Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/h7R9ozfMNeJuAzFxL6AZhiDj5ho.roa
File: h7R9ozfMNeJuAzFxL6AZhiDj5ho.roa (raw, json)
Hash identifier: BJIOVcr6CFd5JOIVkDLbSkKDDaNYlfVf/Ch9l6X4khQ=
Subject key identifier: 87:B4:7D:A3:37:CC:35:E2:6E:03:31:71:2F:A0:19:86:20:E3:E6:1A
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019206EC65A7AD62E2A2D368CCAE24ABF4A7
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/h7R9ozfMNeJuAzFxL6AZhiDj5ho.roa
Signing time: Wed 18 Sep 2024 20:56:48 +0000
ROA not before: Wed 18 Sep 2024 20:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57152
IP address blocks: 185.184.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 12:36:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:06:ec:65:a7:ad:62:e2:a2:d3:68:cc:ae:24:ab:f4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Sep 18 20:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87b47da337cc35e26e0331712fa0198620e3e61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:97:7c:36:ed:3a:5b:9b:9f:87:91:91:80:
19:f8:93:e9:1b:1e:28:99:89:ca:0c:be:9d:3d:fb:
ec:43:fd:9f:af:52:3c:63:1b:52:b3:d7:fd:e6:68:
69:3e:67:e2:ed:6c:1d:0c:c9:d4:dd:3e:0f:bb:55:
50:0f:02:96:1e:4b:9b:03:cd:bd:cb:e4:24:41:b0:
e7:66:1e:84:77:de:a1:40:20:88:ea:4c:a2:b1:ed:
2c:d3:6d:af:b3:92:1e:1b:85:9d:3a:83:28:05:da:
34:44:43:16:08:18:52:df:66:0a:9e:90:59:3b:ac:
b2:83:0b:27:da:b5:da:70:e1:9a:a6:7d:76:60:7f:
ee:9a:cf:0c:4d:b0:27:19:37:62:b9:87:6a:4a:9e:
74:10:9a:5f:1f:a1:e6:b5:a0:92:88:65:b1:d6:dc:
18:5c:0d:db:95:f3:8f:ef:7b:10:f9:89:f2:51:69:
57:3b:91:70:97:98:16:88:55:5e:39:07:4e:c0:c9:
53:7b:04:19:3c:e0:b4:de:98:7d:7e:c0:bf:e4:26:
81:e6:f9:be:bf:b6:40:59:61:cb:86:ed:c7:a8:a7:
ce:77:db:33:94:1f:4b:86:a8:6e:29:d3:f6:5f:e8:
d8:86:36:59:e4:9d:95:78:f2:af:2c:45:2d:76:88:
50:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B4:7D:A3:37:CC:35:E2:6E:03:31:71:2F:A0:19:86:20:E3:E6:1A
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/h7R9ozfMNeJuAzFxL6AZhiDj5ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.220.0/24
Signature Algorithm: sha256WithRSAEncryption
30:11:40:ca:dc:e1:92:a2:e9:53:99:8e:a8:0b:04:8a:f2:d5:
04:74:9f:bc:d6:ff:bf:71:d7:6a:da:9d:d1:40:55:10:fa:8e:
4e:e6:13:6e:ca:fb:46:ae:71:6a:9e:ba:e9:cd:04:65:0b:32:
0f:03:4a:ea:b1:8e:fe:40:7a:f6:df:4a:f4:4d:f6:dd:4e:4b:
8d:89:ea:55:5b:4b:65:f5:d2:5f:37:38:c2:f2:1b:c1:33:01:
87:3f:84:60:cd:36:04:71:23:95:35:a6:19:0f:89:83:f7:6b:
56:c2:3c:b5:84:85:22:0a:07:87:a0:9f:10:dd:1e:5c:b1:8a:
89:69:e8:80:37:c8:f8:dd:20:fc:49:b3:8a:3e:f8:11:2f:94:
e3:b0:96:13:68:79:1a:7c:b4:db:cf:c1:73:3d:9b:1b:d5:7c:
28:c9:ac:a6:ce:87:11:e8:17:bf:7a:34:0a:ff:19:86:1d:9b:
db:85:84:2d:dc:41:90:d0:03:37:ae:2b:36:5e:12:e9:f5:13:
c1:9a:6b:6f:de:96:d8:65:13:28:5a:af:30:70:cf:50:ca:d1:
fb:e5:42:bf:fa:22:e6:76:22:86:19:d8:f4:76:f4:f1:38:e8:
f1:47:5d:16:43:db:c3:c9:35:ba:0e:16:e2:b3:04:a0:1f:74:
41:39:8b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 15:05:54 2024 by rpki-client on console-fra.rpki-client.org