Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/7-LnJ-EF3ybUubYiFCLn8pKgxqM.roa
File: 7-LnJ-EF3ybUubYiFCLn8pKgxqM.roa (raw, json)
Hash identifier: cF3hDbYe6/f8MsecpNW4nA8KS1QFyTVguLBGxaTprL0=
Subject key identifier: EF:E2:E7:27:E1:05:DF:26:D4:B9:B6:22:14:22:E7:F2:92:A0:C6:A3
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 01856ED4E5EBD07229A67A0A0A7074E92410
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/7-LnJ-EF3ybUubYiFCLn8pKgxqM.roa
Signing time: Sun 01 Jan 2023 19:35:24 +0000
ROA not before: Sun 01 Jan 2023 19:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42216
IP address blocks: 185.165.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e5:eb:d0:72:29:a6:7a:0a:0a:70:74:e9:24:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: Jan 1 19:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efe2e727e105df26d4b9b6221422e7f292a0c6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:86:c6:7a:fb:05:f9:50:4c:9b:63:dc:44:50:
4f:fd:fb:64:6d:59:ef:46:1b:f2:ed:76:41:c2:0c:
b3:b8:f9:c5:e5:0f:d3:d1:ee:db:42:12:91:e2:43:
57:b1:67:e9:96:22:0e:15:88:7a:21:75:87:4c:76:
d7:3a:4d:6f:71:ff:dc:0f:f3:10:64:40:fa:de:97:
8f:82:51:25:e2:bf:79:fb:a1:a1:a7:d3:87:08:29:
0d:66:ef:60:41:35:9e:29:33:f3:e8:94:66:3d:37:
73:ab:9a:be:37:96:74:a3:9b:5b:d4:18:d9:8c:52:
c5:d8:a8:10:f1:69:4c:fb:ce:5f:d9:6e:55:cd:d9:
f3:77:57:51:ac:62:9e:50:1c:6d:c5:41:98:57:da:
b3:cb:04:fe:70:4b:55:a6:19:1e:8d:cc:cd:c3:85:
60:df:d2:b4:22:a8:1a:d6:68:16:9b:28:b3:e6:0a:
3e:f9:82:48:95:aa:ba:23:53:4a:35:7a:d1:1c:24:
20:3c:4a:5e:c4:c7:57:5a:00:a8:18:66:47:70:18:
6c:46:00:55:19:2a:4b:eb:e5:a4:1c:44:cd:57:69:
64:6c:64:47:7e:7c:54:2f:58:15:82:63:b4:5c:ea:
12:a0:3a:9a:c7:3d:5c:b5:54:ff:b7:ea:9c:09:a0:
ad:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E2:E7:27:E1:05:DF:26:D4:B9:B6:22:14:22:E7:F2:92:A0:C6:A3
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/7-LnJ-EF3ybUubYiFCLn8pKgxqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.76.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:ae:14:31:78:85:78:26:af:1f:29:2d:41:9f:e5:c8:46:a5:
cd:68:3a:82:55:cc:be:33:f7:14:1a:c5:a2:d9:89:13:f4:ce:
57:27:d4:18:27:51:ad:25:28:61:bd:3b:7b:3a:34:c5:7f:b8:
eb:ac:e0:fb:ac:6d:36:cc:2e:b5:d6:2d:50:64:9b:48:f9:79:
1c:6a:06:58:b1:fd:84:97:0c:03:21:db:e7:30:26:ca:bc:81:
38:36:53:01:6d:4b:d9:93:01:d4:ef:d3:62:c3:c2:b6:50:9d:
2e:21:27:25:81:7b:58:c3:b6:13:6f:9a:92:f1:69:3d:0d:cf:
4f:02:f2:83:f3:6c:51:12:61:05:14:78:ae:fb:df:10:0e:63:
17:a7:27:40:9d:7b:8e:2e:4c:70:e6:7a:d3:96:61:ae:c0:b1:
66:51:06:5f:18:d2:15:98:d1:9a:cb:eb:21:d5:b5:f8:66:89:
b5:f5:77:03:08:72:eb:bb:6a:a9:d4:3f:b3:4f:57:97:10:2a:
59:46:81:1c:71:7c:45:fd:db:0b:0c:4b:8b:cb:a6:8d:fb:92:
b3:38:05:19:7b:b1:2a:72:19:30:bc:de:e8:54:22:c7:b0:94:
01:0d:72:29:59:87:6f:55:6a:7e:52:41:20:83:50:e6:b6:7c:
da:50:15:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:06 2024 by rpki-client on console-ams.rpki-client.org