Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/7QCM1ymSvbSEJX067A9Ek-8cR8U.roa
File: 7QCM1ymSvbSEJX067A9Ek-8cR8U.roa (raw, json)
Hash identifier: 0HkaN/UDI/VWzOCEkge6pb1ndmsQtXa0ZsatebD7KLg=
Subject key identifier: ED:00:8C:D7:29:92:BD:B4:84:25:7D:3A:EC:0F:44:93:EF:1C:47:C5
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0185A7969F11B848A7EE757A1FF3A8FEA915
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/7QCM1ymSvbSEJX067A9Ek-8cR8U.roa
Signing time: Thu 12 Jan 2023 20:05:44 +0000
ROA not before: Thu 12 Jan 2023 20:05:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48314
IP address blocks: 185.93.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a7:96:9f:11:b8:48:a7:ee:75:7a:1f:f3:a8:fe:a9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 12 20:05:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed008cd72992bdb484257d3aec0f4493ef1c47c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:39:a4:6a:28:bc:71:f0:61:56:63:42:b3:f8:
ae:ed:23:1c:76:2e:04:8b:ab:30:ea:1e:2e:4f:9f:
89:03:9e:2b:7a:1e:f8:6d:9d:08:72:ac:e1:76:fd:
9d:6f:dc:c3:77:3f:6f:8a:7b:69:57:ae:e1:4e:07:
69:f4:f2:69:3f:31:76:af:49:e9:9a:5d:ec:a8:76:
b8:05:32:a4:c5:09:2b:8e:45:5c:0d:0f:08:c3:09:
9f:9c:43:4e:08:a9:ef:18:54:40:92:64:89:6f:15:
f2:e6:72:9a:90:a8:2a:73:e3:dd:fd:60:b9:94:da:
f6:77:45:13:7e:03:42:4b:ed:18:6e:12:9b:6c:cd:
df:9b:d8:0c:48:6f:4d:aa:ba:46:9b:c1:14:9d:63:
3d:fb:08:46:e6:84:e7:37:82:b2:47:b9:84:3b:ae:
44:63:b8:d7:0b:1f:b7:cc:22:63:37:1d:42:85:a4:
08:53:28:31:94:3e:7a:75:74:fb:9c:a9:cf:3b:6f:
83:28:b9:a8:8c:22:a1:65:35:14:e2:cc:7e:2a:cb:
75:f0:f5:c1:0e:10:a9:d4:f7:fe:c8:36:d3:c6:4e:
d1:62:8d:89:b4:25:e3:6a:ed:e1:a5:aa:7d:cd:cb:
93:98:93:bf:d7:c2:69:5b:b5:9e:b3:bf:a9:33:0d:
54:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:00:8C:D7:29:92:BD:B4:84:25:7D:3A:EC:0F:44:93:EF:1C:47:C5
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/7QCM1ymSvbSEJX067A9Ek-8cR8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.220.0/24
Signature Algorithm: sha256WithRSAEncryption
39:91:41:03:93:5e:58:a0:0f:c8:dc:3c:2b:52:da:6a:1d:95:
d7:27:6d:31:fc:1a:88:4d:a2:62:49:e4:01:2d:14:51:02:44:
8e:dd:76:c6:24:0a:2c:87:a7:5c:ef:78:e2:c6:8d:af:6c:b0:
20:19:b6:f1:5e:17:76:a9:54:09:12:d7:ae:13:1b:b2:cc:98:
25:3c:a9:7d:6c:7a:e9:3e:d4:bb:61:70:41:73:73:7c:b2:b0:
a4:55:05:dd:df:63:d5:ad:ef:13:d4:b1:d6:61:f7:33:e5:41:
5d:18:90:d1:00:b3:03:43:2d:94:5c:01:9a:1f:2c:d5:22:13:
66:f4:b6:95:46:f3:ae:77:10:1d:74:1c:d5:f4:f1:ef:fc:46:
5a:f6:9b:8a:61:ad:8d:83:62:4c:2b:60:cb:9a:32:7c:48:27:
38:20:37:62:85:4e:0a:b8:82:4a:c7:c1:eb:02:48:06:c8:0f:
22:e6:a3:ab:8d:f9:17:32:f4:29:18:aa:ae:a9:8e:98:db:77:
76:91:1f:2a:44:9a:12:f2:48:2a:e6:db:21:9c:c7:a3:16:31:
62:0a:60:ca:4a:dd:99:87:5a:3d:1a:4c:6c:81:22:5e:a6:81:
d0:c0:92:73:15:83:4a:e4:43:8a:af:61:31:51:29:89:22:5d:
f1:a0:bb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:16 2024 by rpki-client on console-ams.rpki-client.org