Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/cV8rHeRE75jqIzBUDNrq038GOwc.roa
File: cV8rHeRE75jqIzBUDNrq038GOwc.roa (raw, json)
Hash identifier: r2Xh4kagIdm/zvCe2mLW+RytJdZGp/VTZXjYPETsZQ8=
Subject key identifier: 71:5F:2B:1D:E4:44:EF:98:EA:23:30:54:0C:DA:EA:D3:7F:06:3B:07
Certificate issuer: /CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Certificate serial: 018B182F50573ED747AF0E1143ED9EC5B161
Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/cV8rHeRE75jqIzBUDNrq038GOwc.roa
Signing time: Tue 10 Oct 2023 06:03:55 +0000
ROA not before: Tue 10 Oct 2023 06:03:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208821
IP address blocks: 185.189.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Oct 2023 10:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:18:2f:50:57:3e:d7:47:af:0e:11:43:ed:9e:c5:b1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Validity
Not Before: Oct 10 06:03:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=715f2b1de444ef98ea2330540cdaead37f063b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:42:93:0a:42:97:d0:d9:44:6c:1a:ff:f5:d6:
c9:cf:69:e3:a4:a0:89:d0:3c:06:84:13:a4:a0:b7:
5d:45:06:7c:59:28:e1:d8:71:0c:b0:b3:70:80:be:
b5:3b:70:f6:ac:76:a3:37:c5:fd:58:b1:46:f2:36:
b8:e2:b5:42:69:ab:b5:ad:74:89:f5:f2:cc:fa:ea:
df:ee:5c:44:bf:5d:a0:11:f6:78:0a:9f:6b:d2:e9:
e2:60:c4:ad:ff:41:71:c4:f2:1c:9c:3d:86:70:a5:
ab:a2:c7:3f:b9:4c:4b:a0:8e:d7:38:0d:d3:e0:90:
3d:ae:85:41:1d:b0:49:3e:c6:91:27:89:0c:86:09:
a8:f3:aa:81:94:c4:77:59:84:e9:47:5a:bb:13:97:
c1:02:c5:60:63:75:d9:21:d1:d5:fe:ad:bc:46:e6:
98:e8:27:0a:3f:7f:a6:88:d3:55:9d:4e:c4:11:64:
31:17:7a:83:8c:fc:ee:15:07:8a:7d:e0:2c:db:5d:
49:e1:43:05:7d:a7:ab:47:78:4b:6c:e9:2b:3f:c0:
3c:4e:ea:1a:d8:e0:39:4d:61:ff:14:73:5e:8a:af:
ac:57:35:0d:fa:5a:6c:27:64:02:7d:0d:86:2e:42:
3a:ac:e6:21:36:6d:18:55:e4:54:b2:82:e5:1c:a1:
29:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5F:2B:1D:E4:44:EF:98:EA:23:30:54:0C:DA:EA:D3:7F:06:3B:07
X509v3 Authority Key Identifier:
keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/cV8rHeRE75jqIzBUDNrq038GOwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.53.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3e:4a:1a:ad:dd:13:62:8c:41:42:4a:c3:c5:a7:1e:a0:98:
fb:da:c8:49:43:8b:10:fd:f7:59:d9:d5:ad:bd:cf:23:8b:8e:
df:ae:4d:a3:8a:9e:c1:5f:8c:de:58:48:80:c3:92:d6:48:26:
c7:9b:8f:84:55:da:35:c4:6d:40:55:18:be:89:cf:9f:9b:22:
23:c1:f3:2c:af:51:9a:a1:82:c2:66:a6:06:a3:28:0b:a6:f8:
ed:85:51:82:78:f1:de:2b:48:70:ac:31:61:70:ab:ea:fd:1a:
8f:35:73:5b:30:b6:2d:5c:40:73:3a:b9:fc:7e:0d:80:8e:cf:
b5:e1:a7:18:b9:63:11:7e:75:1b:10:74:08:a9:b3:99:35:86:
1a:42:64:92:e2:7f:4f:5d:0c:13:7c:c4:a9:64:0a:55:e8:89:
06:88:7c:b1:a9:a1:ff:df:7e:b3:15:15:f2:8b:a0:2c:06:52:
8d:58:a3:04:fe:b2:f5:a5:fe:4a:e0:9e:71:df:03:06:41:02:
cd:f1:d6:83:55:17:2a:e3:bb:5c:c1:99:4a:bf:65:bc:06:f6:
74:ae:61:00:1f:6f:31:99:e0:a6:5c:2d:fa:58:3a:9c:30:a9:
21:18:8c:e5:51:64:0d:dc:6b:5e:09:ec:9c:c8:7c:af:bf:b3:
11:f4:a2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:07 2024 by rpki-client on console-fra.rpki-client.org