Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/1-E4ISqbxLzYj_9JsV-yS3MgHeQ4.roa
File: 1-E4ISqbxLzYj_9JsV-yS3MgHeQ4.roa (raw, json)
Hash identifier: /5seq+aPFMpye/m/jJrtix9220DYbodXuMTQKBo03Ek=
Subject key identifier: F8:4E:08:4A:A6:F1:2F:36:23:FF:D2:6C:57:EC:92:DC:C8:07:79:0E
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0190A670E305A7E5946826C9775035041274
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/1-E4ISqbxLzYj_9JsV-yS3MgHeQ4.roa
Signing time: Fri 12 Jul 2024 10:15:34 +0000
ROA not before: Fri 12 Jul 2024 10:15:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.131.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 09:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a6:70:e3:05:a7:e5:94:68:26:c9:77:50:35:04:12:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jul 12 10:15:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f84e084aa6f12f3623ffd26c57ec92dcc807790e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c7:ce:91:79:06:1b:42:27:17:3f:88:97:35:
c7:81:53:04:8c:69:f1:1e:b1:65:a7:f1:13:88:85:
e4:95:9f:66:2d:b9:3f:52:b1:e1:a5:36:1c:2d:0d:
86:47:51:8e:04:86:ac:a0:9b:80:de:88:90:24:57:
65:2b:9f:73:59:1b:95:8c:14:ed:bf:51:e8:b5:14:
25:65:1e:0b:1b:01:fe:05:54:61:14:a6:77:43:bb:
55:fa:0f:e1:64:cf:8d:3f:60:5f:18:48:56:da:50:
e8:cc:5c:26:64:1d:ae:8f:8a:94:34:5b:44:bd:bb:
ee:20:33:0b:b1:e4:ec:d1:22:49:65:ce:47:7b:66:
bf:a2:ca:41:8e:d6:b0:77:47:6e:f3:75:3f:08:a5:
1a:00:cb:58:df:b6:5d:9f:9b:0e:d3:2d:a1:66:09:
7f:4e:e6:d7:94:f4:aa:d9:f5:c1:a0:59:86:ef:ba:
86:66:85:53:2e:d2:01:3e:71:97:ca:45:f9:ae:b6:
f6:43:b0:b9:95:79:54:72:c7:39:0d:f5:a8:d5:dc:
cc:18:7c:91:5d:82:8d:53:3d:d5:77:5c:7e:22:71:
76:94:df:d5:64:58:1b:aa:88:e4:0f:d5:19:21:7d:
f1:73:ad:09:cd:2b:74:eb:c1:00:1e:13:94:75:5f:
fa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4E:08:4A:A6:F1:2F:36:23:FF:D2:6C:57:EC:92:DC:C8:07:79:0E
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/1-E4ISqbxLzYj_9JsV-yS3MgHeQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.207.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:17:20:d9:31:34:ea:d8:03:e2:3b:e8:72:b7:ce:70:2d:9c:
95:43:b5:ea:0b:8a:5e:64:28:01:4c:d1:7f:40:53:ec:24:11:
41:ff:1f:66:89:43:87:06:14:ae:53:42:9d:b0:e2:53:df:a1:
13:15:ce:88:83:75:91:47:e1:66:d0:75:1e:b0:21:2c:a7:3b:
7c:7d:63:74:95:c2:dc:b4:1e:d0:e4:49:bb:50:f9:e4:7e:e9:
aa:3f:32:5b:62:3d:07:b2:3a:48:8c:fc:9d:17:bf:be:e8:8e:
f7:9d:80:96:f1:e0:59:3f:57:9d:c7:37:d7:55:42:74:76:05:
a8:80:50:34:24:5b:95:0a:e5:fe:ac:a3:52:e6:aa:76:f3:be:
73:b9:5b:9d:40:85:38:29:e5:65:5e:d1:e2:b5:1a:0d:a4:29:
68:43:55:25:b2:cc:70:e0:3b:62:d9:af:1a:0a:da:11:f0:b2:
d8:4f:75:97:2e:b7:91:f2:b9:de:40:39:d7:6d:12:29:ae:0b:
49:c1:87:85:e8:9e:16:ce:29:1d:24:94:de:22:48:6e:a9:17:
bf:88:b1:1a:3a:8b:14:2b:c5:38:53:2f:17:d7:20:3b:b0:56:
d8:5d:7e:f7:0a:48:07:aa:4a:52:38:63:b6:25:be:ba:bd:15:
49:ab:45:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 12:24:41 2024 by rpki-client on console-fra.rpki-client.org