Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/P7yA9BZFhjEpJZkN04yZ76qxlIE.roa
File: P7yA9BZFhjEpJZkN04yZ76qxlIE.roa (raw, json)
Hash identifier: hzyKyoUWtT/SGeOuTt4FWzFzztTXMuP/We9caFOPkDI=
Subject key identifier: 3F:BC:80:F4:16:45:86:31:29:25:99:0D:D3:8C:99:EF:AA:B1:94:81
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 01887292051A4BA1F68616BE47C0B2EA5C6C
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/P7yA9BZFhjEpJZkN04yZ76qxlIE.roa
Signing time: Wed 31 May 2023 16:09:12 +0000
ROA not before: Wed 31 May 2023 16:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202973
IP address blocks: 185.157.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Sep 2023 17:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:72:92:05:1a:4b:a1:f6:86:16:be:47:c0:b2:ea:5c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: May 31 16:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fbc80f4164586312925990dd38c99efaab19481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:02:37:2d:d2:22:c9:cd:23:f2:38:9f:36:
b7:fe:10:ce:bd:d3:74:c6:6c:8b:5d:6c:36:dc:5c:
68:b9:27:fa:59:93:fe:75:e8:da:fc:fd:69:46:e9:
6f:4b:8b:e9:7a:6f:2c:e5:cd:fc:b0:1e:18:a1:39:
4a:9d:e3:dd:19:d9:7f:3d:47:6e:fe:ae:c1:5b:27:
3a:85:42:c6:64:b2:1f:65:67:4a:32:7f:bc:66:eb:
6e:3d:0f:a0:88:22:c6:6e:8f:32:20:88:ea:63:d4:
54:58:a3:30:f1:b4:ae:79:be:5b:94:95:6e:db:cb:
e7:98:7d:85:73:7d:2f:89:da:b4:6d:9d:a7:d6:c9:
61:91:d2:c6:5f:71:d0:2d:8c:09:1d:f9:c3:48:87:
7b:7b:25:95:8c:51:0a:82:c4:50:c5:af:33:b2:1e:
07:c0:e9:2d:09:cf:5e:21:83:50:96:2e:6c:ef:55:
06:e1:b5:f2:1d:f5:b0:1d:67:d8:57:bf:0a:05:d9:
61:02:80:22:c6:5e:6f:86:31:3c:b8:4c:dc:0b:9b:
79:09:67:f6:8e:bd:a1:f7:6a:40:b5:47:9f:2a:7e:
06:56:29:1e:6c:ce:c0:90:4f:53:54:5a:0e:fd:b8:
c8:0f:94:6c:5a:3c:88:5b:db:1c:a4:da:2d:66:de:
d1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BC:80:F4:16:45:86:31:29:25:99:0D:D3:8C:99:EF:AA:B1:94:81
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/P7yA9BZFhjEpJZkN04yZ76qxlIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:64:28:75:b7:ea:d7:ef:07:54:96:ce:c1:8d:a4:53:81:9a:
f4:f3:ae:dd:a8:32:82:89:80:56:ef:a8:e2:7d:3a:af:53:d8:
9c:a0:c9:18:d2:44:fb:16:54:73:cf:e5:5e:f5:ee:e2:f5:99:
c9:b2:c0:11:99:f0:93:ef:df:a5:62:53:5e:cb:f5:7c:a1:1a:
eb:b0:04:12:7b:96:c7:c2:17:5a:2d:98:22:ef:a3:46:b2:39:
2e:3e:d1:e0:aa:0b:d9:a5:c3:5f:c6:4c:1f:66:e4:4e:35:8d:
d8:f6:9a:71:29:bd:83:48:48:7c:a7:5b:44:35:9a:97:0d:2b:
f7:8b:ec:65:78:58:aa:60:84:e5:b4:74:39:f6:17:87:97:34:
0c:d8:56:c6:b4:15:f3:90:a5:d9:b5:51:26:b5:f2:9f:df:04:
2e:3e:cb:e1:1f:aa:0a:21:08:18:83:e8:3a:a2:24:ab:c0:9e:
e2:13:15:da:6e:43:d1:f8:2f:fe:50:0a:e1:20:a6:28:37:4a:
84:f1:73:d8:38:65:d4:03:5a:03:6e:4e:64:a6:27:45:61:db:
0f:9a:8e:86:95:80:06:33:f3:44:8b:55:82:92:7c:27:46:c7:
ee:6c:7b:5d:ed:cf:55:51:95:75:19:e4:15:83:28:9e:44:c7:
65:5f:4c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:29 2024 by rpki-client on console-ams.rpki-client.org