Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/7SzzV0A-C4-kG8Gl5ci-wZFW3u8.roa
File: 7SzzV0A-C4-kG8Gl5ci-wZFW3u8.roa (raw, json)
Hash identifier: 2cKbcKVn6nfi6fIq+MeF+cG5IZ2B+IUYDMrrA1AQjMQ=
Subject key identifier: ED:2C:F3:57:40:3E:0B:8F:A4:1B:C1:A5:E5:C8:BE:C1:91:56:DE:EF
Certificate issuer: /CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Certificate serial: 01856B00A762B727239E38495109362814F9
Authority key identifier: 7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/7SzzV0A-C4-kG8Gl5ci-wZFW3u8.roa
Signing time: Sun 01 Jan 2023 01:44:43 +0000
ROA not before: Sun 01 Jan 2023 01:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209061
IP address blocks: 185.223.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:00:a7:62:b7:27:23:9e:38:49:51:09:36:28:14:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Validity
Not Before: Jan 1 01:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed2cf357403e0b8fa41bc1a5e5c8bec19156deef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:99:f6:e1:46:c5:d1:07:71:ed:0e:d1:11:
58:53:f3:00:f4:28:a6:cd:0a:05:a1:17:3c:ca:7e:
37:d6:a7:f9:51:2c:1d:08:a7:36:16:01:41:95:5d:
14:41:ce:62:84:8e:aa:79:c2:ba:13:3a:76:0d:20:
b9:74:b1:78:66:a3:aa:dd:55:88:08:7a:a4:ec:d6:
0f:16:e0:dc:6c:50:08:19:76:79:03:92:65:d0:7d:
11:20:06:57:a6:d8:57:25:02:b3:74:e4:cd:97:80:
50:de:43:ef:77:cf:07:5a:6f:c3:c1:1b:2d:c9:2e:
01:d9:1d:c0:f9:72:16:fd:eb:d1:db:9e:5b:7c:ce:
e7:a7:44:41:5a:ab:ee:f1:b3:4f:dc:bc:e1:ed:f8:
0c:30:a8:75:1e:66:a0:3b:91:26:8c:5e:e2:ab:5d:
1d:46:f6:83:0b:36:51:3d:0d:78:b9:22:c7:9e:5c:
25:46:aa:91:8b:c4:43:b7:73:50:54:00:72:ef:7e:
c5:15:d9:a8:e6:e3:15:92:2a:49:5b:29:04:59:90:
72:55:17:5c:e2:c8:e9:15:c0:54:9a:fa:19:d3:2a:
a0:a3:57:fd:c0:89:e7:4b:67:3c:75:e2:a9:4b:c1:
48:ad:c2:aa:d6:2d:36:bd:cb:7c:9f:91:2b:00:ec:
7d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2C:F3:57:40:3E:0B:8F:A4:1B:C1:A5:E5:C8:BE:C1:91:56:DE:EF
X509v3 Authority Key Identifier:
keyid:7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/7SzzV0A-C4-kG8Gl5ci-wZFW3u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.215.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:bd:62:59:5f:24:58:ba:e5:a9:71:8a:b2:4b:b1:ff:c2:7a:
ec:2f:34:c3:60:51:d5:59:6c:b1:44:73:50:91:ed:fb:10:75:
51:97:a5:67:db:b1:4e:6c:67:c6:07:fc:6e:3e:f4:32:a1:c1:
2f:7d:3d:16:15:11:a5:51:b0:0e:37:69:03:2d:2a:c2:86:29:
9d:61:89:ac:90:80:01:d3:be:89:e8:99:7f:a4:ab:01:2e:72:
15:5e:62:01:97:1e:7f:79:9b:4d:96:04:b7:52:3c:4b:96:76:
17:ad:e8:a6:fc:7d:12:05:a3:93:3e:02:7a:45:d5:1f:d7:78:
43:d3:58:c2:97:b0:4d:14:39:f6:65:43:e2:ae:87:fb:09:f4:
bc:6e:d7:4b:45:f3:a3:9a:7f:f6:f2:3e:3c:c3:0b:28:b9:63:
a1:a4:c0:a5:e3:65:d5:82:f7:68:9f:4f:27:3b:fb:12:35:0f:
cb:7e:eb:be:e2:8a:b1:d0:1d:de:3f:a7:0d:8b:3e:a5:93:84:
60:cb:a2:4d:63:55:83:19:b9:10:95:d7:41:2b:a6:5e:e5:ff:
d7:66:21:b1:01:34:e8:5b:d9:7b:46:bc:ea:a2:c3:ba:7e:f3:
f0:e6:4b:6a:5c:84:40:d5:22:94:f8:04:c6:36:7b:f2:d2:b5:
aa:63:e0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:57 2024 by rpki-client on console-fra.rpki-client.org