Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/1-hVvrAhdgcPr5GkhNJcflKI4RAM.roa
File: 1-hVvrAhdgcPr5GkhNJcflKI4RAM.roa (raw, json)
Hash identifier: JKJCbetCj2E9nNSz0Mv0fHRnyrKsdUNPFFc8UogIWjI=
Subject key identifier: FA:15:6F:AC:08:5D:81:C3:EB:E4:69:21:34:97:1F:94:A2:38:44:03
Certificate issuer: /CN=ed64691c31892cc991ad4e9a9671147759e417ab
Certificate serial: 0187C2BE907D51FB80014AE678BC2AE8EB57
Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/1-hVvrAhdgcPr5GkhNJcflKI4RAM.roa
Signing time: Thu 27 Apr 2023 12:44:41 +0000
ROA not before: Thu 27 Apr 2023 12:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207645
IP address blocks: 185.75.242.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 27 Apr 2023 13:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:be:90:7d:51:fb:80:01:4a:e6:78:bc:2a:e8:eb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab
Validity
Not Before: Apr 27 12:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa156fac085d81c3ebe4692134971f94a2384403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:27:c8:82:56:dd:1b:1f:49:91:4d:ce:89:d4:
e9:e4:fe:2c:60:c7:7e:c2:64:b4:eb:3e:a4:4f:a8:
22:90:20:1e:bf:cc:4f:a7:0a:59:95:dd:e6:29:8d:
f0:1b:9b:a9:1b:ba:2c:e1:67:e2:21:08:02:6b:10:
dd:ca:86:df:4b:a5:1f:96:f9:95:2b:b5:f2:fd:ca:
60:1b:97:b9:e6:e8:39:41:14:33:81:95:86:c5:56:
7e:36:01:cf:7d:37:b1:38:b5:80:96:b0:1e:77:98:
6d:eb:ce:d3:99:5b:3d:cf:0e:af:3a:50:50:bf:3a:
d7:0a:4a:c4:bb:69:7a:d9:35:10:3a:0f:dc:13:1e:
2b:1e:df:37:b9:8a:9f:ec:be:96:97:bc:92:09:eb:
ad:7f:1e:71:1c:ce:fe:af:ab:ab:4b:1d:4a:38:f1:
82:e2:a7:f6:9d:6a:25:0d:77:67:84:e5:c4:a0:b2:
28:c1:58:25:32:e4:06:65:54:ad:96:6f:f7:71:9c:
f9:d8:30:d9:e2:53:21:b1:7b:84:17:50:50:48:19:
c2:d9:5d:89:00:88:bf:7e:61:c8:4b:4e:bf:d5:74:
fe:6f:4a:e7:79:1f:5f:88:25:6e:e2:87:13:02:65:
e4:b2:d8:3a:76:18:c7:de:6b:1e:b2:32:8e:c2:cf:
9c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:15:6F:AC:08:5D:81:C3:EB:E4:69:21:34:97:1F:94:A2:38:44:03
X509v3 Authority Key Identifier:
keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/1-hVvrAhdgcPr5GkhNJcflKI4RAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.242.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:da:f5:07:37:c2:ef:59:c9:aa:e9:c1:76:35:32:af:fe:5a:
cb:c9:f7:04:15:df:bd:ff:c9:db:9a:07:8b:15:cb:0c:09:e0:
13:c9:3b:19:1c:b0:67:84:d5:3c:af:08:7d:05:c5:93:f6:9d:
96:8b:88:b9:51:9b:e8:fe:da:2c:9e:d4:91:1d:c4:10:99:b1:
65:56:28:26:24:05:77:bb:6e:27:93:59:c0:af:26:84:24:fe:
28:66:95:f2:f1:21:a0:01:7b:21:f7:98:5c:86:2b:56:98:95:
a7:52:e7:9d:14:2b:14:09:1b:7b:f7:9f:b9:ec:d1:4b:21:09:
36:84:c9:2b:b0:ff:0c:ee:8e:04:71:4d:ff:9c:75:6e:4f:ea:
01:ee:36:37:74:c2:c5:5b:35:56:4e:46:50:af:6b:c3:14:21:
79:e9:f9:86:e5:6c:83:1a:de:30:ed:6c:ef:71:01:bd:ed:90:
58:4e:71:75:71:97:6d:d5:44:5f:e7:5b:75:e1:7c:1b:20:52:
5a:43:a5:f2:65:0e:e5:56:85:e7:5e:b0:46:8f:c3:a0:6d:15:
2f:89:df:83:83:1c:be:f7:98:2d:70:ba:32:58:89:e5:a2:f3:
5e:2f:07:10:99:d6:49:bd:fb:26:07:cd:59:4b:f7:9e:cb:4c:
a9:62:ea:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:03 2024 by rpki-client on console-fra.rpki-client.org