Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/lIc7sFJEV6S7y1fbC84ooCcmJ5s.roa
File: lIc7sFJEV6S7y1fbC84ooCcmJ5s.roa (raw, json)
Hash identifier: yfh+7GtwmbaomdqZK2iH9Iw/Ew1uqRBdQI7y/0oTwSA=
Subject key identifier: 94:87:3B:B0:52:44:57:A4:BB:CB:57:DB:0B:CE:28:A0:27:26:27:9B
Certificate issuer: /CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Certificate serial: 01857155277C8712088C4FB282673A238A52
Authority key identifier: 1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/lIc7sFJEV6S7y1fbC84ooCcmJ5s.roa
Signing time: Mon 02 Jan 2023 07:14:44 +0000
ROA not before: Mon 02 Jan 2023 07:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62357
IP address blocks: 185.39.184.0/22 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:27:7c:87:12:08:8c:4f:b2:82:67:3a:23:8a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Validity
Not Before: Jan 2 07:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94873bb0524457a4bbcb57db0bce28a02726279b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e3:e3:16:fe:da:96:07:2d:54:11:07:1d:16:
ca:8e:f1:47:bf:e5:69:f4:c8:08:27:4f:15:f2:0a:
ec:81:e5:04:5e:ca:84:c4:cc:2e:fc:60:87:e3:28:
65:eb:3f:94:5a:f9:b0:d3:8a:c1:cb:c5:2d:71:fb:
0f:c7:be:4a:25:e4:1a:8d:c3:2d:3f:b6:77:4a:fd:
00:49:5e:a3:24:7f:36:0a:99:ff:fc:97:80:93:98:
61:34:b2:68:d8:61:43:fa:6f:3a:77:61:78:b3:1b:
ad:00:10:7c:8b:df:b4:2a:77:7a:6f:b2:d9:97:d1:
97:f6:21:b7:a0:13:3a:0d:0d:e9:86:aa:5c:e3:e0:
b8:be:36:80:6e:ab:f9:58:27:9a:ac:f2:0f:bb:c9:
67:db:33:c2:e3:35:20:96:41:db:d0:73:55:db:7d:
25:68:ac:08:b9:a2:98:3d:90:fe:fc:0b:fd:62:e0:
7a:8f:27:36:9b:42:b1:d6:eb:fb:cf:a4:e7:8b:b7:
08:39:12:36:b4:95:79:cc:b4:4b:c5:01:1b:bf:3a:
15:6d:9b:66:3f:3a:4d:e6:f7:a2:d2:fe:e0:ec:2f:
f8:38:a4:34:8c:42:83:41:12:ee:a0:e9:28:ba:56:
47:ba:d6:91:5d:68:19:f3:55:97:85:ce:86:a5:68:
47:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:87:3B:B0:52:44:57:A4:BB:CB:57:DB:0B:CE:28:A0:27:26:27:9B
X509v3 Authority Key Identifier:
keyid:1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/lIc7sFJEV6S7y1fbC84ooCcmJ5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.184.0/22
Signature Algorithm: sha256WithRSAEncryption
76:f6:cf:02:72:09:89:d4:13:6b:91:f3:9d:d3:27:70:52:56:
64:72:75:9d:98:73:9e:ae:df:fb:df:e7:8b:77:1e:f4:0d:a8:
f5:bd:6d:5b:ac:1d:06:d1:99:25:2b:bb:b2:2d:de:03:75:c6:
ad:c4:27:62:48:7f:45:11:df:a2:b9:2b:76:ee:1a:96:08:a3:
3f:e9:59:df:4f:58:96:18:e8:34:17:81:ef:45:d0:e0:01:d8:
33:cb:21:b3:a9:20:14:c2:a3:04:3f:af:88:f3:16:f2:c7:3b:
37:c2:eb:e0:f5:c0:0a:3e:9e:3f:b2:bf:d7:0d:0d:02:96:18:
c0:7f:e1:fa:34:20:89:20:0c:14:6a:e6:4f:1b:95:dc:0f:cf:
ad:25:0a:17:56:ab:84:37:29:1d:b3:f1:ec:3d:75:42:c4:86:
2f:f9:84:a2:01:9c:af:79:45:b5:fe:14:7c:87:4d:df:b7:77:
2b:ef:99:93:ae:44:7c:25:1e:a7:96:82:c9:d6:c4:41:de:b4:
70:60:4b:d2:08:29:a2:17:21:e5:0e:55:0a:b9:fd:21:df:02:
26:38:f2:d6:19:9a:0f:1e:cf:1f:c7:75:f5:5f:d9:8d:fa:d8:
c5:43:44:9e:c7:b4:37:63:60:80:69:09:03:1e:4d:6c:a3:f2:
a3:ad:48:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:25 2024 by rpki-client on console-fra.rpki-client.org