Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/kBdgH-VIqDrLFXey2VoiKjZWp50.roa
File: kBdgH-VIqDrLFXey2VoiKjZWp50.roa (raw, json)
Hash identifier: wQiPK2kc0hvjxW9Glyx6r3c/jujs+iRhjZQu61zrC+E=
Subject key identifier: 90:17:60:1F:E5:48:A8:3A:CB:15:77:B2:D9:5A:22:2A:36:56:A7:9D
Certificate issuer: /CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
Certificate serial: 01856E01EBA489BD40AEC9B6D45A527CF46A
Authority key identifier: E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/kBdgH-VIqDrLFXey2VoiKjZWp50.roa
Signing time: Sun 01 Jan 2023 15:44:57 +0000
ROA not before: Sun 01 Jan 2023 15:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204541
IP address blocks: 185.239.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:eb:a4:89:bd:40:ae:c9:b6:d4:5a:52:7c:f4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
Validity
Not Before: Jan 1 15:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9017601fe548a83acb1577b2d95a222a3656a79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:fa:1d:ca:0e:76:6f:d1:34:6b:6a:57:e4:
e2:41:7a:35:59:eb:66:06:b7:ad:e5:ae:5c:33:79:
1f:f2:c0:54:5d:e7:9d:9a:6c:5b:c9:c6:84:d4:33:
13:83:e0:e5:90:bc:96:ca:75:f5:ee:3b:8c:29:2b:
5a:b2:8e:32:f3:6d:4a:b1:c6:f3:b8:be:ea:6f:d4:
5e:2e:fc:95:8c:bb:a2:11:23:4c:98:d1:91:e1:ad:
ba:41:04:41:6d:e8:2e:fd:75:b3:0e:46:0b:39:22:
d1:a7:18:67:32:6f:b4:c3:04:c3:cc:44:a7:34:ea:
b9:fe:c2:1a:28:92:3b:63:ba:e2:a4:9d:20:09:20:
d7:75:f1:af:54:c0:91:68:00:1c:7a:96:18:76:e8:
86:1f:74:8b:c0:a7:1e:43:a6:84:cd:af:72:65:62:
02:ed:16:6c:1f:99:ca:e7:02:d3:a8:4c:ba:2c:ae:
82:b3:93:27:b8:fb:dc:bc:68:fb:98:18:08:19:48:
c2:a5:59:93:3d:45:8d:c3:70:cb:7f:43:8a:93:25:
52:d6:32:4b:1d:f8:52:8b:34:fd:da:05:91:9f:09:
b2:57:e2:0d:1c:6c:8f:ac:01:ed:f3:27:b5:46:dc:
e7:16:5a:ab:13:21:fc:8e:90:e6:33:a3:02:8b:b5:
49:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:17:60:1F:E5:48:A8:3A:CB:15:77:B2:D9:5A:22:2A:36:56:A7:9D
X509v3 Authority Key Identifier:
keyid:E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/kBdgH-VIqDrLFXey2VoiKjZWp50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.185.0/24
Signature Algorithm: sha256WithRSAEncryption
98:32:4f:4c:97:3d:6c:d2:d7:0b:45:c2:41:d3:07:92:96:78:
21:f6:99:ee:2c:6f:6c:47:94:f2:51:d3:f7:4d:db:f4:5a:fa:
a3:12:37:6b:7c:c8:4d:f6:ce:9c:69:00:c0:63:c8:f0:dc:52:
f0:af:5b:e9:bb:93:7d:67:46:66:94:90:f6:1f:eb:06:2f:27:
47:3b:31:56:d6:33:2f:7f:c1:64:95:7a:8b:c6:ac:d0:d1:5d:
e2:c8:44:42:51:18:cf:84:89:f8:d5:ef:cd:4a:04:ac:fb:e7:
c2:6e:b3:36:3b:50:9a:7c:92:74:b4:c1:33:be:f1:e5:f0:00:
42:e1:26:65:54:93:86:9d:ed:16:51:51:a0:c5:66:40:a0:61:
8b:99:bd:d6:ba:1c:47:c7:c2:f6:66:86:aa:3d:ba:9a:e2:e1:
ee:2b:0d:c3:43:6c:51:68:9c:28:7b:6b:fe:c2:be:4a:b2:d4:
8d:88:d4:be:43:88:a5:ba:6b:4a:38:90:61:ab:91:8d:fd:1c:
eb:07:d1:8f:e1:8b:db:37:77:8e:cf:48:23:74:0c:3a:98:af:
93:b6:71:fe:41:b7:e2:d5:7b:a3:96:aa:2d:3f:7e:e0:fd:f9:
16:9c:4a:23:e0:8e:30:3c:4a:24:3e:a2:57:58:12:a6:ec:32:
7c:7e:22:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:15 2024 by rpki-client on console-fra.rpki-client.org