Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/hDRGpvxDuqgZLOMXIq-3krfZ7Ec.roa
File: hDRGpvxDuqgZLOMXIq-3krfZ7Ec.roa (raw, json)
Hash identifier: m0VfgTkcq/Cj4vgOpPdAOF9p/Klo7W9aSabAefZYhqo=
Subject key identifier: 84:34:46:A6:FC:43:BA:A8:19:2C:E3:17:22:AF:B7:92:B7:D9:EC:47
Certificate issuer: /CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Certificate serial: 01856F14D5B322543A42B743837A882E468B
Authority key identifier: 73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/hDRGpvxDuqgZLOMXIq-3krfZ7Ec.roa
Signing time: Sun 01 Jan 2023 20:45:14 +0000
ROA not before: Sun 01 Jan 2023 20:45:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207778
IP address blocks: 185.86.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Nov 2023 20:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:d5:b3:22:54:3a:42:b7:43:83:7a:88:2e:46:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Validity
Not Before: Jan 1 20:45:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=843446a6fc43baa8192ce31722afb792b7d9ec47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:61:dc:50:38:37:5d:30:c9:32:65:d8:22:
2b:48:db:e8:e4:98:8e:22:6b:de:d6:9e:b2:6e:98:
27:a3:f5:9f:79:cf:3b:bd:db:20:d3:66:2e:6c:f5:
31:3b:19:da:45:54:49:71:35:aa:93:97:13:09:2d:
63:ea:a0:0b:a1:67:57:ad:a5:3f:3b:78:72:8a:fd:
34:f0:63:e8:8e:cf:4a:30:77:2e:2b:0c:1b:9d:50:
ae:53:3f:27:a2:d3:aa:5e:c1:ca:f7:a7:b2:87:f3:
e0:89:9e:b6:bd:f3:3f:cd:28:8c:f8:fa:25:70:72:
7a:6e:f0:44:b2:89:36:45:97:ed:9a:9b:a7:1a:f9:
6f:ca:d9:20:6f:02:62:6a:36:3b:63:62:54:74:ed:
20:a3:dc:ec:1b:26:2d:45:5c:e6:08:e8:c9:56:e2:
e6:a0:d3:d7:f8:9d:0c:06:23:65:03:1d:7f:1c:9b:
76:a1:e4:1b:e3:46:e6:e2:e4:d4:06:d2:da:18:4b:
aa:a1:39:50:df:74:6a:b0:8c:7f:d3:c1:cf:5d:a8:
3e:50:37:32:9b:22:8f:4f:e7:e9:3d:30:a4:ac:3d:
55:d2:9e:6d:16:9b:a0:d0:8a:55:5d:97:bf:07:81:
c6:fa:ab:54:9a:63:59:65:72:21:78:35:f6:17:7e:
b8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:34:46:A6:FC:43:BA:A8:19:2C:E3:17:22:AF:B7:92:B7:D9:EC:47
X509v3 Authority Key Identifier:
keyid:73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/hDRGpvxDuqgZLOMXIq-3krfZ7Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.226.0/24
Signature Algorithm: sha256WithRSAEncryption
90:54:2c:04:07:46:90:ca:c5:ef:d1:ba:ed:17:db:14:34:5f:
e0:ff:30:e2:41:1e:bb:f2:28:1d:8d:7a:2f:af:f6:8d:dd:9b:
64:2c:3c:59:d0:cb:61:72:e3:5e:47:9c:89:b3:df:66:d6:76:
8b:86:95:10:3e:21:61:26:6d:d5:47:b9:0c:f7:fd:21:97:29:
9b:df:24:b0:33:1c:31:92:d4:c8:67:81:47:49:df:99:9c:a0:
ae:91:eb:76:56:f3:cb:51:3b:ce:0a:b1:a6:37:19:70:c6:70:
d4:09:a6:40:18:d7:a4:a9:44:92:ac:bd:d8:4d:97:41:07:3b:
76:f7:6c:cb:03:18:fa:3f:33:bb:ed:a6:9d:6a:37:1b:d8:cb:
02:5a:ad:f9:5a:e2:57:ab:93:87:f5:1d:c4:f1:02:b2:99:c7:
79:e1:cf:b2:64:32:43:0b:72:2c:03:03:ea:ac:66:ef:6e:bd:
36:9a:66:8c:99:47:6a:d7:44:d4:92:da:80:65:b4:00:ea:c0:
54:be:93:3a:7d:44:b3:06:85:6f:57:64:f8:c5:02:54:02:1a:
2d:e2:56:f5:02:f0:0f:b9:75:67:c7:9c:a9:6e:60:42:ee:af:
61:f1:02:62:fe:05:53:d3:63:75:65:62:a3:9e:85:29:89:6b:
77:c4:f5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:55 2024 by rpki-client on console-ams.rpki-client.org