Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/fChsu7FdMQaH2N5pVKRbDroBzfs.roa
File: fChsu7FdMQaH2N5pVKRbDroBzfs.roa (raw, json)
Hash identifier: JEDKeesx/jMJDrVIM9okR3pDEjSdfQDJG0Wz37S1AEM=
Subject key identifier: 7C:28:6C:BB:B1:5D:31:06:87:D8:DE:69:54:A4:5B:0E:BA:01:CD:FB
Certificate issuer: /CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
Certificate serial: 018570D50BBEE418D93F77F06CB2DA02098F
Authority key identifier: 13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/fChsu7FdMQaH2N5pVKRbDroBzfs.roa
Signing time: Mon 02 Jan 2023 04:54:48 +0000
ROA not before: Mon 02 Jan 2023 04:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211756
IP address blocks: 185.242.178.0/24 maxlen: 24
2a10:98c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:0b:be:e4:18:d9:3f:77:f0:6c:b2:da:02:09:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
Validity
Not Before: Jan 2 04:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c286cbbb15d310687d8de6954a45b0eba01cdfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:bf:70:fd:0f:5f:74:1c:41:3b:9b:13:49:
4a:39:61:6c:f2:95:57:a1:7e:41:60:e4:6c:12:91:
5d:92:88:4d:90:fb:c2:8d:be:67:77:99:2e:5e:da:
3b:64:57:6b:aa:6b:a1:c8:44:d1:98:25:09:4a:9f:
31:8c:a6:5d:d4:08:d8:9e:ea:45:69:5a:50:c2:f1:
93:b1:bb:7b:b8:59:9e:a3:45:2c:48:52:ac:47:e5:
08:eb:43:53:30:8b:9b:b5:44:56:d3:d5:f7:06:c5:
8e:d5:43:b3:51:99:41:43:a0:93:c6:ba:0d:b5:e5:
c1:e8:da:c4:d3:c1:c6:87:0d:a1:9a:8e:a0:55:56:
2a:9f:25:07:1e:9c:7d:db:16:80:cc:b8:43:64:48:
a0:95:4b:e1:db:64:11:80:64:43:bf:df:5b:32:f4:
dd:8e:c2:3c:16:dc:ca:15:08:2f:31:48:14:7c:03:
94:09:f4:44:cd:fc:f9:d0:ca:39:36:9c:4a:13:b0:
19:5f:bc:43:b4:27:6a:04:49:79:48:3c:66:f3:93:
ce:fc:30:e4:ea:7b:65:7d:d0:45:39:3d:2a:ea:b3:
85:96:e8:be:82:a8:71:5a:47:fa:03:c2:a0:d1:6d:
f2:10:ca:cd:c5:96:f4:4e:5e:96:65:8b:9b:a2:f4:
0b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:28:6C:BB:B1:5D:31:06:87:D8:DE:69:54:A4:5B:0E:BA:01:CD:FB
X509v3 Authority Key Identifier:
keyid:13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/fChsu7FdMQaH2N5pVKRbDroBzfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.178.0/24
IPv6:
2a10:98c0::/29
Signature Algorithm: sha256WithRSAEncryption
0e:e4:ce:c6:ca:78:ae:86:2e:8e:d2:a2:6c:60:9f:f3:b9:29:
71:25:cb:c7:2d:2e:28:6e:4b:4d:11:52:4b:8e:35:60:af:0a:
47:53:a1:7d:11:97:ee:26:3f:a5:cd:45:50:56:db:83:f7:2a:
65:b8:3b:a1:93:0d:00:fd:e2:cb:1e:0f:d0:4e:ba:f9:94:48:
63:d6:57:68:13:f6:62:3d:e1:66:2d:b7:b3:4b:ee:c8:92:9f:
c8:b9:29:35:b0:1a:50:a4:d5:e4:0d:ca:96:aa:7d:39:0d:78:
01:65:ec:d6:57:51:78:52:f3:c8:c1:cf:25:63:42:74:a5:25:
6b:c0:85:c6:88:62:a6:48:e7:dc:c1:d5:db:80:07:a4:79:fa:
83:2c:9c:96:6e:3c:34:f3:db:7a:48:0f:f2:54:48:6b:60:81:
57:ff:25:34:af:0b:5b:9e:88:bc:62:ba:c4:41:3d:54:eb:eb:
d1:f7:b3:60:f0:0e:f0:16:1b:7d:9c:18:d4:e4:26:0d:d3:31:
c5:9e:85:8a:b7:8e:38:39:21:aa:e8:f2:ff:b4:30:71:23:eb:
ac:53:bf:a0:57:e7:73:26:10:b6:7f:42:bf:fd:d8:6e:89:90:
98:1c:97:2a:a6:9c:b0:97:22:46:c9:88:60:7d:5f:84:33:c7:
6c:cf:c4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:14 2024 by rpki-client on console-fra.rpki-client.org