Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/7Pkg-yRixEpk_LJnXm39_GtuMfc.roa
File: 7Pkg-yRixEpk_LJnXm39_GtuMfc.roa (raw, json)
Hash identifier: OphqibskabogHx5o+HUAN7BWEMcnFfFEIaDdcw9m6x8=
Subject key identifier: EC:F9:20:FB:24:62:C4:4A:64:FC:B2:67:5E:6D:FD:FC:6B:6E:31:F7
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 01879909B06540AB062CACA3ACF7B27ECD0F
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/7Pkg-yRixEpk_LJnXm39_GtuMfc.roa
Signing time: Wed 19 Apr 2023 10:22:41 +0000
ROA not before: Wed 19 Apr 2023 10:22:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35409
IP address blocks: 85.208.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 May 2023 20:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:99:09:b0:65:40:ab:06:2c:ac:a3:ac:f7:b2:7e:cd:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Apr 19 10:22:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecf920fb2462c44a64fcb2675e6dfdfc6b6e31f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8f:52:03:48:d5:2f:67:91:3d:4e:2c:b0:06:
43:71:20:46:38:78:5f:86:f8:5a:d1:27:22:c3:37:
8f:db:f0:41:7c:3d:42:93:c9:d0:0f:e4:6c:96:c6:
f1:96:2d:6a:bd:4a:92:9f:85:2c:34:d5:58:fc:30:
d3:55:75:28:d5:d2:c1:89:34:ff:44:7c:0c:71:9f:
51:53:7f:a0:bd:9e:7f:83:ca:34:e6:06:12:59:60:
90:fd:52:93:48:31:77:ab:09:1f:e2:29:a6:6d:32:
70:83:03:89:51:48:4f:19:80:af:28:00:ed:35:f5:
02:5d:e9:7a:71:37:0c:7c:2e:fa:1c:aa:a2:55:6e:
9d:50:3a:42:c0:0c:b7:2d:d0:32:f7:29:0b:ed:43:
7e:c4:29:ad:2c:70:6a:c6:3c:53:1b:5f:8c:3e:d8:
85:f8:67:70:3c:38:79:d1:aa:fa:91:74:f9:3a:23:
d0:ff:93:9e:6e:b4:08:c8:f8:74:3b:a6:4f:2b:33:
4e:81:69:d0:73:ef:39:2c:9d:ac:26:10:17:e8:20:
62:ea:fa:65:91:14:3d:88:3e:7d:cf:ee:b2:65:f6:
f8:f6:9e:88:50:3f:44:bd:9e:44:15:23:b7:1f:c7:
d7:c8:81:3d:83:39:db:14:ec:bd:99:80:ef:77:66:
58:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F9:20:FB:24:62:C4:4A:64:FC:B2:67:5E:6D:FD:FC:6B:6E:31:F7
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/7Pkg-yRixEpk_LJnXm39_GtuMfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.46.0/24
Signature Algorithm: sha256WithRSAEncryption
50:02:65:c8:9c:35:48:89:0a:1f:55:51:9d:95:fe:16:c0:e8:
a1:ba:68:9f:9a:c3:92:4d:a2:21:25:97:6d:25:d3:f3:7b:bb:
a9:66:ed:21:2d:85:a4:62:12:83:8e:ce:40:8c:50:93:7e:0f:
39:b0:a7:9a:f8:44:d4:58:fe:aa:fb:13:98:cd:33:f0:01:01:
ce:b3:8e:a9:0e:31:ae:b9:db:7a:46:fb:5e:6d:f5:49:da:a5:
e7:63:0b:66:e5:22:12:07:89:01:64:93:10:b7:d1:19:3b:ea:
a3:c9:bf:8e:5c:e1:62:a2:0d:b4:a3:bd:10:0f:7c:5f:e3:3c:
d0:b0:cc:65:d6:25:32:29:ce:a6:7c:df:04:d0:01:c7:32:da:
92:37:46:31:53:f8:7f:a8:cb:e0:36:3f:a6:ad:c6:1a:09:63:
78:1a:b5:70:90:20:88:6e:5a:6b:ae:b6:e2:bb:dd:b8:2b:b2:
da:38:96:2c:5b:80:87:58:7b:d7:58:ec:48:13:64:3b:bf:e9:
87:d1:62:6d:6e:c1:ba:b4:be:55:ac:c1:e1:77:fe:92:3b:92:
6c:c6:9f:69:36:47:55:8c:7e:92:19:07:eb:cb:93:e8:92:5e:
03:36:e8:d5:77:f8:4f:b7:02:95:dd:ca:e4:3e:56:a3:6b:56:
39:1a:79:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:24 2024 by rpki-client on console-fra.rpki-client.org