Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/AsKPEHHrUOsW8DVtFFB9zFdDeHE.roa
File: AsKPEHHrUOsW8DVtFFB9zFdDeHE.roa (raw, json)
Hash identifier: aYSNQ1lKecdjWWoDIXhb1NzzFFK1Uu8Nhc8BDFhmqQg=
Subject key identifier: 02:C2:8F:10:71:EB:50:EB:16:F0:35:6D:14:50:7D:CC:57:43:78:71
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 018587E52F333305634C71D50854E013B9CC
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/AsKPEHHrUOsW8DVtFFB9zFdDeHE.roa
Signing time: Fri 06 Jan 2023 16:23:42 +0000
ROA not before: Fri 06 Jan 2023 16:23:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206119
IP address blocks: 185.27.178.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Feb 2023 11:34:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:87:e5:2f:33:33:05:63:4c:71:d5:08:54:e0:13:b9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Jan 6 16:23:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02c28f1071eb50eb16f0356d14507dcc57437871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:01:07:fd:bf:cd:d5:77:b1:74:91:fc:c9:
39:19:b5:c3:1d:21:dd:4c:b8:0c:f3:26:f4:9a:dc:
bf:07:2b:c2:c9:f1:37:0f:66:10:90:46:07:4d:d1:
33:4e:e0:dc:6a:52:a4:84:44:65:2f:a8:2e:6d:b5:
74:27:4f:81:7a:c1:17:d3:8a:da:1b:ac:8e:ed:3e:
70:15:53:37:34:d5:61:ff:7b:7a:81:cd:f0:d2:61:
01:b0:7b:98:da:24:41:81:8b:ad:96:7e:71:00:ae:
96:0c:2b:f6:16:0f:cf:66:30:af:df:4c:fd:ae:d6:
b3:2c:28:b8:8f:f9:de:b8:51:da:d0:97:fe:c7:96:
70:e4:f8:ac:2f:b0:44:20:81:26:82:44:7c:43:81:
89:b8:1f:75:6c:a5:e6:b6:8f:3d:3a:d9:6b:d8:0e:
ff:c6:04:e3:15:75:03:69:0f:a2:85:89:03:41:5c:
ec:43:f5:67:ff:5f:65:0a:2b:78:6c:e8:c3:93:c0:
77:a9:f3:55:1d:0a:53:bf:f2:c2:2a:96:d0:80:d3:
73:02:16:0c:2a:82:da:5a:4c:ba:e9:5d:54:bd:c8:
e5:64:b3:68:b0:49:27:7f:ec:57:e2:5b:d6:b1:6a:
c3:92:bc:45:7a:b4:59:08:6e:8a:80:61:da:f1:90:
d5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C2:8F:10:71:EB:50:EB:16:F0:35:6D:14:50:7D:CC:57:43:78:71
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/AsKPEHHrUOsW8DVtFFB9zFdDeHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.178.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:02:5c:bc:66:bb:a7:cd:0c:9c:78:09:1f:a8:87:a6:db:c2:
fe:43:d8:8a:c6:60:91:b1:2f:bd:82:98:71:bb:8f:31:fd:12:
08:bc:5f:e2:84:e1:9b:ca:42:31:9c:e4:d2:22:6a:5a:85:66:
3a:e7:23:33:bb:4b:a1:78:e9:54:b5:70:e3:36:28:11:c5:f3:
6f:41:ff:c3:b7:af:b9:7b:9a:d6:d4:14:4e:1f:01:69:16:41:
8d:71:d1:48:14:e2:af:f7:0e:91:49:e1:f8:21:96:6f:be:bc:
b9:63:61:70:ca:11:ea:23:a3:cf:1e:fb:61:d8:a1:c8:fd:25:
65:1b:a2:32:41:94:9b:90:47:ec:3b:05:1e:0b:76:2d:6a:9d:
c2:26:c9:55:c8:cf:83:c0:9a:dc:76:f8:7b:8d:c1:60:69:ec:
28:01:e9:f9:53:43:16:2b:b0:2e:a5:fd:57:29:9a:4c:1f:3d:
3b:49:3b:ed:c1:4f:b6:eb:ed:52:6e:55:a7:d7:9b:db:e6:1a:
82:0d:5f:ac:b7:cc:f8:91:2f:31:80:d8:b1:2e:e0:49:9c:dd:
68:24:46:aa:86:6f:8f:4b:42:72:21:ae:2c:72:7a:4d:74:cc:
a5:dd:a1:88:c7:1f:0b:68:13:f2:17:2f:36:55:e9:3e:25:4f:
f8:3c:09:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:02 2024 by rpki-client on console-ams.rpki-client.org