Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/jqWFfTXVEbt-_ZDBMZRhubLJHeE.roa
File: jqWFfTXVEbt-_ZDBMZRhubLJHeE.roa (raw, json)
Hash identifier: XDKPr96yQvov3k2upjPRd1ASfmWNZj4Zw/bSCbtpJJo=
Subject key identifier: 8E:A5:85:7D:35:D5:11:BB:7E:FD:90:C1:31:94:61:B9:B2:C9:1D:E1
Certificate issuer: /CN=835fbb927b295062b7d0a72047b6b4aa1b0f9b29
Certificate serial: 01856D13E687C74491FAE2FB5337DDE3FA0E
Authority key identifier: 83:5F:BB:92:7B:29:50:62:B7:D0:A7:20:47:B6:B4:AA:1B:0F:9B:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1-7knspUGK30KcgR7a0qhsPmyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/jqWFfTXVEbt-_ZDBMZRhubLJHeE.roa
Signing time: Sun 01 Jan 2023 11:24:58 +0000
ROA not before: Sun 01 Jan 2023 11:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206909
IP address blocks: 185.172.104.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:e6:87:c7:44:91:fa:e2:fb:53:37:dd:e3:fa:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835fbb927b295062b7d0a72047b6b4aa1b0f9b29
Validity
Not Before: Jan 1 11:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ea5857d35d511bb7efd90c1319461b9b2c91de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:ef:ee:53:55:38:fa:b4:4d:40:51:d6:98:
8b:3d:2a:c8:e7:fd:ac:6f:74:91:b9:a4:d0:3d:18:
d5:12:e4:d9:ee:60:1a:be:39:19:1f:f2:0b:5f:6d:
d6:97:80:eb:a6:67:89:b9:16:ff:a8:7e:3a:4b:15:
64:39:12:f2:4c:a6:87:4e:d8:7d:84:88:a8:8c:c4:
aa:55:f5:15:c0:c4:fa:18:84:85:f8:8f:31:43:c0:
96:c8:99:d3:d9:69:ca:7e:a0:b2:3f:0b:36:87:cd:
95:6d:1d:f8:4b:49:51:00:c5:00:dd:97:1c:bd:9a:
cc:01:fe:fc:69:d0:6e:a0:56:d7:b8:6e:c7:e1:a5:
41:98:36:38:5a:b4:c6:86:33:ee:e7:97:5c:7e:a3:
a1:5d:58:15:f2:e9:fb:4d:3e:57:3d:13:88:6e:63:
a5:79:ea:58:35:78:07:23:3a:86:b9:f4:cc:4a:11:
a2:7e:ed:a3:21:8c:9c:18:24:ca:51:49:f0:f0:be:
9a:ed:4b:dd:d1:88:01:e4:b3:1d:cb:92:d9:c4:df:
4c:e0:2e:08:31:b5:9f:8a:ed:67:91:c7:57:cc:0f:
c6:27:1e:91:dd:93:50:18:8a:7f:b9:0a:19:68:70:
7b:e9:1f:4c:70:01:e5:8a:dc:93:4d:7d:85:f8:39:
39:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A5:85:7D:35:D5:11:BB:7E:FD:90:C1:31:94:61:B9:B2:C9:1D:E1
X509v3 Authority Key Identifier:
keyid:83:5F:BB:92:7B:29:50:62:B7:D0:A7:20:47:B6:B4:AA:1B:0F:9B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1-7knspUGK30KcgR7a0qhsPmyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/jqWFfTXVEbt-_ZDBMZRhubLJHeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.104.0/23
Signature Algorithm: sha256WithRSAEncryption
77:b2:aa:90:34:c1:d8:7d:5e:86:c1:79:54:06:d8:d3:41:a3:
f8:45:c5:f9:7f:cf:37:18:4b:f7:bd:76:c9:8a:52:cf:a0:5d:
37:7a:15:10:40:32:9c:50:a3:ae:be:be:77:a4:23:70:d0:d6:
c1:fe:6d:4a:98:c8:ed:fa:bf:cc:30:f6:29:f3:33:45:86:b5:
82:c2:a6:42:ef:43:08:ec:16:3f:35:8a:5f:d6:67:83:13:fa:
0d:19:53:9b:58:41:29:90:48:4b:d4:77:12:c7:ba:66:d4:8e:
46:a1:08:d2:ae:84:0e:18:9a:20:2a:3c:8f:3b:1f:73:e2:d6:
df:f0:7d:db:84:26:a7:1b:9e:51:49:84:1a:f3:7e:51:b9:32:
8f:ef:c5:31:d4:f7:3b:cd:77:68:14:4e:0f:92:ea:ca:92:15:
a7:a2:64:41:67:17:d7:5e:6d:20:e7:5a:28:1d:25:b4:fb:78:
c6:b3:c5:7f:c0:21:17:f1:48:78:92:be:c3:aa:11:89:40:76:
1a:e4:63:ee:33:8a:a0:65:8d:d6:18:57:dc:62:bd:dc:48:cb:
a9:c8:a7:25:84:6c:83:97:86:bd:1f:9e:c2:de:1e:77:8f:45:
0f:0e:02:f8:67:74:a3:8a:c4:da:31:f2:7a:53:c3:10:98:3d:
00:90:8a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:02 2024 by rpki-client on console-fra.rpki-client.org