Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/fC5keWxhzBCFE3r29B1jE3yUBfI.roa
File: fC5keWxhzBCFE3r29B1jE3yUBfI.roa (raw, json)
Hash identifier: iWX14OXJC+m45AV11PC9A3Y7b0S31tdvd90H461FXI8=
Subject key identifier: 7C:2E:64:79:6C:61:CC:10:85:13:7A:F6:F4:1D:63:13:7C:94:05:F2
Certificate issuer: /CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
Certificate serial: 01896813C3E19863C0E9B78693DF6FAE1503
Authority key identifier: 1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/fC5keWxhzBCFE3r29B1jE3yUBfI.roa
Signing time: Tue 18 Jul 2023 08:17:53 +0000
ROA not before: Tue 18 Jul 2023 08:17:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207827
IP address blocks: 185.180.174.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:13:c3:e1:98:63:c0:e9:b7:86:93:df:6f:ae:15:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
Validity
Not Before: Jul 18 08:17:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c2e64796c61cc1085137af6f41d63137c9405f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a9:0b:18:0c:ad:fd:12:a0:4d:d4:0a:ef:fb:
2d:b5:a2:14:4a:22:dc:db:62:3b:fe:47:3f:ca:ea:
1d:6c:f3:66:6c:24:9a:be:85:84:82:5b:45:0f:07:
da:be:11:59:e0:68:1d:f3:2d:38:6a:74:60:96:d2:
ab:be:6b:83:15:41:41:be:b9:70:72:c5:5a:6f:16:
bf:76:f8:9c:c7:3b:c1:af:0e:0b:0f:90:cf:33:41:
b2:a0:21:de:e8:a0:28:c2:c1:93:2c:2b:58:5e:81:
12:19:1a:c2:59:3e:b8:c8:3f:17:30:cb:1b:3b:bf:
e4:05:ba:e0:6b:b4:8b:01:2e:f7:6b:34:6b:c7:7f:
63:34:7b:76:4a:a4:ed:98:e4:9b:08:1c:29:21:8e:
0d:b3:e0:4f:63:74:2a:85:8b:5a:de:a9:86:b3:1e:
3e:28:8b:e4:30:27:4c:44:a1:94:d5:93:ff:37:5c:
47:35:26:47:30:49:3d:46:31:26:21:70:d0:e8:61:
73:50:00:a8:07:fb:27:3b:51:7b:1c:fd:c2:e1:4d:
67:83:7f:5f:39:60:ef:94:31:83:38:70:61:21:a6:
75:b6:eb:4d:b6:fe:b2:ee:5d:d1:c6:c5:be:99:2b:
93:46:43:09:bb:5a:ef:f4:88:6f:c0:5b:8b:81:81:
ff:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2E:64:79:6C:61:CC:10:85:13:7A:F6:F4:1D:63:13:7C:94:05:F2
X509v3 Authority Key Identifier:
keyid:1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/fC5keWxhzBCFE3r29B1jE3yUBfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.174.0/23
Signature Algorithm: sha256WithRSAEncryption
43:6b:7d:d8:41:93:dc:d5:14:b6:11:7b:b2:80:41:ee:4b:01:
49:4d:04:88:15:92:97:4d:a1:8b:38:c6:f3:fe:bb:b0:bc:1c:
2e:dd:fe:f4:22:b0:72:7b:74:02:67:16:d8:aa:7c:cf:a3:48:
fe:3f:3c:98:21:26:96:ea:73:3f:1c:13:2b:9a:ed:fb:e1:5b:
a7:ce:23:cf:5a:f0:d2:05:fd:95:6b:6f:b6:2a:06:06:58:e8:
3e:8c:bd:0a:b2:7c:19:b4:b8:1a:6e:06:e8:aa:43:f3:08:7a:
2f:bf:93:3b:8b:51:09:24:d3:1f:7a:9f:32:5e:88:1e:13:b1:
e9:c3:87:1d:55:1c:27:3d:1c:f0:8c:19:60:dd:78:20:85:ca:
c7:47:9b:6b:d8:1d:54:d8:aa:57:ec:30:c0:eb:5e:ba:fe:a0:
e0:57:68:b9:f7:d8:e7:4a:05:da:64:65:ba:be:83:5b:98:cb:
67:bc:3b:b2:ec:2e:88:51:fe:e2:80:63:53:df:0e:87:bf:49:
26:96:82:31:72:cf:e2:df:e2:cf:e3:50:d9:20:b0:0d:ff:cf:
35:36:6f:2d:eb:8f:47:a7:69:41:4a:23:e1:a0:9f:5a:7c:c5:
e9:b6:dd:da:c7:2e:9a:e5:22:f5:c9:85:1e:d4:3f:98:97:2a:
0d:76:4a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:05 2024 by rpki-client on console-ams.rpki-client.org