Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/mBbDyT8O_WbDsn3ePFtMFLz9_dQ.roa
File: mBbDyT8O_WbDsn3ePFtMFLz9_dQ.roa (raw, json)
Hash identifier: +w7uU9cVDuG+rDksXnUiSPdJjjjs3Fasd/C5cZAGZf8=
Subject key identifier: 98:16:C3:C9:3F:0E:FD:66:C3:B2:7D:DE:3C:5B:4C:14:BC:FD:FD:D4
Certificate issuer: /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial: 018ADD5E9CBDD33159D744E6F68C3FF3E388
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/mBbDyT8O_WbDsn3ePFtMFLz9_dQ.roa
Signing time: Thu 28 Sep 2023 19:57:59 +0000
ROA not before: Thu 28 Sep 2023 19:57:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31673
IP address blocks: 185.226.136.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:dd:5e:9c:bd:d3:31:59:d7:44:e6:f6:8c:3f:f3:e3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Validity
Not Before: Sep 28 19:57:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9816c3c93f0efd66c3b27dde3c5b4c14bcfdfdd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:09:31:c8:d6:d5:56:1c:63:9e:71:a4:13:
99:31:8f:2c:cd:97:57:e9:5e:f4:36:5e:18:f6:f2:
e4:75:d4:50:98:5a:06:83:ab:e9:97:28:73:86:84:
23:15:78:1d:59:50:5d:d0:64:45:d1:68:94:8d:5c:
00:18:b5:07:60:28:ba:ad:b0:7d:fb:b7:1c:d3:53:
e1:19:cb:17:4f:24:2f:ae:00:37:e1:75:83:e4:9c:
41:97:b0:09:0f:db:29:4a:d1:8e:a9:0e:af:68:f1:
af:ae:d0:8f:6c:eb:6d:d2:b5:65:a5:c3:8d:66:af:
17:84:15:7a:7d:a1:9a:ae:5c:ae:4d:08:9e:d2:b0:
4f:93:df:19:d7:a2:58:da:1f:d2:7d:39:b0:e9:53:
4e:e5:2e:71:4d:79:0f:a1:d4:1b:7f:2c:38:72:00:
ff:f8:35:49:fc:e2:5b:f0:43:17:1d:1b:10:ab:c6:
7f:27:62:f6:f4:f9:41:03:7e:c6:11:ca:4c:d4:c9:
7b:b9:dc:8b:ed:01:2c:d4:e5:6b:c1:5f:44:f2:ae:
6f:8e:b6:4e:f8:04:13:04:96:38:cc:d2:09:99:fd:
2f:11:9a:ec:0f:48:e7:aa:4e:b9:ee:53:56:b7:d5:
54:0b:66:0a:1a:19:71:dc:2a:ce:77:1a:d6:d1:f5:
0b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:16:C3:C9:3F:0E:FD:66:C3:B2:7D:DE:3C:5B:4C:14:BC:FD:FD:D4
X509v3 Authority Key Identifier:
keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/mBbDyT8O_WbDsn3ePFtMFLz9_dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.136.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:df:78:b0:89:b4:83:0e:c4:92:23:16:f9:8a:86:f9:a2:99:
1d:c4:40:53:ea:27:92:d7:e2:81:bb:f2:40:65:89:29:ad:e6:
0a:3c:8c:eb:fd:b9:d8:b9:6d:a7:ce:cd:72:bc:be:38:61:a1:
c6:59:b1:05:28:6b:04:a3:32:e0:5a:20:34:80:59:a3:1b:a4:
f7:f2:25:79:06:f4:18:20:87:9d:ad:da:c0:37:b0:14:fd:25:
b9:1a:65:bf:b1:45:e4:4f:60:67:4a:5e:10:c7:39:6d:13:25:
79:65:f5:28:d2:88:39:09:db:80:71:61:d7:c9:63:c2:0b:b5:
f5:0a:b3:f7:e1:85:a9:64:58:96:57:09:bf:27:e2:bd:d9:a6:
cf:6d:2d:44:5e:48:9c:6c:6a:14:cb:1a:67:7a:2b:09:dc:19:
f8:72:72:7d:db:c0:a3:ea:5b:52:58:03:fd:29:ce:0d:74:d8:
63:96:46:73:59:17:ac:15:de:3f:76:f0:a5:d2:af:86:03:b1:
51:e5:68:53:8f:0c:b4:a8:4f:3c:96:b5:2a:b5:07:7d:07:69:
8d:24:90:89:80:7b:6f:3c:90:57:9a:94:81:ac:45:f8:47:df:
9e:11:42:88:76:28:ee:20:90:60:43:39:47:d9:4f:e9:34:3d:
db:39:72:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:01 2024 by rpki-client on console-fra.rpki-client.org