Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/7yvukjSV7Iu4FsTgh41b8Ge3Mio.roa
File: 7yvukjSV7Iu4FsTgh41b8Ge3Mio.roa (raw, json)
Hash identifier: ypVQE0M6apEKJb+b4+4ZzLOOTAwOYxR25JsigtqVVqA=
Subject key identifier: EF:2B:EE:92:34:95:EC:8B:B8:16:C4:E0:87:8D:5B:F0:67:B7:32:2A
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 018571F0F163C157ACFB14ACC39AA19EB87F
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/7yvukjSV7Iu4FsTgh41b8Ge3Mio.roa
Signing time: Mon 02 Jan 2023 10:04:53 +0000
ROA not before: Mon 02 Jan 2023 10:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202391
IP address blocks: 185.42.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Jan 2023 08:58:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:f1:63:c1:57:ac:fb:14:ac:c3:9a:a1:9e:b8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Jan 2 10:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef2bee923495ec8bb816c4e0878d5bf067b7322a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ab:2c:b6:24:17:9b:9c:06:c4:65:c7:d7:cf:
41:3e:23:d7:d7:3a:85:99:6c:13:db:41:dc:fa:db:
39:e2:df:d0:76:92:77:77:3a:10:4c:98:af:66:30:
69:40:25:f6:df:a0:f2:ac:63:9e:13:ae:de:c7:d0:
42:71:42:e5:1c:a9:d1:1d:fd:d1:fb:ba:72:02:44:
8e:8f:1e:2d:bf:5d:db:c0:79:5c:6d:7a:00:56:c9:
5e:b8:4b:49:89:b8:83:b8:a0:8d:bd:ef:97:c4:20:
9f:45:55:c1:cd:4c:fe:e3:66:6c:56:84:df:9d:52:
1e:a2:49:99:a8:19:4f:1a:ef:c6:80:02:16:41:35:
9c:8f:58:78:84:1d:d4:47:44:b2:f1:d0:2a:28:d1:
cf:f2:91:12:6a:f5:73:4d:e3:fb:48:45:a0:ac:ca:
76:f4:2d:65:40:2f:aa:4c:ce:49:3f:16:09:83:d3:
19:ec:1f:cb:01:d3:52:13:1c:b4:ef:79:fa:9d:22:
7a:79:29:38:b3:82:cc:af:f8:03:c4:f5:6e:81:40:
0a:e0:42:4d:8a:4d:a2:0f:cd:37:2a:e8:68:1a:a7:
18:dc:1f:61:1a:76:4d:e7:a4:ad:97:fe:82:49:a1:
15:d8:25:cf:de:70:ac:61:07:9a:67:f6:b2:cd:16:
f1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2B:EE:92:34:95:EC:8B:B8:16:C4:E0:87:8D:5B:F0:67:B7:32:2A
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/7yvukjSV7Iu4FsTgh41b8Ge3Mio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.24.0/24
Signature Algorithm: sha256WithRSAEncryption
14:96:9f:bb:06:2f:72:df:4e:34:fd:74:53:ca:ea:0f:4f:c9:
76:8d:ce:37:36:7e:5c:92:0a:23:a7:b2:70:f8:1f:94:55:77:
69:32:3a:eb:94:5a:0a:16:f2:55:c2:f7:cd:85:fd:a8:8f:c4:
f9:6c:97:78:7b:50:a5:08:39:81:13:71:47:a2:94:8b:81:30:
80:53:91:34:e2:59:b5:d8:f9:96:ef:ff:21:8f:2c:00:86:8d:
28:aa:82:87:54:74:91:34:65:56:07:38:cd:20:87:18:0b:f3:
2b:33:ee:67:c7:c6:84:15:93:73:16:59:f8:4b:c3:f8:c9:28:
0e:a3:5d:e8:8f:df:a1:c8:cb:1d:13:4e:02:f3:1f:1d:a0:9f:
da:02:7d:99:91:fc:c7:56:70:d1:d7:2a:e8:38:e0:14:36:06:
bd:e2:6c:41:a1:4a:a8:eb:d3:f9:de:75:ef:78:80:99:5d:a0:
fd:eb:63:d8:95:61:bf:a8:73:04:33:d3:b8:ae:65:a6:75:95:
c1:a5:af:24:f1:da:98:a6:df:61:67:fc:cd:59:92:6b:78:6e:
ab:08:e0:58:b2:54:2e:6a:17:37:84:2f:4c:6a:12:fd:d5:48:
b4:51:0c:b7:a0:2d:df:8e:66:83:b2:25:1f:cc:0a:be:ad:85:
f9:41:8b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:09 2024 by rpki-client on console-ams.rpki-client.org