Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/7PPp9u2O1aO7eRL7doNxDjGGxe4.roa
File: 7PPp9u2O1aO7eRL7doNxDjGGxe4.roa (raw, json)
Hash identifier: 6n87IT16FI2zYZ4dx3QLdL0hEo9ug/K6FAeKW4Ap638=
Subject key identifier: EC:F3:E9:F6:ED:8E:D5:A3:BB:79:12:FB:76:83:71:0E:31:86:C5:EE
Certificate issuer: /CN=27e367d8decf7d626e54780f80e57360d2c078cd
Certificate serial: 01856DB88C7A222BC87F733E4F98B398D0E1
Authority key identifier: 27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/7PPp9u2O1aO7eRL7doNxDjGGxe4.roa
Signing time: Sun 01 Jan 2023 14:24:49 +0000
ROA not before: Sun 01 Jan 2023 14:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204616
IP address blocks: 185.245.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:8c:7a:22:2b:c8:7f:73:3e:4f:98:b3:98:d0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e367d8decf7d626e54780f80e57360d2c078cd
Validity
Not Before: Jan 1 14:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecf3e9f6ed8ed5a3bb7912fb7683710e3186c5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:df:51:8f:76:74:52:4c:99:7d:f6:02:92:
26:83:c4:e5:b5:f3:12:c7:f5:41:1d:ab:b6:28:7f:
5f:2b:1a:2f:53:a7:45:55:5b:1e:c8:2a:b1:67:bf:
d5:9e:23:e4:23:ef:57:f6:bc:af:8a:b9:57:24:53:
a4:a8:8b:c7:a3:d5:42:ea:2e:31:0f:8e:b1:3a:ac:
5f:41:41:11:f0:39:91:b9:a5:e8:b2:e8:82:ce:0d:
e3:a8:f8:c0:57:fb:5b:88:a8:1f:ed:ad:3b:1b:cd:
10:79:20:ab:53:87:00:c5:8e:73:71:84:75:52:b1:
02:3b:e5:a7:6e:22:ef:2c:d7:be:cf:64:9c:2a:58:
a7:61:1a:41:19:ad:0e:90:a4:f3:fe:10:be:63:c6:
42:e2:2d:03:a9:da:74:5f:11:c1:68:e9:a2:de:c0:
7b:28:f4:7b:29:fc:c5:a3:69:71:c1:1a:86:58:1d:
52:2c:af:16:72:a4:0a:26:4b:c8:a3:32:0c:db:f7:
a3:1a:6d:f2:9a:22:0a:cb:3b:dd:08:10:ef:06:7e:
5b:54:47:5c:30:ee:5d:7a:fc:b2:4b:ea:64:93:46:
b1:a9:20:38:60:ba:30:44:e6:39:34:e5:cc:81:df:
d3:3e:92:53:ee:57:5d:23:a8:57:03:87:8a:65:38:
39:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F3:E9:F6:ED:8E:D5:A3:BB:79:12:FB:76:83:71:0E:31:86:C5:EE
X509v3 Authority Key Identifier:
keyid:27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/7PPp9u2O1aO7eRL7doNxDjGGxe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.52.0/24
Signature Algorithm: sha256WithRSAEncryption
25:d8:25:f1:c8:c8:13:ad:16:2a:0c:52:66:b0:dd:99:fd:f0:
e5:6f:4c:cc:0c:70:60:0b:ce:a2:25:d7:9e:de:82:df:25:97:
dc:a9:16:43:a3:2c:12:e8:72:02:19:36:fe:e7:cb:e0:ee:cc:
bc:aa:be:be:26:df:0e:14:22:d4:8c:ad:82:d8:a1:67:01:52:
09:af:13:3d:2b:99:d7:53:77:58:49:70:be:3f:db:16:b6:06:
cd:de:0a:76:da:69:88:5a:b9:21:12:89:7d:af:8f:2f:e8:88:
6e:3a:85:2f:06:31:8b:2d:37:05:73:fb:b5:96:21:d7:9a:70:
ea:4d:4e:7e:0a:f0:e1:55:06:b0:9c:e9:4d:de:7b:6f:8b:0b:
38:b1:ab:a0:f5:44:f8:61:e5:a2:89:f5:59:14:3b:d5:65:8c:
90:82:f3:30:ac:10:b7:93:18:04:1c:12:90:b5:d5:b7:b0:dc:
1e:4f:c2:c0:2a:89:1a:67:f3:12:e0:da:25:84:cf:2f:75:c6:
6c:18:58:09:16:b1:07:90:9a:f8:5f:86:f6:8f:51:25:59:ad:
b0:bb:64:b9:ba:f7:d6:f8:72:c6:4b:9b:ad:ea:2d:83:e0:dd:
06:46:1f:05:61:74:2f:6c:5e:4d:c2:db:26:53:6d:0a:37:5d:
b8:18:44:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:28 2024 by rpki-client on console-ams.rpki-client.org