Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/jFKF5LwBzsRqxoihS5wWYgY794o.roa
File: jFKF5LwBzsRqxoihS5wWYgY794o.roa (raw, json)
Hash identifier: ymUG605o7XFsPc5quZJkuf2+YQ2QfUMuBtMZf8wFfUA=
Subject key identifier: 8C:52:85:E4:BC:01:CE:C4:6A:C6:88:A1:4B:9C:16:62:06:3B:F7:8A
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 018570CBFE1E9805F19152CFDFB8624A34C8
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/jFKF5LwBzsRqxoihS5wWYgY794o.roa
Signing time: Mon 02 Jan 2023 04:44:55 +0000
ROA not before: Mon 02 Jan 2023 04:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15704
IP address blocks: 185.195.179.0/24 maxlen: 24
185.195.178.0/24 maxlen: 24
185.195.177.0/24 maxlen: 24
185.195.176.0/24 maxlen: 24
185.195.176.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Apr 2023 16:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:fe:1e:98:05:f1:91:52:cf:df:b8:62:4a:34:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Jan 2 04:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c5285e4bc01cec46ac688a14b9c1662063bf78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e9:37:15:92:6a:24:3a:ab:bc:74:b7:30:eb:
73:84:f5:3f:b0:a5:67:db:68:d6:fe:98:19:de:d8:
dd:dc:5f:ae:c1:63:a3:0c:52:f0:59:20:c0:3f:e2:
a0:bc:6a:71:a0:b0:ef:13:5f:a0:a1:25:cf:45:b2:
f3:49:b2:92:bb:f9:c4:6d:67:32:2f:23:45:06:6f:
0b:48:c1:bc:e9:2d:3c:48:bc:96:f9:5d:2a:df:18:
40:d8:62:18:46:41:2b:f8:b4:e8:65:61:90:6d:87:
2a:bc:38:8b:6b:53:84:47:4a:65:31:50:2b:39:be:
68:1b:2d:1c:df:a1:60:a8:b9:1a:f3:ef:eb:02:7e:
4e:90:f3:06:cc:83:f7:96:7b:eb:41:ed:39:4d:14:
4b:db:0a:04:b6:41:96:3e:1b:a5:d2:ae:e0:f1:84:
e0:b5:38:0c:d0:d6:99:1b:15:92:2b:65:7c:d0:1e:
f8:cd:72:5d:69:d1:35:34:43:5d:a0:10:cc:0c:a8:
2b:0c:c9:8a:ba:84:41:59:34:6a:f2:6f:a7:44:90:
cc:35:ca:3c:17:87:ce:5f:58:7b:3f:32:11:69:28:
96:8f:da:01:8a:22:ea:ba:dc:49:fa:e8:51:9f:ea:
7e:dc:3a:fb:ea:3f:8d:a0:dc:22:e7:33:8a:40:43:
8a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:52:85:E4:BC:01:CE:C4:6A:C6:88:A1:4B:9C:16:62:06:3B:F7:8A
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/jFKF5LwBzsRqxoihS5wWYgY794o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.176.0/22
Signature Algorithm: sha256WithRSAEncryption
96:49:ed:7f:0b:e9:a3:0a:4e:ac:4b:50:d9:ce:68:63:75:a8:
0b:2b:2c:95:72:ee:5d:34:b8:31:93:ea:7d:41:50:75:e2:e5:
a9:e1:eb:b2:6d:bb:c0:73:45:33:b3:9c:c3:5c:fd:e3:5f:d8:
97:35:35:78:7c:6a:ec:02:44:c6:21:80:a8:68:95:eb:fa:f4:
f9:33:c7:d6:80:c5:24:f1:2e:19:ef:92:d3:8d:6f:04:64:90:
0c:aa:77:37:71:83:96:e0:35:a9:a4:cd:b4:9c:79:47:60:9e:
b4:ff:2d:e7:bf:24:6c:8f:06:d3:2b:b0:d0:89:16:f5:d1:6e:
93:ca:49:f4:91:64:8f:f6:13:1b:49:e4:eb:26:0a:6e:23:16:
22:11:e2:22:f3:97:50:06:a9:8a:bc:19:a6:8e:7c:9d:2c:a9:
7c:20:5d:43:21:80:68:6c:36:69:0b:d1:6e:72:d0:cb:08:03:
52:f4:14:3d:9b:02:d0:03:6e:b2:e5:2c:2d:b6:9b:03:22:5c:
ee:60:d4:4b:b2:18:ff:d6:db:85:3e:10:76:9f:43:e4:fb:12:
51:92:6b:b3:04:e0:80:48:f0:64:4f:7c:70:f1:0c:b5:97:24:
f7:da:1d:e2:dd:1d:ba:b0:bc:72:fc:97:b9:99:c5:5c:1d:b9:
bd:2a:a2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:02 2024 by rpki-client on console-fra.rpki-client.org