Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/5hR37pXnypkVhIkZHFcA7qIKAyk.roa
File: 5hR37pXnypkVhIkZHFcA7qIKAyk.roa (raw, json)
Hash identifier: Bv6Xgdsq/m993nMhyF8muCg5riz1Ps58UjZLwXcUzec=
Subject key identifier: E6:14:77:EE:95:E7:CA:99:15:84:89:19:1C:57:00:EE:A2:0A:03:29
Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial: 0189B1308E8BA2B0C54444BB03E2188DFF28
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/5hR37pXnypkVhIkZHFcA7qIKAyk.roa
Signing time: Tue 01 Aug 2023 13:01:36 +0000
ROA not before: Tue 01 Aug 2023 13:01:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197708
IP address blocks: 185.7.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:30:8e:8b:a2:b0:c5:44:44:bb:03:e2:18:8d:ff:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
Validity
Not Before: Aug 1 13:01:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e61477ee95e7ca99158489191c5700eea20a0329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:77:42:72:8a:9d:94:ed:54:f6:29:3f:4d:53:
6c:25:83:96:b4:d5:c5:14:a9:a1:8f:4f:07:2a:30:
b0:bd:c4:8a:0a:14:ed:04:1d:c6:21:8e:2a:a2:03:
94:be:34:b1:4b:e9:53:3d:08:12:d1:4d:c8:6d:c4:
31:8d:22:86:8d:16:c9:48:ed:2d:73:c6:66:45:94:
6d:83:0b:66:42:af:95:52:e2:9d:eb:5c:0b:07:63:
49:97:e0:a4:73:cc:66:ca:ea:8f:74:66:f7:ab:3c:
01:01:09:9f:bb:65:4a:f8:62:73:ce:aa:20:53:44:
80:f6:8c:56:fd:7a:98:f2:d7:d7:b8:0d:f1:39:9b:
17:97:e2:b7:a4:1b:0a:b6:68:14:de:f8:67:d3:72:
b8:81:58:63:a6:52:43:cf:43:fa:84:14:be:70:88:
8d:e3:3b:86:88:ec:03:f0:10:2a:10:40:72:12:1d:
34:7f:da:b4:69:02:09:f0:a1:07:83:63:da:a7:79:
1b:bd:79:6f:91:73:81:ad:a1:8f:9c:cb:01:6f:2f:
e0:be:dd:a8:02:ef:71:58:3b:5b:04:f4:18:e2:6f:
5b:5a:07:fb:ee:c5:d8:f7:bc:c4:d8:49:c1:f6:89:
3b:ac:12:94:89:45:06:f8:fe:ec:48:11:69:a0:f0:
74:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:14:77:EE:95:E7:CA:99:15:84:89:19:1C:57:00:EE:A2:0A:03:29
X509v3 Authority Key Identifier:
keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/5hR37pXnypkVhIkZHFcA7qIKAyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.120.0/24
Signature Algorithm: sha256WithRSAEncryption
73:cd:00:b7:36:c6:60:bd:8d:4a:ea:ca:2b:9c:44:fe:ef:5a:
81:34:a2:29:b0:60:ac:40:fd:d4:4f:9a:8b:2d:6f:74:67:ed:
0b:92:12:6d:87:a3:d7:7d:37:1e:c5:6f:2b:e8:2c:d1:9a:b5:
13:35:24:bb:c4:59:a3:60:ab:a0:98:86:4b:5d:1d:ca:ee:8d:
26:2a:7a:aa:1d:a6:d7:ab:46:55:b2:56:23:96:ee:ef:7a:e1:
28:57:4e:a9:a0:91:81:2c:b7:2a:b3:90:87:c0:d8:ac:8d:c0:
c4:4d:cf:f2:30:e2:b6:66:1d:9d:62:5d:26:57:cd:6a:15:bb:
0c:8a:ac:5f:5c:5e:aa:f0:2f:87:17:d7:d9:60:4e:67:3f:f3:
5b:bf:ac:d3:fe:b9:11:b9:62:2e:de:e2:2c:95:df:02:20:10:
a2:0d:90:6d:fa:d1:49:c5:83:47:f7:e3:6c:27:e6:6d:23:ea:
e7:7e:83:1f:3b:6a:b7:ca:7f:cb:d8:af:25:c2:83:18:78:9e:
87:00:5d:c4:4b:32:f1:d4:9b:c9:94:8f:79:32:2f:91:52:a5:
0d:29:73:bf:34:4c:9d:3c:a8:b1:51:42:06:65:55:18:7d:d0:
fe:28:c4:21:40:b1:c7:91:5c:3f:72:89:b5:bf:97:1e:1e:ae:
37:81:ab:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:09 2024 by rpki-client on console-fra.rpki-client.org