Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/DX3JluOltI-NxfVESuVILTZEkos.roa
File: DX3JluOltI-NxfVESuVILTZEkos.roa (raw, json)
Hash identifier: +yMOYMovIKmf+DSk+7x+ZbzPl93CGrif4iCLzJn3IIs=
Subject key identifier: 0D:7D:C9:96:E3:A5:B4:8F:8D:C5:F5:44:4A:E5:48:2D:36:44:92:8B
Certificate issuer: /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Certificate serial: 0188BF8CA176C03265529D113CC830E3C61D
Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/DX3JluOltI-NxfVESuVILTZEkos.roa
Signing time: Thu 15 Jun 2023 14:54:04 +0000
ROA not before: Thu 15 Jun 2023 14:54:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50198
IP address blocks: 185.223.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:8c:a1:76:c0:32:65:52:9d:11:3c:c8:30:e3:c6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Validity
Not Before: Jun 15 14:54:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d7dc996e3a5b48f8dc5f5444ae5482d3644928b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:04:09:1f:c5:18:cf:b7:3b:0b:fb:13:83:
66:07:dd:d2:84:14:a2:4b:a6:12:40:e9:da:81:b4:
4c:5d:b6:5f:62:02:e1:94:34:f9:6a:23:21:92:1d:
14:67:c7:2e:47:22:f9:bb:b9:2a:b1:48:f5:13:18:
4a:c8:0b:79:14:f9:8b:88:1a:1e:00:49:71:64:0e:
83:9b:17:e8:b2:57:17:c6:52:40:c2:cc:41:f7:37:
d2:da:b1:5c:08:d9:ab:19:0f:3e:73:b6:90:ef:eb:
f1:65:80:00:8f:ae:52:a8:b8:1b:29:70:42:84:1a:
e5:86:3e:de:25:e4:0d:b5:7e:06:c6:57:24:b5:d7:
2b:b6:8c:af:f0:db:2a:99:e3:f9:3e:57:de:92:6f:
03:8b:51:e5:f8:ba:79:57:a8:2a:a0:f0:d1:7d:82:
6a:3a:de:18:8a:41:f9:2c:77:4f:31:c9:58:b9:3a:
05:81:a6:31:88:0f:d0:bd:41:c5:b7:c1:14:32:a2:
33:16:bc:98:d0:96:9e:d6:a9:04:88:3d:0f:b9:ea:
cb:05:51:61:6f:e1:53:3e:21:92:0e:3b:32:14:bd:
89:f6:b5:d3:a3:09:84:20:56:28:9e:3c:0b:fc:30:
41:a2:b7:80:7c:19:51:1b:4a:de:c6:ae:14:59:46:
ee:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7D:C9:96:E3:A5:B4:8F:8D:C5:F5:44:4A:E5:48:2D:36:44:92:8B
X509v3 Authority Key Identifier:
keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/DX3JluOltI-NxfVESuVILTZEkos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.64.0/22
Signature Algorithm: sha256WithRSAEncryption
09:bc:b8:23:ac:10:2f:56:5c:ac:a1:2e:f3:95:21:82:b0:ab:
89:ae:ea:7e:56:70:fc:f6:b2:ab:46:cb:fc:61:6a:d8:ae:67:
74:0f:38:cf:cc:7e:48:c2:e0:a5:86:4d:a4:04:d6:8e:dc:5c:
bc:db:8c:c8:75:75:45:75:37:19:1a:a1:82:b3:b9:a2:9c:78:
e0:64:a8:e5:26:ed:26:19:3d:83:c0:d5:e5:f3:72:17:e6:9e:
84:70:dd:8c:25:77:a1:61:7c:73:39:27:c1:94:c8:3b:f9:16:
22:b7:ec:a0:e4:c0:3b:a7:cf:8b:15:2f:12:40:a4:36:c4:f0:
c8:09:d9:20:f9:93:1f:a1:33:c4:90:5d:f9:71:85:57:95:14:
75:b1:6c:43:1a:9e:fb:ab:a8:29:6a:da:90:37:15:7e:8d:c9:
16:82:ec:06:ff:f8:9b:ae:ac:79:65:60:22:2e:ca:4c:d6:24:
68:8a:a8:5a:14:be:f8:2f:02:74:5c:9a:a7:1d:da:57:91:00:
7a:5f:1c:88:2a:f9:f1:39:bb:cf:2a:58:2d:3d:dc:bc:89:74:
50:4b:b6:36:b9:cd:00:bc:0b:14:5a:94:c0:70:74:c8:4f:4c:
a4:13:ef:19:92:60:7e:9a:a9:5a:c1:8f:d8:13:6d:11:05:51:
f7:b2:2a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:25 2024 by rpki-client on console-fra.rpki-client.org