Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/lOe7zHphSy1p9Sut6j5ttB3XErI.roa
File: lOe7zHphSy1p9Sut6j5ttB3XErI.roa (raw, json)
Hash identifier: XF4u0B9uAkkDEVw5ECf5nfFtlMXLhGOS+HA1w4moNwI=
Subject key identifier: 94:E7:BB:CC:7A:61:4B:2D:69:F5:2B:AD:EA:3E:6D:B4:1D:D7:12:B2
Certificate issuer: /CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Certificate serial: 01856C9CC81D0E4B3D5970590C5298F68B85
Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/lOe7zHphSy1p9Sut6j5ttB3XErI.roa
Signing time: Sun 01 Jan 2023 09:14:52 +0000
ROA not before: Sun 01 Jan 2023 09:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211145
IP address blocks: 185.244.177.0/24 maxlen: 24
185.244.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:c8:1d:0e:4b:3d:59:70:59:0c:52:98:f6:8b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Validity
Not Before: Jan 1 09:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94e7bbcc7a614b2d69f52badea3e6db41dd712b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:3a:03:58:cd:fa:13:7b:47:54:d6:bd:6d:
0d:f9:e7:8f:68:b2:c1:cb:44:72:ba:a5:db:27:e6:
14:9d:40:12:51:a3:19:12:c3:b7:2a:96:71:1a:d6:
50:30:12:e3:04:f9:7e:c2:3a:de:37:42:92:ca:3f:
e1:a5:a2:05:86:71:91:43:33:43:89:5f:77:99:f8:
84:1a:14:f8:81:37:9f:80:89:52:f7:5e:7b:34:5e:
c6:8e:9f:52:b2:d4:ec:f1:90:36:28:1b:88:bd:3d:
4e:46:55:77:dd:85:97:0d:fe:2b:8b:4e:15:c3:84:
9d:f0:f6:1f:7a:72:60:f6:9f:a7:a1:22:00:7b:88:
aa:8c:a2:30:36:46:18:a2:dc:0f:99:df:87:00:3c:
75:17:88:4f:6b:d4:7d:5c:48:1c:83:97:ed:f4:b3:
9e:8e:74:7d:73:93:bb:5c:81:be:d4:ba:8a:55:d2:
ae:4b:ab:ad:be:9d:43:49:3b:b6:11:f1:f5:2d:9b:
b1:3d:09:1f:5f:0d:79:b0:5e:03:31:35:c1:89:87:
f1:2a:f7:7a:2a:8e:9a:83:ef:0a:a8:ed:b9:99:a3:
a2:0d:91:6d:3f:e9:b0:9f:46:47:15:67:95:13:de:
04:4b:f5:27:17:76:f4:67:c4:82:81:f0:6d:0b:24:
f4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E7:BB:CC:7A:61:4B:2D:69:F5:2B:AD:EA:3E:6D:B4:1D:D7:12:B2
X509v3 Authority Key Identifier:
keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/lOe7zHphSy1p9Sut6j5ttB3XErI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.176.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:49:f8:2f:a9:a6:b0:ac:58:4a:ad:66:f2:ed:73:92:92:ec:
b6:69:01:2c:0e:05:67:fc:46:c7:5b:e6:bc:df:c4:4d:90:3a:
53:9d:17:19:e2:5e:58:86:22:e2:06:6a:30:8d:60:b2:aa:2e:
b1:46:19:66:34:22:92:31:ca:27:6e:ab:f4:d9:7a:c4:d4:61:
c1:4a:b7:3a:89:c4:17:c7:28:db:c6:b6:9b:48:a1:c8:19:b9:
72:f7:a2:47:19:d8:0c:a7:bf:e0:36:5c:c1:9b:59:98:d0:4d:
f4:a2:12:eb:e8:ad:ef:55:45:da:2d:e6:17:6e:de:eb:d8:d9:
9b:b8:31:0b:45:bd:e1:c3:4e:51:61:e6:ea:1f:33:16:4d:0a:
18:90:be:ea:b0:46:a3:d3:6e:4b:3d:37:cd:04:53:38:a1:6d:
53:23:ad:b2:44:0b:f6:ea:31:86:df:3e:96:29:76:12:f5:06:
f0:51:30:56:11:fc:b8:80:56:ab:12:e3:43:6f:4d:38:1b:f8:
e4:97:88:cc:c5:b5:71:32:82:48:62:dd:27:5f:e7:3c:da:6e:
5a:37:83:10:18:c7:67:98:86:7a:5f:75:8f:2b:67:a1:3a:18:
ee:42:c6:35:7b:cc:47:e6:66:e1:13:6f:82:cf:b5:07:1f:04:
3f:16:10:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:48 2024 by rpki-client on console-fra.rpki-client.org