Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7S7cuG5Liwyh7fGpMqQ5Tuj_KfA.roa
File: 7S7cuG5Liwyh7fGpMqQ5Tuj_KfA.roa (raw, json)
Hash identifier: iHmSiLyAVgAIEa21eQG8qxzjS15Hh6SPH99zwMiKEDc=
Subject key identifier: ED:2E:DC:B8:6E:4B:8B:0C:A1:ED:F1:A9:32:A4:39:4E:E8:FF:29:F0
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F14F3562EC98CCF2227D4F8C0CCC0BE
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7S7cuG5Liwyh7fGpMqQ5Tuj_KfA.roa
Signing time: Sun 01 Jan 2023 20:45:21 +0000
ROA not before: Sun 01 Jan 2023 20:45:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 85.121.148.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Feb 2023 07:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:f3:56:2e:c9:8c:cf:22:27:d4:f8:c0:cc:c0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed2edcb86e4b8b0ca1edf1a932a4394ee8ff29f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c9:5c:57:52:a5:87:79:2e:13:b2:90:a1:70:
78:21:01:41:83:1d:ce:9e:be:9d:49:87:fe:15:e2:
4e:31:73:46:9d:9d:1a:39:4d:b3:df:ab:92:e6:ce:
a3:54:89:5b:0b:25:96:5c:9d:2c:ff:c4:a8:5a:6b:
e9:a0:15:72:e1:c7:4b:97:7c:69:c5:68:e7:84:c5:
56:c2:de:29:31:c0:71:c8:ea:d7:ea:c9:85:87:33:
2a:30:a7:e4:a8:5c:d7:d2:1c:ee:1b:c1:a8:87:95:
0e:2e:d7:bf:54:bd:e8:7c:76:34:ba:ba:18:d0:31:
3a:4e:ab:fc:d4:c3:ba:7b:c2:04:fd:5d:6d:f5:86:
f7:39:bc:31:d2:bb:da:43:34:89:c1:99:ad:55:59:
de:05:d4:8e:2f:b4:f2:8b:94:b7:2f:3a:ef:07:fd:
4b:af:ea:64:78:a5:04:5a:77:20:b7:2a:97:00:cb:
f5:bb:a9:d0:49:ee:c9:c4:29:15:ac:59:0f:ab:b1:
50:a8:95:05:f2:e9:89:89:f5:5b:6b:c4:ff:78:c1:
ac:e2:3e:8d:7d:54:e0:b7:8a:53:15:d0:4e:09:58:
47:56:7c:51:74:2b:6b:60:03:4b:ca:53:ac:d3:87:
1f:78:e5:46:da:4f:97:6a:08:be:78:62:67:bc:1b:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2E:DC:B8:6E:4B:8B:0C:A1:ED:F1:A9:32:A4:39:4E:E8:FF:29:F0
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7S7cuG5Liwyh7fGpMqQ5Tuj_KfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.121.148.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:34:e0:8e:dc:29:f8:9e:ef:40:7f:af:b3:93:a4:c2:59:c3:
8d:c8:8a:5a:e0:22:4f:26:a7:74:2c:39:0d:55:55:83:58:30:
00:51:89:02:78:de:27:62:ca:ec:bc:c8:c7:16:49:38:5d:f9:
bf:9d:fe:49:a3:d5:48:c2:ce:0f:8f:74:5a:4c:04:5d:9a:9d:
ac:8c:83:0c:c4:f2:34:5c:67:8a:7c:b6:cb:67:45:91:d6:fa:
7f:4e:47:ad:ae:08:7f:3f:12:33:53:71:6d:de:23:b7:76:95:
fe:2a:17:bb:43:9d:cc:cc:46:fc:a1:b3:76:bc:d1:27:67:29:
a6:83:de:c0:c7:d4:42:71:d6:86:03:0f:43:73:12:cb:45:af:
75:1b:96:fb:10:de:6e:4c:c6:84:23:da:e5:aa:9f:7a:87:84:
51:c4:48:18:ca:f5:c5:ca:ab:df:84:99:7b:1b:b3:4c:3f:49:
bc:2c:83:d6:86:da:63:77:b9:7c:fd:b1:e3:c2:90:96:75:04:
f5:43:74:3f:87:7f:15:f8:03:32:09:92:88:df:0d:b8:01:ea:
d6:43:c8:0a:93:09:4c:fe:a5:5b:08:0c:de:7d:8c:72:9a:fa:
23:b5:92:45:60:b8:9a:5b:ae:7e:11:1a:11:94:68:b6:22:78:
e5:f5:a7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org