Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/f_5kp0gn9CHp1B0N9n2NVOamuEk.roa
File: f_5kp0gn9CHp1B0N9n2NVOamuEk.roa (raw, json)
Hash identifier: bzzHZP9iyUlf6hntfsugjIuQKV3n0K5xehnC6vEAFj0=
Subject key identifier: 7F:FE:64:A7:48:27:F4:21:E9:D4:1D:0D:F6:7D:8D:54:E6:A6:B8:49
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 01863B7AC92DE5B89F98E39F05446A50DFA8
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/f_5kp0gn9CHp1B0N9n2NVOamuEk.roa
Signing time: Fri 10 Feb 2023 13:19:08 +0000
ROA not before: Fri 10 Feb 2023 13:19:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.64.73.0/24 maxlen: 24
185.64.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:7a:c9:2d:e5:b8:9f:98:e3:9f:05:44:6a:50:df:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: Feb 10 13:19:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ffe64a74827f421e9d41d0df67d8d54e6a6b849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:84:ec:0d:15:b8:e9:c2:95:b8:37:85:af:d5:
8f:f9:68:f7:e4:e7:42:5b:18:9e:f6:26:63:d1:6b:
24:99:f9:35:1e:43:34:2d:36:f9:bb:d7:51:74:0b:
1a:7a:02:5a:8e:fc:77:2b:37:f5:f2:18:47:68:7e:
f8:59:1b:54:ca:1d:13:4d:c5:d7:09:a4:61:09:e4:
e7:5c:4b:b2:d1:17:bf:65:8e:f5:ea:50:9c:90:40:
6d:04:c6:3d:43:ee:a2:2e:bf:29:68:bf:2c:1c:5e:
55:47:b9:53:77:77:5d:66:be:3a:24:72:c1:8f:0a:
fb:6a:7c:74:f0:5b:d7:2d:ac:c6:c5:52:20:70:c3:
31:b7:f5:78:5a:02:22:58:cf:05:48:12:a2:f2:2c:
42:68:52:03:dc:75:20:df:c8:3a:35:42:06:dd:20:
bd:34:59:a9:0a:a6:f3:e3:58:7c:b2:c8:8a:07:6f:
27:c2:7d:e9:13:94:4c:e3:19:fd:1a:f6:ba:76:ec:
ef:94:5d:49:1f:86:0e:de:ae:39:60:df:43:68:42:
c7:07:94:bd:9d:02:a6:c5:b1:8a:bb:2b:77:c9:0d:
69:58:45:42:cf:2f:2d:a2:ac:d0:6e:1b:f3:c0:cb:
9a:f5:09:96:e3:cb:34:f0:b5:29:7a:a8:11:73:74:
4d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FE:64:A7:48:27:F4:21:E9:D4:1D:0D:F6:7D:8D:54:E6:A6:B8:49
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/f_5kp0gn9CHp1B0N9n2NVOamuEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.73.0-185.64.74.255
Signature Algorithm: sha256WithRSAEncryption
41:95:6b:71:70:bc:ff:f5:76:10:53:ab:e7:a0:bc:96:f6:1e:
d2:f5:f9:ff:2a:3c:ed:1f:58:85:22:a8:46:32:0f:5e:e7:39:
ce:d9:f3:f9:ed:81:e4:d8:1d:e6:a2:1f:93:6b:5d:81:c2:ac:
d5:f7:ab:0a:a9:34:96:12:59:65:4c:d9:78:e3:b4:62:ce:33:
3a:df:86:c0:67:0e:e7:97:e8:00:23:bd:20:57:4a:5a:8d:4f:
50:73:59:d5:81:a5:9d:25:a1:8c:1b:11:0c:b9:27:81:3e:0f:
c5:50:1f:62:50:a7:a6:e0:c4:97:20:79:d5:76:42:9a:27:19:
57:bf:b5:00:0f:83:e6:9e:d1:5d:2b:85:73:f3:94:0c:b0:42:
55:2f:7c:f8:7b:ec:c9:02:a3:b0:ff:12:2b:d5:fe:30:fa:38:
09:23:32:88:ad:64:37:e8:22:d9:22:ef:a5:22:43:bd:7e:df:
50:cc:1c:90:84:39:df:f8:66:f3:2a:1a:ff:1b:78:55:f1:29:
85:98:5b:96:ea:f6:b8:74:b4:75:81:a7:3f:68:9a:cb:ee:29:
ec:f6:15:da:81:8d:b0:66:e9:1a:a9:4e:61:2b:56:55:32:66:
09:23:e1:37:10:94:51:e7:c6:4c:e4:28:13:1f:81:fb:1b:6d:
1d:ca:42:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:31 2024 by rpki-client on console-fra.rpki-client.org