96:5A:32:62:19:B6:7A:B5:20:11:29:6D:EB
X509v3 Authority Key Identifier:
keyid:75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/Jd9pxrPRRpZaMmIZtnq1IBEpbes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.76.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:07:51:12:39:48:9d:8f:cb:6b:11:81:a1:4e:83:1f:ca:35:
2c:83:6f:1f:72:e6:b7:df:01:24:5e:1f:f8:fb:2a:e8:29:2e:
b0:9a:7d:65:4a:30:5f:10:80:38:70:cf:b5:e9:ac:f4:18:b7:
b0:bd:66:74:04:de:06:f7:a6:b0:2f:ea:c6:0a:f2:0e:e7:86:
d4:a9:31:fe:ca:1f:19:41:7e:d4:80:81:0e:71:e7:03:eb:0e:
a5:94:02:ff:ef:e7:0e:c1:12:e3:57:2f:0f:75:ee:dd:7f:64:
51:b9:7b:f0:15:68:7b:45:e9:21:24:e7:ec:df:73:3a:fc:91:
a1:31:dd:ac:d9:f3:1e:94:c5:29:eb:a9:5c:32:fd:40:bf:33:
32:bb:09:39:84:e5:c6:5c:95:29:10:90:12:94:f9:c7:87:6d:
97:f8:64:26:c9:50:a4:a7:1c:60:b6:f2:db:9f:fa:c8:89:12:
83:a9:d2:73:6e:35:ae:89:b8:d5:1a:be:3c:d4:c8:cc:f9:5b:
47:21:24:02:d6:c6:13:06:62:e7:4e:db:34:e2:ed:49:d3:1a:
71:23:1f:76:ec:74:d9:62:0b:7e:0a:7e:7c:f4:60:ee:3d:95:
de:4f:62:db:27:f4:8a:68:4e:ff:24:de:5a:db:8e:a4:7c:97:
10:cc:f2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:26 2024 by rpki-client on console-ams.rpki-client.org