Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/7vDLRqRLvfwmJCEEzYe999RSvP4.roa
File: 7vDLRqRLvfwmJCEEzYe999RSvP4.roa (raw, json)
Hash identifier: eLQUhVDWYWHpX87CoXHi/UaRow+9tvZBDLbNlwX1HBM=
Subject key identifier: EE:F0:CB:46:A4:4B:BD:FC:26:24:21:04:CD:87:BD:F7:D4:52:BC:FE
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018F692360E9094573F5A074728275BDC1BA
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/7vDLRqRLvfwmJCEEzYe999RSvP4.roa
Signing time: Sat 11 May 2024 19:31:17 +0000
ROA not before: Sat 11 May 2024 19:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.115.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 16:58:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:69:23:60:e9:09:45:73:f5:a0:74:72:82:75:bd:c1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: May 11 19:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eef0cb46a44bbdfc26242104cd87bdf7d452bcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:20:16:48:3a:ef:9b:15:f5:85:dd:77:91:
ee:9a:a0:57:f0:99:34:f0:c4:1d:06:e7:55:bb:ec:
e7:4a:29:35:d6:8b:df:b0:3d:c0:7d:e3:41:26:8e:
a5:2e:94:de:75:31:23:bb:d7:ab:ec:ea:45:62:c0:
08:2a:a6:d3:eb:0c:bf:4c:ee:a9:85:71:ca:1d:7f:
b4:6b:eb:3a:7a:f2:2c:4f:c4:4a:52:c0:17:0e:ab:
53:05:2b:19:c9:32:aa:c3:c6:98:d0:61:f9:5a:36:
67:e1:4a:aa:ad:da:17:bf:8f:c0:29:7d:f6:43:8d:
6c:52:6d:56:c7:28:81:87:53:7d:c7:d2:93:67:64:
3c:b7:1f:ef:0d:1d:7e:17:c3:00:01:20:d4:56:c2:
65:15:cd:b9:c5:2a:b6:58:ef:a0:33:69:4a:3b:f6:
18:0a:dd:4d:e1:29:e2:c2:ba:06:64:6c:dc:1f:e3:
e9:c1:95:a8:dd:1b:7a:50:e2:d3:53:6e:f2:d2:39:
88:f8:b2:0f:54:3b:1f:07:7d:b4:cc:fe:43:c0:08:
f7:75:0f:3b:35:ab:a6:78:5c:94:36:3d:0a:5c:b4:
69:8a:62:6d:72:b3:44:aa:e5:bd:f0:cc:8a:0a:d2:
e8:d7:0a:f2:f6:20:5c:49:30:a9:e9:b0:b8:b2:d0:
4c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F0:CB:46:A4:4B:BD:FC:26:24:21:04:CD:87:BD:F7:D4:52:BC:FE
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/7vDLRqRLvfwmJCEEzYe999RSvP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.207.0/24
Signature Algorithm: sha256WithRSAEncryption
33:02:23:40:fb:91:d1:59:0f:61:1d:83:0f:ad:75:e9:24:7d:
69:fc:2f:d9:73:c5:d8:ea:3f:65:bb:54:5f:46:55:8a:b0:09:
26:dc:e8:59:76:81:0a:17:f5:ac:18:e9:dd:57:99:ca:e5:04:
98:05:cf:c4:7e:78:5b:23:e1:59:a1:c4:10:96:28:9b:2f:3d:
8b:e9:58:1d:69:01:a5:38:d9:ac:a7:f8:63:80:be:63:78:c6:
04:43:ef:88:f0:96:af:28:32:b3:66:7a:a7:b1:6f:49:4a:ac:
b6:cc:1d:6d:76:03:94:b4:67:84:99:a4:6b:5f:f9:2f:03:16:
82:82:d5:e9:90:54:1a:e9:d0:57:79:87:5a:f5:c5:97:fa:14:
14:f6:03:bd:7a:4e:54:62:a5:05:6d:bc:9c:d4:93:a1:55:de:
9a:c1:82:2e:ec:f4:48:f8:1a:7d:c5:9f:51:d1:ce:04:52:52:
1a:46:77:7a:54:1a:07:88:9f:ec:8f:87:31:7c:db:07:51:4d:
6a:76:dd:13:f6:58:8b:91:98:86:70:24:2f:7f:ae:c6:79:e0:
e9:d1:eb:0c:6f:90:cc:e7:cf:7a:b5:24:ab:a6:4a:ba:c1:4c:
17:bf:03:0f:7d:c2:17:ae:62:5a:56:4e:45:3a:2c:56:fe:db:
1e:e3:b1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:46 2024 by rpki-client on console-fra.rpki-client.org