Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/bCrqdg78VY2w-7D5Lv1qwdRQ83Y.roa
File: bCrqdg78VY2w-7D5Lv1qwdRQ83Y.roa (raw, json)
Hash identifier: 5Nx1RFnBISHrA7bWCFYgYo5ZrclSr3Jy+2Fml62U0Qs=
Subject key identifier: 6C:2A:EA:76:0E:FC:55:8D:B0:FB:B0:F9:2E:FD:6A:C1:D4:50:F3:76
Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial: 0185738FFB84FD12624ED47EA018F330EABE
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/bCrqdg78VY2w-7D5Lv1qwdRQ83Y.roa
Signing time: Mon 02 Jan 2023 17:38:13 +0000
ROA not before: Mon 02 Jan 2023 17:38:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3292
IP address blocks: 185.149.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:fb:84:fd:12:62:4e:d4:7e:a0:18:f3:30:ea:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Validity
Not Before: Jan 2 17:38:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c2aea760efc558db0fbb0f92efd6ac1d450f376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:73:bd:85:61:d5:f7:7e:7b:07:fe:89:71:a6:
d5:ed:88:75:46:d6:b2:bf:43:cf:89:2a:aa:fc:4d:
fd:8c:49:86:66:99:23:20:98:d4:53:b9:17:c2:81:
3c:2e:03:f2:eb:6b:75:d8:f2:dc:ee:b2:56:4d:3c:
56:f5:42:88:dd:15:bf:bd:14:fb:84:11:64:09:5f:
1c:d5:69:65:bb:cd:2d:f5:15:ec:24:f2:68:7f:04:
5b:19:43:53:78:d6:d6:18:b0:53:3a:4d:73:66:ec:
c5:c9:a5:61:86:b2:87:67:d1:13:fd:74:a8:4b:f5:
77:31:a0:8d:55:2a:bd:23:8f:95:92:dc:a1:64:10:
37:bb:e4:bc:98:89:82:09:a0:06:0d:43:09:2c:45:
93:57:9a:2e:76:8e:79:81:1c:77:d5:44:99:e1:81:
44:a7:64:99:bf:ea:df:f9:6b:49:4f:43:c4:4b:64:
f0:2a:59:0f:3c:a6:34:2e:5c:66:67:73:3f:0b:7c:
d5:b3:68:e9:a6:37:a1:c6:2e:3b:90:a2:70:fd:0c:
aa:9d:ea:7a:ef:65:ca:dd:17:1e:11:8b:12:e1:8e:
4d:75:42:28:ae:c8:ac:b5:09:a7:1a:34:3d:15:6c:
8c:58:a5:43:1c:c9:f6:60:a2:e5:a1:12:25:a7:ca:
d5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2A:EA:76:0E:FC:55:8D:B0:FB:B0:F9:2E:FD:6A:C1:D4:50:F3:76
X509v3 Authority Key Identifier:
keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/bCrqdg78VY2w-7D5Lv1qwdRQ83Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.231.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b6:39:b3:56:fa:6e:53:d3:d3:df:b1:c0:69:17:ea:3a:41:
c6:84:92:b9:ab:f6:27:fb:75:d8:e4:fe:be:d8:64:15:94:7e:
e8:49:3a:1a:3f:b0:d8:1b:1d:e3:d5:ea:9d:dd:f1:83:91:4d:
b3:82:2c:9b:c2:ba:40:fc:b9:cd:60:46:f0:a4:3f:ba:78:1a:
cb:b6:eb:c6:6a:a8:0c:d9:59:ef:99:c1:57:30:c7:b8:b6:e7:
53:b9:1f:a8:c9:c5:2a:1d:4a:c7:e3:25:78:41:d2:91:76:95:
18:37:62:9a:dc:45:f7:22:9c:2e:b9:b8:c8:0e:10:ab:46:86:
68:89:47:de:d5:df:56:9e:26:c2:cf:97:7b:b0:4b:9e:c4:8f:
88:07:77:cb:0c:67:31:8f:9d:c8:1c:a5:ca:75:7c:fd:8f:ea:
9f:da:be:e3:33:18:df:9f:4b:64:30:e9:09:bc:85:53:6c:89:
96:73:4a:73:a4:24:5c:09:0b:4b:d5:bf:39:91:25:c3:11:c4:
c9:ba:f9:1c:85:0d:e4:56:53:fd:7b:8b:69:ae:77:a9:37:05:
c4:12:d0:b8:4e:90:00:4a:d0:d9:93:94:45:2c:79:12:03:c6:
54:14:6c:63:20:6f:fc:fc:3f:5b:5d:0c:e7:69:9a:34:d9:63:
a3:4b:34:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:09 2024 by rpki-client on console-fra.rpki-client.org