Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/cL7wetR_3o3HS-f4bmNRJ4nYAwM.roa
File: cL7wetR_3o3HS-f4bmNRJ4nYAwM.roa (raw, json)
Hash identifier: PGdgeNNBSxTs86Y2VjNH6GVt0NoopiuYDRwhSRz3zTA=
Subject key identifier: 70:BE:F0:7A:D4:7F:DE:8D:C7:4B:E7:F8:6E:63:51:27:89:D8:03:03
Certificate issuer: /CN=5c45ceb18b14a737282b75af0ba16cffd7a6abae
Certificate serial: 01857295AD21CF7B63D5657D4E642C862ED6
Authority key identifier: 5C:45:CE:B1:8B:14:A7:37:28:2B:75:AF:0B:A1:6C:FF:D7:A6:AB:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/cL7wetR_3o3HS-f4bmNRJ4nYAwM.roa
Signing time: Mon 02 Jan 2023 13:04:49 +0000
ROA not before: Mon 02 Jan 2023 13:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62173
IP address blocks: 185.75.196.0/24 maxlen: 24
185.75.196.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 01 Sep 2023 13:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:ad:21:cf:7b:63:d5:65:7d:4e:64:2c:86:2e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c45ceb18b14a737282b75af0ba16cffd7a6abae
Validity
Not Before: Jan 2 13:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70bef07ad47fde8dc74be7f86e63512789d80303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:43:94:ff:83:d2:d0:73:44:63:aa:18:c9:06:
79:b8:40:00:ca:f8:98:6c:be:57:dc:12:5a:e6:ee:
66:80:83:66:2e:d4:e8:5c:c1:ce:d4:f6:15:b9:ef:
cd:6e:f2:55:70:1b:2c:95:a9:c3:88:db:e8:29:2f:
ea:07:ee:5c:cb:4c:59:79:16:26:fc:43:d3:6c:14:
cb:c4:b7:b8:ed:47:4f:af:51:7f:c8:41:5d:5b:62:
4e:32:a2:a9:53:69:2d:d9:76:fb:bc:9e:76:3a:55:
e0:04:6d:cd:35:34:0a:40:da:26:b5:63:11:43:dc:
ce:8e:8c:58:cb:af:ee:30:4b:0f:2e:e4:f6:0c:29:
ce:e5:56:e8:a7:05:5b:50:16:d3:2b:a5:9f:8d:d5:
95:43:0e:d1:6b:12:f0:2c:f0:2f:e9:cb:18:26:2a:
28:fa:22:4d:57:ec:70:5a:2e:1f:31:65:d0:87:b7:
f8:e3:14:5a:c6:af:9f:31:b7:c9:d6:10:6c:02:49:
2e:85:3b:ea:66:04:30:21:30:e8:58:6b:2a:66:54:
93:ed:25:8b:00:14:ae:e4:ad:3d:32:25:2f:5b:b4:
de:0c:c3:26:e5:70:de:39:49:26:af:65:f7:0f:f0:
62:27:8c:a3:a0:8f:47:b4:64:ca:67:85:56:94:93:
5a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BE:F0:7A:D4:7F:DE:8D:C7:4B:E7:F8:6E:63:51:27:89:D8:03:03
X509v3 Authority Key Identifier:
keyid:5C:45:CE:B1:8B:14:A7:37:28:2B:75:AF:0B:A1:6C:FF:D7:A6:AB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/cL7wetR_3o3HS-f4bmNRJ4nYAwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.196.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:21:4b:7a:db:21:37:37:df:dc:91:b6:1c:1e:d3:08:bd:dc:
11:c5:bf:ac:86:ac:f9:f7:4c:b0:e8:3e:0c:b4:05:d0:37:74:
c1:01:0b:0b:8d:76:58:ef:5d:b3:77:3c:18:5f:ca:80:25:4c:
57:31:6e:b5:b2:cb:c9:2b:73:b7:79:62:a6:24:3d:0c:1c:04:
1b:41:95:01:74:fb:cb:e8:bc:0e:8d:88:6a:a8:4d:3a:0f:2a:
35:71:f9:ce:1e:4d:4b:d4:91:f4:9f:97:8b:12:4f:57:9a:57:
2c:38:4e:c9:cb:0e:9e:6e:f0:02:9c:4f:9d:2b:23:0f:98:cc:
be:8f:8a:4f:de:1a:22:4e:f2:40:a8:96:76:bb:6a:aa:07:61:
a4:b0:67:38:b7:6b:d6:68:40:5e:66:8e:f4:46:72:3f:e2:6e:
e7:12:de:19:66:c2:fd:f7:28:42:7b:ee:a2:0f:20:cb:b1:a2:
40:b6:d6:f9:a6:bd:ef:6d:d1:65:87:d7:a5:72:53:61:7c:73:
58:31:a4:c7:aa:55:bd:6c:72:34:b4:69:06:a3:1a:b0:72:77:
ba:6c:20:3a:fd:e5:6f:3f:cd:2b:a0:f0:13:55:45:df:b7:4d:
7c:94:9c:0b:df:0f:5f:c8:2f:9d:d5:64:85:17:3c:52:0d:2a:
65:be:16:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:33 2024 by rpki-client on console-fra.rpki-client.org