Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/b7rEQaUPMeLCVyd8E1aQb143ivU.roa
File: b7rEQaUPMeLCVyd8E1aQb143ivU.roa (raw, json)
Hash identifier: sdScOO5PFrg1TzzALE7DfsmZzI2j/GXqi/fBohP5ljA=
Subject key identifier: 6F:BA:C4:41:A5:0F:31:E2:C2:57:27:7C:13:56:90:6F:5E:37:8A:F5
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01856F94C4F9CDC05A01CFBFDDCDF368D606
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/b7rEQaUPMeLCVyd8E1aQb143ivU.roa
Signing time: Sun 01 Jan 2023 23:04:58 +0000
ROA not before: Sun 01 Jan 2023 23:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50795
IP address blocks: 188.75.112.0/22 maxlen: 22
188.75.112.0/23 maxlen: 23
188.75.114.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:c4:f9:cd:c0:5a:01:cf:bf:dd:cd:f3:68:d6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 1 23:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fbac441a50f31e2c257277c1356906f5e378af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:8f:f7:c5:0e:ec:87:9a:ef:ad:c1:fd:f5:
32:77:50:4f:83:d4:24:34:60:4a:d5:9d:80:91:2e:
ba:13:a3:7f:72:11:df:b0:b0:30:39:2d:96:8a:fd:
58:87:f5:44:e7:91:09:56:e9:5c:3d:e4:44:22:1d:
f0:46:49:65:91:0f:2e:69:56:1b:c0:75:28:89:ba:
40:04:77:f5:a3:3e:f0:12:1a:9b:a8:2b:5d:7e:1d:
6c:b8:28:a6:78:d2:2f:0e:2f:86:47:17:df:ad:b1:
ac:bc:7c:8d:24:9f:39:d2:94:16:78:a4:b6:84:08:
27:59:22:4b:4d:07:56:c7:c4:2a:e5:6f:76:fb:f1:
f0:bd:dc:9d:46:3e:7b:79:8c:ea:e6:fb:1d:02:84:
38:70:18:05:34:6d:4b:49:fc:9e:dc:11:3f:0a:c3:
b7:fd:97:e2:f8:c4:5c:e4:43:93:f5:41:e3:b0:3d:
37:bf:21:b0:e6:e8:1c:78:f1:4d:de:c0:d7:e1:ba:
73:9f:c9:4a:69:c9:4f:d0:82:d6:3e:b6:50:b1:05:
b4:63:14:65:2c:dd:84:03:be:94:f1:21:b8:6b:cb:
c0:67:3b:a7:36:24:24:07:a2:93:70:c4:3d:f3:cf:
93:b1:45:f8:b7:37:df:18:fe:3b:7e:3a:f5:92:5e:
73:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BA:C4:41:A5:0F:31:E2:C2:57:27:7C:13:56:90:6F:5E:37:8A:F5
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/b7rEQaUPMeLCVyd8E1aQb143ivU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.75.112.0/22
Signature Algorithm: sha256WithRSAEncryption
91:59:fc:94:17:2d:9e:f9:12:04:58:19:e2:ef:76:68:7b:24:
95:ea:33:c9:69:a7:59:1e:b8:07:7a:b4:65:e8:9a:64:e8:94:
6b:09:68:b8:eb:fc:48:06:b1:75:70:55:cd:db:f2:47:b5:56:
08:2d:b9:7c:b2:69:71:0e:85:7f:95:29:c3:94:45:16:95:21:
85:be:7b:a8:b7:b3:35:52:27:ef:87:3e:51:d0:85:b5:d2:7e:
a4:34:15:03:41:82:b9:2f:c0:08:9b:6c:81:5c:6f:bf:0d:4a:
41:c2:4b:49:f2:98:09:c0:1b:5f:24:b7:45:0c:b5:b4:34:03:
4a:75:e7:96:a2:53:5b:ba:d8:cc:26:fe:37:c9:95:04:55:44:
9a:96:6f:2b:1a:3b:f0:85:33:e4:e0:96:e5:2f:4a:26:70:df:
cd:55:9a:8f:90:14:91:6d:22:18:e7:4f:f2:98:c1:7a:59:67:
45:d0:f7:a3:53:6a:7a:8f:cf:70:c7:0b:3a:29:c5:eb:52:fa:
78:82:92:79:f5:3b:98:5b:1f:50:cd:cc:70:98:a4:26:cb:d7:
f5:2c:b6:84:7b:1a:cc:f1:21:31:37:7b:a1:df:3b:e5:a3:ce:
80:50:cc:98:23:bc:fb:a8:21:35:b0:7d:02:1c:43:3e:e8:74:
ef:36:a5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org