Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/fEdHn40NL_Ph7Yf8EHls6eSZJho.roa
File: fEdHn40NL_Ph7Yf8EHls6eSZJho.roa (raw, json)
Hash identifier: GDYh4xV9G5rkvXKLQu0TUumDQWtQbqLG4pKDI1dwcq8=
Subject key identifier: 7C:47:47:9F:8D:0D:2F:F3:E1:ED:87:FC:10:79:6C:E9:E4:99:26:1A
Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Certificate serial: 01875F132D19FD1EF62CF73D3A552F495941
Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/fEdHn40NL_Ph7Yf8EHls6eSZJho.roa
Signing time: Sat 08 Apr 2023 04:15:04 +0000
ROA not before: Sat 08 Apr 2023 04:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205826
IP address blocks: 185.160.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5f:13:2d:19:fd:1e:f6:2c:f7:3d:3a:55:2f:49:59:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Validity
Not Before: Apr 8 04:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c47479f8d0d2ff3e1ed87fc10796ce9e499261a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a2:e8:64:e9:10:d1:9c:bd:b3:5d:c4:df:4f:
ae:c3:9b:1e:c1:dc:77:d9:bd:80:94:56:aa:93:41:
8e:d0:71:a9:47:41:ef:c0:44:f9:2d:aa:b3:11:3a:
1c:5c:e0:aa:45:86:82:b6:76:aa:0e:a9:4b:41:36:
c0:11:ad:17:10:39:18:fe:1d:7b:3d:00:d8:ab:ba:
4a:e6:f1:fa:1a:fa:e0:e0:1a:6b:3b:ec:6b:3b:58:
65:b6:e0:29:eb:d3:bc:1b:3d:1a:05:93:e9:36:b7:
bc:eb:3d:64:5f:81:9f:a6:6a:99:d2:2c:b2:74:12:
5d:56:77:13:dd:fa:d8:34:07:f0:c9:1c:f8:7d:d8:
79:d6:9f:d1:e3:e3:36:04:41:61:6c:8b:99:da:ae:
9a:1f:74:7f:62:ac:37:86:c0:10:de:dc:57:ff:cf:
bd:30:ea:fc:22:40:23:f7:2b:18:85:44:66:7a:89:
a9:5f:19:7f:41:88:fd:ae:46:1c:b5:f6:22:d5:91:
02:8a:9e:0c:a0:ad:35:b2:af:58:59:2e:81:8b:88:
1f:b3:9e:9c:39:d6:5a:4b:68:25:47:de:fd:2f:9f:
11:e4:19:d0:9d:2b:ff:36:cc:84:7a:f0:7b:39:28:
c9:8e:77:62:07:fa:a7:61:8e:51:a9:ff:ae:63:e9:
1a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:47:47:9F:8D:0D:2F:F3:E1:ED:87:FC:10:79:6C:E9:E4:99:26:1A
X509v3 Authority Key Identifier:
keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/fEdHn40NL_Ph7Yf8EHls6eSZJho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.206.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e7:75:16:32:41:0a:dd:4d:8f:d4:1c:45:a6:e9:f4:bc:bd:
77:fd:50:6d:31:9b:98:8f:2e:58:33:a3:19:28:21:99:3f:3d:
b1:76:58:66:4e:52:4a:85:00:34:05:3c:9c:63:34:19:8d:ce:
60:49:54:39:38:65:c7:c5:21:f8:ef:c6:35:50:ca:28:4d:61:
21:3b:09:5f:48:23:ce:ec:82:78:88:1b:72:c2:f5:8a:44:79:
cd:80:70:d3:e4:0a:e3:af:d4:24:57:8b:c9:f2:16:27:fe:04:
6e:16:73:8b:54:96:a6:1a:db:2f:68:3f:b2:6a:75:21:0f:bb:
a0:91:bd:83:75:55:38:ef:11:30:b1:36:f5:bc:b4:c4:ee:57:
1a:32:0d:f5:34:58:b9:e0:88:07:25:a3:45:e2:17:ff:54:df:
e2:33:8d:2a:cc:76:b5:d5:01:f9:8e:2a:cf:bf:d7:cf:4e:76:
1b:65:a3:12:ae:b3:48:b9:94:e5:ae:3a:b1:86:d9:27:2f:b5:
c4:98:8a:d6:ee:ab:2e:68:94:b2:aa:d9:62:f2:2b:79:44:7e:
9c:71:27:a3:07:0d:18:75:e2:49:0c:96:fb:d4:17:6f:9d:e4:
f7:87:27:03:70:2d:f6:85:7a:35:a8:1e:cd:31:3d:8c:81:98:
36:bb:31:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:40 2024 by rpki-client on console-fra.rpki-client.org