Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/7IQquhcAvBy0rxPC1wrAYinSDgA.roa
File: 7IQquhcAvBy0rxPC1wrAYinSDgA.roa (raw, json)
Hash identifier: wjgwYqDBRmYToXVS9GAzP9mg4m68PCiU2DBxmGKZbTA=
Subject key identifier: EC:84:2A:BA:17:00:BC:1C:B4:AF:13:C2:D7:0A:C0:62:29:D2:0E:00
Certificate issuer: /CN=25a553794223e6b4c632779b51371dc4e7d70705
Certificate serial: 01856F023BC6E8005481FDE94833F5CD6908
Authority key identifier: 25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/7IQquhcAvBy0rxPC1wrAYinSDgA.roa
Signing time: Sun 01 Jan 2023 20:24:55 +0000
ROA not before: Sun 01 Jan 2023 20:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201471
IP address blocks: 176.223.250.0/23 maxlen: 23
176.223.248.0/23 maxlen: 24
84.40.0.0/20 maxlen: 24
84.40.32.0/21 maxlen: 24
2001:67c:4dc::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:3b:c6:e8:00:54:81:fd:e9:48:33:f5:cd:69:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a553794223e6b4c632779b51371dc4e7d70705
Validity
Not Before: Jan 1 20:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec842aba1700bc1cb4af13c2d70ac06229d20e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5b:79:c5:bf:f3:d9:31:a7:0a:ca:d1:fe:e8:
14:e9:00:e1:6b:15:ba:4a:f8:71:f3:e9:50:79:23:
e7:6d:9e:e9:bf:bd:c8:8e:ee:4e:ad:5e:e1:16:5c:
e4:ed:c4:46:5b:2f:e1:f3:21:65:07:fb:d9:c7:ab:
f9:ac:e8:d9:93:1f:f8:c1:20:45:c7:70:36:bc:30:
e8:a8:54:bc:f9:21:a2:75:cb:20:17:aa:40:79:b7:
3a:56:48:13:85:e1:2e:a8:bf:a0:5a:40:ea:2e:c8:
6c:f9:2d:3a:d6:1e:45:af:3e:75:3a:7a:8a:35:20:
34:47:9d:19:01:6f:d3:cf:e4:bc:fc:26:81:87:ce:
13:f7:b9:c1:b0:cb:ca:b4:87:a3:de:5f:79:9e:e8:
09:00:a8:dc:a6:70:7c:dd:6b:44:74:f6:4e:0c:35:
ae:67:0a:cd:6b:5c:d3:41:0f:45:ce:8e:69:6c:96:
17:e8:f7:ca:2d:fd:90:69:6e:d3:cb:b6:e0:83:91:
1c:05:fe:fa:d2:3b:c0:95:ce:66:48:e6:36:56:16:
13:2d:ee:a9:94:88:12:9e:f5:0c:9a:1f:d5:49:36:
7b:fc:c4:ef:48:26:f6:de:08:48:49:b2:e8:7e:4d:
18:cd:4f:2b:c0:e3:a0:33:c2:a3:a6:49:56:bd:f8:
91:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:84:2A:BA:17:00:BC:1C:B4:AF:13:C2:D7:0A:C0:62:29:D2:0E:00
X509v3 Authority Key Identifier:
keyid:25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/7IQquhcAvBy0rxPC1wrAYinSDgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.40.0.0/20
84.40.32.0/21
176.223.248.0/22
IPv6:
2001:67c:4dc::/48
Signature Algorithm: sha256WithRSAEncryption
9d:40:8d:70:5c:9e:c7:77:75:0e:97:5a:b2:ea:3f:a7:ea:c4:
38:89:18:1c:73:e7:57:e8:53:75:b4:0f:b8:da:8a:e5:f9:de:
d2:d0:b7:34:43:50:b9:64:81:e0:0b:12:9e:27:94:3f:7f:17:
52:06:56:95:47:9f:9c:ba:46:70:08:cf:0b:ea:3f:cc:fb:8e:
a5:b3:4d:12:78:de:c4:64:76:a9:ae:8e:44:b7:e1:9a:de:64:
92:ea:04:57:cd:d0:1b:e6:60:ca:6e:3d:83:09:9d:89:d7:69:
d9:fb:aa:58:38:23:86:46:2b:e9:dd:4b:c1:19:c0:8c:cd:72:
ab:85:15:d0:2c:e4:07:99:2f:1f:0e:c8:ba:31:cf:bc:e1:bc:
4b:ba:00:66:33:b8:02:9e:af:c8:96:a7:68:ee:eb:66:c1:7a:
66:1f:ba:e5:c0:9d:43:5a:fd:21:8f:95:c9:33:41:18:95:bb:
1f:8c:d8:a9:c5:94:4f:88:54:2c:6a:2e:fd:be:a7:44:74:ec:
63:9f:6f:9a:37:df:93:0d:1c:0b:d1:7e:3e:3f:f6:19:4f:a3:
44:79:5f:aa:d8:e0:13:52:dc:7e:32:a7:fe:67:8b:9f:53:e5:
a3:fc:ad:28:48:34:a2:b8:45:e3:0c:94:69:1d:a9:41:e1:cf:
33:a0:ea:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:53 2024 by rpki-client on console-fra.rpki-client.org