Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/D53xfzFz8ejNPlMGqwacgJfs5tg.roa
File: D53xfzFz8ejNPlMGqwacgJfs5tg.roa (raw, json)
Hash identifier: R3ixo3pouNxuHNKtQ54FUexaTZ6U+uxpoPL9c/lR8Bg=
Subject key identifier: 0F:9D:F1:7F:31:73:F1:E8:CD:3E:53:06:AB:06:9C:80:97:EC:E6:D8
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 01856ED4E7A5FE3BE1A73EFE33903D1F4EBB
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/D53xfzFz8ejNPlMGqwacgJfs5tg.roa
Signing time: Sun 01 Jan 2023 19:35:24 +0000
ROA not before: Sun 01 Jan 2023 19:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206512
IP address blocks: 185.165.78.0/24 maxlen: 24
185.165.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e7:a5:fe:3b:e1:a7:3e:fe:33:90:3d:1f:4e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: Jan 1 19:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f9df17f3173f1e8cd3e5306ab069c8097ece6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:76:f8:e1:5d:4c:53:35:ab:05:30:79:ce:f2:
5a:6a:07:94:17:1b:50:99:30:96:d1:52:e5:6c:2b:
f4:3a:5f:dd:80:76:fc:df:9b:a5:ef:0b:a2:b1:b9:
2b:dd:99:aa:e6:71:d9:24:8b:8f:c5:46:18:de:e8:
40:d6:46:25:3e:c4:78:6d:e3:6b:96:09:98:23:d6:
e4:82:f1:e7:ef:98:0e:2f:5e:fa:ab:a2:56:50:5e:
e8:a4:2e:56:1b:7f:62:6e:c5:dd:73:66:80:aa:a0:
b5:d0:5b:1e:bb:63:4a:d0:9b:07:43:c3:77:16:a5:
58:f2:21:bf:76:58:95:c6:31:67:b5:49:eb:d6:8a:
0f:fa:d8:0a:5e:19:64:87:0c:7b:d8:ca:ea:9c:75:
ff:1f:a1:f1:85:9b:37:c5:b2:ef:5e:d0:e7:5c:9a:
36:b0:f5:ee:03:60:37:2c:b8:9d:a6:7b:7d:aa:59:
29:4c:a1:d8:58:0b:dd:47:7c:dc:9f:21:61:68:3e:
58:9c:13:61:fe:a9:bf:b3:b8:a8:b7:dd:1d:ff:10:
b6:d3:94:68:32:7e:ab:d6:f1:00:f9:31:ae:99:c1:
60:c7:5a:0c:4e:e5:38:74:6b:52:7c:05:91:f0:99:
28:78:f5:68:01:63:ce:54:4f:95:6d:ef:76:16:4a:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9D:F1:7F:31:73:F1:E8:CD:3E:53:06:AB:06:9C:80:97:EC:E6:D8
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/D53xfzFz8ejNPlMGqwacgJfs5tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.78.0/23
Signature Algorithm: sha256WithRSAEncryption
22:1c:15:96:3c:90:9a:86:de:92:d3:19:50:5d:f6:23:47:89:
45:4f:ba:5d:a9:d9:db:9a:8b:cf:6e:dd:b2:e6:6a:c9:d7:4e:
af:21:2a:fa:49:13:e3:f7:1c:88:7a:45:ba:fe:be:49:36:15:
eb:56:6d:ed:a0:0f:38:8b:8f:50:0b:aa:4b:f5:65:88:62:9f:
50:77:0c:c8:0f:3a:61:d0:9d:04:f1:c6:93:62:44:1c:8b:53:
39:95:cc:d1:fb:52:a1:4f:39:72:62:1f:d8:ad:03:87:98:e8:
38:54:aa:62:bd:d9:ea:9d:73:a1:35:2d:33:95:f8:71:d0:91:
21:67:0c:8e:85:54:ab:03:c9:3e:11:18:c4:2d:aa:3e:0f:ee:
3c:75:6e:c8:8f:4a:f4:f0:90:62:96:51:84:22:d4:c6:9e:88:
72:e6:9f:82:62:35:f9:26:49:02:f5:43:69:80:80:ad:00:8e:
c8:12:64:1f:30:26:b9:53:07:24:92:14:73:c9:a1:ab:c9:3a:
99:9c:2a:6f:43:6a:31:ed:75:7e:46:6e:22:37:7d:45:e5:09:
57:f1:1a:9c:0c:ee:0b:e7:08:28:86:fb:d3:1e:03:ce:19:48:
0c:f7:87:08:0f:bb:6e:22:0e:80:75:e0:ab:4f:d8:44:56:73:
e4:02:8a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:04 2024 by rpki-client on console-fra.rpki-client.org