Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/7Zxbl68OA65uzrgW2jIcPxDf-l4.roa
File: 7Zxbl68OA65uzrgW2jIcPxDf-l4.roa (raw, json)
Hash identifier: 8PGbaCjsvt1h47M0ZJ39T0MFdDgtgrBd6dINmq7v0Jc=
Subject key identifier: ED:9C:5B:97:AF:0E:03:AE:6E:CE:B8:16:DA:32:1C:3F:10:DF:FA:5E
Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial: 01857227E5DF406E56EA7AF8A90D9A089060
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/7Zxbl68OA65uzrgW2jIcPxDf-l4.roa
Signing time: Mon 02 Jan 2023 11:04:55 +0000
ROA not before: Mon 02 Jan 2023 11:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.107.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Sep 2023 09:25:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:e5:df:40:6e:56:ea:7a:f8:a9:0d:9a:08:90:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Validity
Not Before: Jan 2 11:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed9c5b97af0e03ae6eceb816da321c3f10dffa5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:a0:8a:1a:44:61:1f:ed:21:98:ae:2b:67:
2c:d4:96:30:e2:d0:5f:e1:29:ad:8c:ac:ec:75:e6:
d1:af:59:b9:20:98:06:92:99:ad:be:20:26:f3:a4:
1f:1d:a4:db:99:8b:ef:4f:cb:c3:89:98:65:5d:bf:
cf:2c:ba:f4:2f:4d:50:50:c8:08:28:f0:4f:c9:3c:
05:f3:b2:bc:ea:89:cf:50:f2:36:99:82:0a:b8:3a:
8c:ef:cc:6c:e3:51:b2:b4:b1:8a:76:6b:be:20:e1:
8d:9d:9e:91:27:f6:a9:f9:d8:d6:19:3f:96:9a:b6:
c4:e1:0e:26:9d:19:fd:e4:05:65:d7:92:8a:9a:6a:
12:35:f3:57:17:05:ed:50:c5:bf:4f:99:9f:a0:ba:
2e:67:ce:b2:ee:45:55:ab:6a:fc:7f:c7:1a:e9:38:
b5:b0:23:dc:af:fd:b5:8e:7e:98:26:1c:07:be:d6:
fa:0f:83:e5:de:4d:11:66:87:9d:19:89:33:7a:be:
be:9d:08:84:1a:36:a4:fd:db:dc:b3:53:45:05:c2:
9a:bc:27:31:4f:2f:14:b0:c2:67:43:05:73:75:87:
14:db:8b:88:c8:fe:ec:25:44:6c:89:3a:88:42:f5:
7e:b2:0a:7e:e9:4f:db:ff:8d:36:b3:3f:80:f5:e0:
7f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9C:5B:97:AF:0E:03:AE:6E:CE:B8:16:DA:32:1C:3F:10:DF:FA:5E
X509v3 Authority Key Identifier:
keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/7Zxbl68OA65uzrgW2jIcPxDf-l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.197.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:3d:8e:f1:6c:ed:5e:36:de:79:b1:a9:36:88:45:ef:a8:0e:
c2:30:81:2a:46:9c:20:5a:d2:9a:b4:3a:46:b5:e5:96:bd:31:
3b:33:b4:ee:ec:af:9a:e7:31:3c:ab:96:53:3a:c3:0f:c9:d3:
66:5a:10:7c:c9:4e:6c:e1:63:23:57:04:a0:25:48:3a:b2:f8:
50:ed:38:2c:43:a9:93:c9:30:61:eb:82:3c:88:2c:52:28:d0:
86:42:ac:5b:fc:7e:9a:61:82:3f:8d:28:3a:fc:22:3a:aa:62:
cb:8a:0f:7c:f5:cc:8d:f6:c3:c5:2d:11:a4:94:c1:db:e8:c4:
9b:db:2d:50:1a:69:26:d4:07:50:b1:eb:46:e3:75:a9:14:88:
1a:17:08:53:5d:09:de:9e:45:e3:3a:bd:67:82:d5:83:bf:aa:
b4:b4:49:8a:01:f9:90:43:12:c0:f3:d2:99:c8:a7:f9:62:09:
bf:0f:58:41:52:34:16:24:ec:54:d8:25:fc:2a:f6:41:4c:91:
25:57:15:45:f8:32:51:ce:1b:17:1c:c5:40:5e:a5:25:d6:cf:
46:5d:61:67:57:7c:36:1c:c9:be:6a:28:2c:9d:0b:8d:c6:1a:
a3:3f:1a:08:2a:69:35:ab:56:81:89:44:5a:ba:6f:cc:67:ef:
7f:35:49:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:19 2024 by rpki-client on console-ams.rpki-client.org