Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/d5dQNf8fkFhe_pOSxiroEuXGRGs.roa
File: d5dQNf8fkFhe_pOSxiroEuXGRGs.roa (raw, json)
Hash identifier: WFMQm4WbZ8f2d70luKiIIfPBIBV3jckWDOQy+q6XYvs=
Subject key identifier: 77:97:50:35:FF:1F:90:58:5E:FE:93:92:C6:2A:E8:12:E5:C6:44:6B
Certificate issuer: /CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Certificate serial: 01856DEF714235D690F5A5CBDDA36F5FA024
Authority key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/d5dQNf8fkFhe_pOSxiroEuXGRGs.roa
Signing time: Sun 01 Jan 2023 15:24:46 +0000
ROA not before: Sun 01 Jan 2023 15:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62201
IP address blocks: 185.149.200.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:71:42:35:d6:90:f5:a5:cb:dd:a3:6f:5f:a0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Validity
Not Before: Jan 1 15:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77975035ff1f90585efe9392c62ae812e5c6446b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9d:4b:1f:09:ed:79:cc:d4:cf:16:86:f2:5d:
22:af:99:34:82:52:ca:9f:02:d2:0d:26:bd:c9:9c:
a6:d2:1f:a4:8a:6c:4b:fd:ff:2d:b2:6c:a7:11:cb:
a8:bc:6f:cf:ed:e9:35:d0:d2:27:11:8d:50:54:1a:
dd:db:70:94:67:68:21:d6:cb:d2:d9:21:d2:69:d3:
76:24:64:e6:a2:cd:fb:1d:fd:f4:e3:29:08:f7:a6:
9c:22:7c:c2:01:d1:1f:69:6b:e1:73:3d:ef:0d:c7:
97:2e:18:be:ba:4f:fe:d0:68:c4:b5:cd:01:6e:cd:
bf:4c:d2:1c:36:84:28:c5:2a:b1:3c:42:71:14:bf:
dd:4a:3f:30:23:0d:a3:f6:7c:cc:3e:b4:53:c2:f1:
60:b8:33:48:14:fd:0c:ed:df:14:c0:1c:6a:1a:dc:
84:5f:8a:0c:2f:7f:89:1a:9f:4f:a9:85:1e:47:49:
31:15:f2:a8:7a:cd:de:81:ce:a1:48:e3:89:16:4f:
06:e7:3b:2f:d7:01:19:84:28:31:2e:eb:59:f2:91:
ce:17:c1:d7:92:f9:19:67:61:07:54:2d:89:e9:6e:
3d:bb:72:80:b6:b5:55:3b:ed:4a:82:09:a6:6d:05:
f1:dd:f8:ea:1d:8e:ba:b9:c8:cc:8f:82:b7:6f:a6:
64:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:97:50:35:FF:1F:90:58:5E:FE:93:92:C6:2A:E8:12:E5:C6:44:6B
X509v3 Authority Key Identifier:
keyid:E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/d5dQNf8fkFhe_pOSxiroEuXGRGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.200.0/22
Signature Algorithm: sha256WithRSAEncryption
66:6e:06:20:83:51:33:53:fd:4c:69:81:6a:ea:81:cd:2f:0d:
79:2b:eb:09:10:45:ec:ad:1d:0d:d2:68:df:ce:2a:32:7f:d7:
3e:f5:87:f4:f9:82:df:1e:62:e9:0c:83:93:89:8d:dc:dd:4d:
59:33:86:1b:0d:a9:85:70:de:bb:2e:d8:45:3d:52:a8:31:50:
07:d0:07:19:a9:76:48:c7:82:e4:7c:bc:b4:4e:4f:0b:7e:03:
34:bc:49:07:bb:b3:f9:fc:0a:4c:42:c2:95:51:62:0f:35:b1:
ac:16:b1:c5:43:80:7a:81:ac:b4:c7:f4:1c:0f:88:90:e1:c3:
ed:5f:94:58:62:e7:73:4e:59:17:93:e9:d5:b4:28:1c:6a:4d:
7c:b3:81:3e:91:d3:d4:7f:b8:43:bf:46:ba:42:2c:0d:1d:21:
c0:54:3a:d3:c8:77:d2:ed:47:2e:1c:d4:c5:0b:be:36:81:11:
13:3d:9d:2b:8f:72:f7:98:91:89:cd:06:3e:c3:98:45:49:bf:
88:ab:26:fa:37:ea:db:16:60:26:72:93:48:71:2e:64:23:83:
d4:19:0e:c1:ef:7b:70:e5:3d:dd:53:65:fb:08:4e:44:c4:bf:
a8:52:f1:a9:05:49:be:25:d1:c3:eb:4d:96:02:47:aa:51:cf:
3a:15:19:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:53 2024 by rpki-client on console-fra.rpki-client.org