Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/hf9RnP5edzjZP0phwA6tYyQjlNA.roa
File: hf9RnP5edzjZP0phwA6tYyQjlNA.roa (raw, json)
Hash identifier: fnrFh+Ii3ia2/XeDAFQN6jXs4Cdwhr8Nsvo/sJLmX/U=
Subject key identifier: 85:FF:51:9C:FE:5E:77:38:D9:3F:4A:61:C0:0E:AD:63:24:23:94:D0
Certificate issuer: /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Certificate serial: 0185724C71C640DF1459E7C3F653377A7AEC
Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/hf9RnP5edzjZP0phwA6tYyQjlNA.roa
Signing time: Mon 02 Jan 2023 11:44:50 +0000
ROA not before: Mon 02 Jan 2023 11:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61177
IP address blocks: 185.16.97.0/24 maxlen: 24
185.16.98.0/24 maxlen: 24
185.16.96.0/24 maxlen: 24
185.16.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:71:c6:40:df:14:59:e7:c3:f6:53:37:7a:7a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Validity
Not Before: Jan 2 11:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85ff519cfe5e7738d93f4a61c00ead63242394d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0c:c3:e4:91:1a:b7:12:56:7f:00:6f:88:15:
2d:46:bc:17:10:3e:a4:c3:97:40:88:fb:7b:3d:ab:
ee:98:a1:1b:3e:c4:2c:df:a9:f1:28:a3:f6:9b:bd:
6c:39:92:5f:c7:40:fc:c9:8b:a4:79:f3:c2:1f:cb:
36:32:15:4f:bf:1e:1b:c1:d0:58:60:69:f0:5a:3d:
e7:06:b6:8d:67:d9:df:65:c0:a9:0e:27:c3:cf:3e:
b6:b2:61:88:85:2a:1f:06:f4:9f:16:f7:33:ad:7f:
30:96:21:9e:ea:2b:5b:61:80:e4:bc:7f:91:96:15:
6f:d4:a8:5e:90:2e:e3:0f:a3:0c:a4:42:c3:22:03:
c2:b8:34:37:1a:90:85:a8:79:30:3a:13:36:a9:76:
a2:df:cc:1d:87:0e:41:e5:77:3e:4b:07:25:d1:6b:
dc:e4:5a:10:84:86:43:6b:3b:a1:82:9b:46:69:dc:
9b:90:34:6e:be:61:c8:3c:2c:80:2a:43:73:61:55:
9c:a8:5b:5d:f8:be:55:87:af:63:1b:e8:d8:a0:3b:
2b:6d:74:1a:59:1d:35:f1:58:d4:db:40:c7:a4:ce:
48:88:05:00:b3:76:97:c8:27:32:63:5a:64:76:88:
05:f7:ff:fa:16:e2:b5:6e:6a:fa:62:95:96:ea:5e:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FF:51:9C:FE:5E:77:38:D9:3F:4A:61:C0:0E:AD:63:24:23:94:D0
X509v3 Authority Key Identifier:
keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/hf9RnP5edzjZP0phwA6tYyQjlNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.96.0/22
Signature Algorithm: sha256WithRSAEncryption
54:e7:aa:33:c7:43:59:b4:c3:73:9d:40:38:99:5d:4b:17:ed:
c2:41:35:87:69:80:8a:58:96:f5:9e:4b:70:eb:e2:ef:99:af:
5b:f7:25:de:bb:d4:57:cc:db:f4:44:aa:36:b2:e4:9e:84:d1:
e7:ea:8a:11:19:bf:52:25:c9:1a:02:7a:99:98:a8:d2:81:a9:
82:a6:d9:74:74:36:1a:9c:06:29:ed:e5:96:2f:b2:be:8f:3d:
5b:3b:f3:0f:9d:64:4f:21:f6:a4:9b:8d:e3:20:68:40:34:a4:
06:90:5c:79:63:2f:80:73:57:70:23:9b:14:6a:df:22:43:1d:
09:cb:6c:ee:f0:86:b4:52:6b:cf:bc:5d:e5:c2:4b:0f:55:d3:
cf:7d:c0:e2:d6:10:90:22:fe:62:35:df:72:7e:ea:e7:87:0b:
45:06:67:12:41:fc:2d:29:35:a3:07:08:8c:2a:d9:0e:54:31:
48:56:7c:ae:30:da:fb:75:4d:ad:63:06:01:ff:b9:bb:19:1a:
6e:a9:0f:87:69:8d:c8:19:6e:0a:31:0c:fa:ee:8d:55:c1:11:
c1:97:bd:ce:8e:86:dc:aa:3f:ae:b3:a7:86:66:9a:a2:6a:71:
3b:2b:7c:db:fb:43:7f:d1:f5:38:99:99:1a:1f:f5:6e:2b:6c:
78:1d:0c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:38 2024 by rpki-client on console-fra.rpki-client.org