Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/LSF6bhWhfYZQ9o0dCUDKLIPpez4.roa
File: LSF6bhWhfYZQ9o0dCUDKLIPpez4.roa (raw, json)
Hash identifier: LeVpSL5GqRWW9pVwCCdB0ETFWlt7WheMbLGxg7ownLs=
Subject key identifier: 2D:21:7A:6E:15:A1:7D:86:50:F6:8D:1D:09:40:CA:2C:83:E9:7B:3E
Certificate issuer: /CN=efa842e67147252505f41551f0f735b7f72e3e97
Certificate serial: 018E960839B53E33DD2492B38275AE864AF0
Authority key identifier: EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/LSF6bhWhfYZQ9o0dCUDKLIPpez4.roa
Signing time: Sun 31 Mar 2024 19:41:45 +0000
ROA not before: Sun 31 Mar 2024 19:41:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 185.165.190.0/24 maxlen: 24
2a07:85c5::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 31 Mar 2024 23:24:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:96:08:39:b5:3e:33:dd:24:92:b3:82:75:ae:86:4a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa842e67147252505f41551f0f735b7f72e3e97
Validity
Not Before: Mar 31 19:41:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d217a6e15a17d8650f68d1d0940ca2c83e97b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:00:b8:d7:93:1d:74:08:26:d6:14:7d:e6:
2f:4a:ef:1b:b9:2b:fa:49:a9:19:e7:ba:52:13:bf:
01:fd:ed:fc:5c:17:3f:5c:1f:54:7d:56:ed:7b:fb:
64:02:a6:2f:5c:fd:1b:a4:1d:70:66:a9:8d:be:f5:
09:06:c3:f0:b8:cd:74:09:57:62:40:cb:c8:87:2b:
6f:a0:9a:b2:9d:6a:51:b1:03:7f:f3:91:07:19:c5:
42:73:d8:55:39:85:ae:b4:64:2a:84:6f:79:c9:fd:
3c:02:8f:9e:79:25:b3:1c:9d:71:f6:ac:ed:70:b8:
77:59:ef:55:85:2d:41:97:3f:23:0c:84:0f:8c:b2:
a3:7a:b9:5b:1e:d5:ed:cf:a3:6b:be:65:0d:10:73:
fb:76:9c:d1:00:74:b0:23:97:af:ed:52:2e:01:80:
ba:08:5f:54:24:5f:b8:08:75:11:04:61:7d:86:ac:
c1:84:51:ef:85:d0:13:f0:cf:57:12:de:3f:18:89:
4b:e6:74:8b:e4:32:31:c3:c7:31:5d:67:c7:b7:c1:
b4:4d:07:33:27:0e:2c:16:4f:3c:b3:48:ca:db:34:
59:c2:d8:99:74:71:82:6f:b9:32:e3:0b:85:89:33:
b2:64:86:47:24:d4:54:59:0b:44:0a:28:2d:6d:b7:
8c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:21:7A:6E:15:A1:7D:86:50:F6:8D:1D:09:40:CA:2C:83:E9:7B:3E
X509v3 Authority Key Identifier:
keyid:EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/LSF6bhWhfYZQ9o0dCUDKLIPpez4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.190.0/24
IPv6:
2a07:85c5::/48
Signature Algorithm: sha256WithRSAEncryption
66:48:4b:dc:e6:22:cd:7e:86:cc:dd:1b:e1:4f:7a:6a:9c:3e:
06:07:3f:9b:0c:51:7d:f1:36:19:4a:54:64:85:b9:8d:f6:06:
b1:dd:92:6d:d1:c5:ac:e3:4d:55:fc:5f:fd:ac:00:42:6e:c7:
ad:2b:b9:c7:bb:70:e3:8d:86:54:95:29:3a:5d:19:f3:7f:4c:
83:49:03:ee:2a:c7:7c:6e:bc:3e:8a:92:49:a7:d9:c2:ef:41:
be:fc:5a:7b:c1:b6:47:9b:a1:73:55:fa:4e:ae:e6:a1:73:09:
c7:0d:bf:53:ee:97:12:84:97:16:15:c7:67:0f:97:08:9e:c3:
85:19:89:71:b2:98:27:00:55:2f:d3:9b:e9:d6:5a:44:51:31:
8c:f1:87:75:69:c3:22:77:4f:4d:1c:a9:b9:4b:13:36:50:b4:
22:be:84:f7:ec:1e:56:db:b7:e7:2b:33:68:c0:eb:e5:1e:62:
48:45:3e:33:b0:17:89:42:c9:12:b1:fa:bb:fa:9a:f0:7d:41:
3f:f8:20:1d:75:f7:94:0d:37:94:ca:c5:7c:66:68:b4:2e:7c:
5e:4d:f1:6e:fc:f4:d5:2b:39:4c:e5:9b:91:60:40:56:38:54:
f3:b6:16:dd:96:2d:77:e2:ea:bd:4b:a2:ce:d1:c5:4f:8f:0d:
6f:7c:7c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 00:26:38 2024 by rpki-client on console-fra.rpki-client.org