Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/wrHaYbPOzOq35cdqKw7wb_voFEo.roa
File: wrHaYbPOzOq35cdqKw7wb_voFEo.roa (raw, json)
Hash identifier: Sn1SOLR5v4PQj087bC3xRIsZHAtlrFBHft8Nyvnp1Mg=
Subject key identifier: C2:B1:DA:61:B3:CE:CC:EA:B7:E5:C7:6A:2B:0E:F0:6F:FB:E8:14:4A
Certificate issuer: /CN=ee3be768d28668f490afb74e9aefe41e03495d7a
Certificate serial: 0185723A3F535A3281FA3527C82AF74ACD6A
Authority key identifier: EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/wrHaYbPOzOq35cdqKw7wb_voFEo.roa
Signing time: Mon 02 Jan 2023 11:24:57 +0000
ROA not before: Mon 02 Jan 2023 11:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25540
IP address blocks: 185.19.224.0/22 maxlen: 24
185.243.16.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:3f:53:5a:32:81:fa:35:27:c8:2a:f7:4a:cd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3be768d28668f490afb74e9aefe41e03495d7a
Validity
Not Before: Jan 2 11:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2b1da61b3cecceab7e5c76a2b0ef06ffbe8144a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:2e:ec:9e:8e:9b:15:81:5f:0b:33:5b:f8:
10:68:e2:75:66:7d:dd:23:ff:98:90:0f:5f:a9:51:
6e:9b:a7:6f:9b:a1:cc:6e:2f:78:0d:e1:eb:59:e3:
e8:44:23:12:aa:b7:cc:86:24:24:76:93:35:b7:49:
a0:0a:4b:18:3e:68:09:9f:fa:45:15:b2:6b:25:02:
ea:1b:8d:15:d8:74:0b:f4:c6:e1:ab:ab:98:82:12:
fd:89:87:aa:f0:d7:d9:71:75:48:27:54:97:f6:40:
c7:5a:c1:0b:88:3a:ed:5e:5a:19:ab:01:6b:f6:c2:
2c:62:0b:d3:7e:e8:f2:f4:76:39:31:81:2a:44:45:
3d:f5:1c:f7:e1:9d:b9:20:be:08:a1:1a:66:98:5f:
1a:13:c6:b9:6f:bc:a2:f9:86:20:da:49:ea:af:4b:
84:82:90:24:4d:c3:f0:2a:c1:41:d9:61:96:8c:5a:
a1:4b:ee:36:eb:16:0f:1a:8e:89:90:87:c4:0f:26:
50:a1:2f:b5:c9:ee:86:b3:c9:b1:d4:c1:09:0d:6e:
1a:e6:3b:d6:ed:f1:c3:5a:39:7e:0e:f4:6f:d1:25:
ed:db:28:de:21:69:15:82:6b:e2:3f:9c:81:c4:30:
9c:34:56:70:9c:f2:6b:09:cd:68:e2:0d:dc:00:86:
10:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B1:DA:61:B3:CE:CC:EA:B7:E5:C7:6A:2B:0E:F0:6F:FB:E8:14:4A
X509v3 Authority Key Identifier:
keyid:EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/wrHaYbPOzOq35cdqKw7wb_voFEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.224.0/22
185.243.16.0/22
Signature Algorithm: sha256WithRSAEncryption
93:53:f3:de:64:e1:d7:31:69:ed:74:32:21:d1:e2:0b:5e:d9:
1f:09:f6:7b:43:4f:8b:8a:20:88:bc:bb:bb:62:31:c8:5d:66:
72:63:90:9d:b6:77:5f:c7:29:3f:f8:37:4f:1c:a7:b2:89:43:
df:5c:dd:88:4f:2e:63:97:49:1a:4f:e9:22:b7:d2:42:99:1e:
58:0c:63:d6:c1:ac:7e:38:0e:ad:7c:06:a8:4c:cc:42:da:f6:
9c:5f:84:3c:eb:76:12:d7:e9:7b:40:a6:fc:ef:19:11:51:93:
42:f3:d6:5b:29:a0:ba:6d:f4:40:11:37:39:bb:49:2d:92:60:
60:59:39:95:62:dd:ee:19:ed:f7:2b:5d:ed:f1:3b:67:96:32:
70:a6:f1:16:fd:dc:b3:1b:f1:d0:87:1f:9f:01:d5:41:9e:2f:
83:04:d1:28:d3:c9:2a:aa:46:98:79:08:06:77:39:4b:c6:7b:
be:03:cf:9e:50:b1:5f:80:8f:f5:0f:13:28:bb:95:3b:ad:b3:
7f:3d:8c:71:4b:12:10:f7:dc:c7:0d:92:2a:ab:a6:2a:fe:db:
40:bd:5c:44:0b:f3:10:77:b1:94:37:48:2d:fd:33:77:c6:9c:
bf:0c:1e:61:cf:cc:e3:0d:5e:0e:96:ab:b7:13:d0:d0:5b:ea:
88:38:f2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:29 2024 by rpki-client on console-fra.rpki-client.org