Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/hDEfq7iXIogLchT2ClLghUDHfEE.roa
File: hDEfq7iXIogLchT2ClLghUDHfEE.roa (raw, json)
Hash identifier: lMPdw7gkLj1SjE+yStbmMa6IFf6gjTqzvX0cjidNqcw=
Subject key identifier: 84:31:1F:AB:B8:97:22:88:0B:72:14:F6:0A:52:E0:85:40:C7:7C:41
Certificate issuer: /CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741
Certificate serial: 0187B1FA922829CF31D5D1849AF7BCEEA244
Authority key identifier: EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/hDEfq7iXIogLchT2ClLghUDHfEE.roa
Signing time: Mon 24 Apr 2023 06:36:41 +0000
ROA not before: Mon 24 Apr 2023 06:36:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206766
IP address blocks: 185.236.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b1:fa:92:28:29:cf:31:d5:d1:84:9a:f7:bc:ee:a2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741
Validity
Not Before: Apr 24 06:36:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84311fabb89722880b7214f60a52e08540c77c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5e:a8:be:12:01:50:d5:ed:fa:cc:71:96:86:
b2:91:b8:42:16:b6:76:99:45:48:48:0b:c5:23:09:
3e:b9:9a:11:e8:31:97:9d:b2:0d:69:dd:56:ec:a3:
3d:e7:9f:1c:6c:d9:56:4d:ad:f4:eb:2c:3b:69:66:
c4:be:dc:a8:0e:27:b6:31:bd:6e:8a:b4:b8:a3:13:
49:45:30:91:d8:b2:01:5c:3a:12:9a:55:2b:dd:03:
f4:64:65:99:d4:f2:2a:51:3b:2f:f7:f5:47:a7:aa:
c2:80:af:20:ea:e4:2c:03:16:44:49:e6:ca:98:85:
b4:a4:14:bc:5e:6c:12:72:64:55:94:41:75:ff:89:
12:72:8a:46:d4:fd:6b:67:fe:b1:f3:56:75:98:7d:
56:59:a7:75:76:79:b5:2e:ae:57:7b:82:7a:8e:2f:
ef:18:cc:5e:41:48:83:9a:aa:d3:2f:a3:ca:0e:35:
57:d8:c1:8d:66:e1:d0:b0:77:4a:e3:82:fb:32:14:
66:03:1c:8a:24:ce:af:fe:5d:8f:5c:18:50:fb:34:
2a:8e:3b:4a:58:39:56:73:e9:f6:e1:b4:75:c5:04:
1a:52:f5:bb:6a:60:70:ef:36:ba:32:05:2c:37:80:
16:bf:4e:03:44:82:43:10:64:53:2c:fc:2f:48:e6:
64:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:31:1F:AB:B8:97:22:88:0B:72:14:F6:0A:52:E0:85:40:C7:7C:41
X509v3 Authority Key Identifier:
keyid:EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/hDEfq7iXIogLchT2ClLghUDHfEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.21.0/24
Signature Algorithm: sha256WithRSAEncryption
59:53:95:9a:15:ae:a8:d3:54:f9:21:1d:8c:8a:49:b8:44:ac:
94:42:70:55:31:88:ab:c0:09:10:c0:3e:c6:44:11:93:2b:08:
53:57:87:f2:5c:6d:34:f9:be:a2:da:b9:69:f7:fe:79:82:90:
f4:d5:b9:07:71:7b:6b:7c:62:17:7d:9b:4f:50:c4:64:39:d1:
dc:d8:3d:a5:f3:fa:1b:e3:04:2f:d1:8d:fd:b2:96:73:f5:f7:
36:1c:25:ad:ac:04:de:35:7f:34:80:84:a2:6b:82:19:6a:8f:
d3:9b:6d:b6:3f:84:36:22:58:94:d4:03:06:49:75:d3:bc:75:
16:65:c9:42:75:61:76:44:c2:fb:bd:96:10:86:6f:52:23:e4:
27:5b:5a:68:65:04:6c:ce:09:95:71:62:5c:ee:45:2d:74:a5:
c3:98:e8:12:b9:db:b9:32:6c:2c:25:ae:0c:93:ff:da:c5:d2:
6b:63:76:a2:c3:97:ad:25:4b:7d:76:56:1c:50:21:d1:a8:0f:
da:5d:76:45:a8:9b:9f:05:45:2f:3f:cb:2b:87:bc:e9:7b:fe:
cc:9a:05:06:2c:6e:7a:75:d5:e5:6b:07:06:1e:44:2c:76:58:
ad:37:76:43:f3:57:ab:f1:c5:5c:76:23:ff:18:87:f1:9a:bb:
60:6d:96:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:52 2024 by rpki-client on console-fra.rpki-client.org