Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/lNoVVbjuMEKi-ee4pEHKRewath0.roa
File: lNoVVbjuMEKi-ee4pEHKRewath0.roa (raw, json)
Hash identifier: fU0LLbBN0cec8HFqj6lQ/RL4H/Ye0dpymeKSvZ1d394=
Subject key identifier: 94:DA:15:55:B8:EE:30:42:A2:F9:E7:B8:A4:41:CA:45:EC:1A:B6:1D
Certificate issuer: /CN=7eb92b38df197ca2cbae302693226b23f32a3f76
Certificate serial: 01861769B70382F1575AC91670FF60061930
Authority key identifier: 7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/lNoVVbjuMEKi-ee4pEHKRewath0.roa
Signing time: Fri 03 Feb 2023 13:14:09 +0000
ROA not before: Fri 03 Feb 2023 13:14:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204754
IP address blocks: 185.241.185.0/24 maxlen: 24
185.241.186.0/24 maxlen: 24
185.241.184.0/24 maxlen: 24
185.241.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Feb 2023 17:43:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:17:69:b7:03:82:f1:57:5a:c9:16:70:ff:60:06:19:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92b38df197ca2cbae302693226b23f32a3f76
Validity
Not Before: Feb 3 13:14:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94da1555b8ee3042a2f9e7b8a441ca45ec1ab61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1f:9f:6b:77:4c:f8:92:20:62:92:bd:78:6e:
b1:3f:0e:bd:69:d1:0c:a7:be:7a:0f:c9:d8:d9:50:
5a:5a:4b:29:ca:49:e6:e7:f0:64:c3:93:c0:7b:fc:
ca:36:bf:55:12:b7:a7:48:40:45:f2:df:b3:83:9b:
90:7d:01:7a:6e:f5:b2:b6:50:ee:d9:98:22:54:f9:
3f:06:64:0d:6c:a2:e4:30:c9:a5:80:4d:64:2d:0a:
bb:b8:aa:85:33:33:07:68:fb:91:8f:6c:56:99:ab:
8a:20:f8:79:ea:73:50:c5:da:66:e9:94:99:e4:c7:
27:b6:39:e6:b9:ab:21:8b:4f:8b:91:0e:26:a5:29:
6f:11:af:3e:6c:df:e9:cf:12:76:45:11:8d:14:8a:
7b:b2:5d:35:e3:cd:b2:44:20:7e:0a:51:af:9c:97:
6b:2b:65:02:4c:c8:5e:08:88:50:e5:66:87:82:56:
9b:25:dc:20:6b:39:6b:62:7b:ad:c8:aa:82:c7:82:
15:8a:07:83:de:4f:d8:31:c6:e5:f0:17:88:b7:48:
97:80:d9:50:f4:1e:a9:3f:5c:1f:cf:b7:40:54:31:
66:0e:08:79:8d:2c:6b:24:70:0d:86:40:e0:4b:9c:
73:c1:d1:3e:87:cc:bb:f8:6f:a0:01:ca:39:4c:8e:
35:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DA:15:55:B8:EE:30:42:A2:F9:E7:B8:A4:41:CA:45:EC:1A:B6:1D
X509v3 Authority Key Identifier:
keyid:7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/lNoVVbjuMEKi-ee4pEHKRewath0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.184.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:ff:bd:d5:b7:09:2b:91:33:4f:78:a3:ba:80:7e:f4:fc:8e:
33:ac:eb:cf:fb:f5:c5:60:5f:ba:d7:bc:67:5c:4e:f3:2e:10:
66:fa:1c:6f:03:2f:25:be:b0:c1:b1:ff:d7:bd:a8:78:3f:8b:
3f:78:75:0c:d1:67:1b:0d:63:ce:91:d6:6f:7e:bd:af:3b:45:
27:4f:1f:1f:d4:3e:44:b4:75:2a:47:e5:69:dc:a5:4f:6b:08:
fe:ba:6c:78:7d:4d:aa:78:b7:6f:81:7f:36:8c:bf:88:86:14:
87:92:2e:09:0a:79:ad:cd:d5:95:f1:b3:a8:b3:ca:0d:08:dc:
29:43:d2:2f:ba:bf:64:11:30:82:7d:2a:0e:e3:78:ac:b6:8b:
26:90:cf:40:01:87:8e:dd:39:8c:9a:00:49:65:df:f8:2d:e7:
a4:25:1d:1c:c4:3d:8d:08:5b:5a:d7:49:32:04:a2:dc:ae:9f:
83:40:23:e0:01:99:c3:ba:52:5e:f9:a4:65:d7:1a:4a:a1:22:
af:d3:93:70:d5:cf:8b:a0:32:9a:ef:85:1f:4b:c8:49:d9:e5:
5a:f9:1e:01:f3:31:56:5a:ea:d7:04:d8:61:5f:80:d3:bd:c7:
9a:44:18:4f:c0:b3:c3:30:b8:1c:2c:21:ca:0d:e0:c5:54:e8:
25:fd:09:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-fra.rpki-client.org