Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/e_avNbn2SLJgnhASDGqDskMSefc.roa
File: e_avNbn2SLJgnhASDGqDskMSefc.roa (raw, json)
Hash identifier: rvV6kzzByWizdsaeerwwotntcJka0MZcja8hP09pZ8Y=
Subject key identifier: 7B:F6:AF:35:B9:F6:48:B2:60:9E:10:12:0C:6A:83:B2:43:12:79:F7
Certificate issuer: /CN=533eead413a1705fbfcb2adbe90c69f055e275da
Certificate serial: 01856F2FE618D5C0020645C8DE2CA139464E
Authority key identifier: 53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/e_avNbn2SLJgnhASDGqDskMSefc.roa
Signing time: Sun 01 Jan 2023 21:14:48 +0000
ROA not before: Sun 01 Jan 2023 21:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12637
IP address blocks: 185.77.84.0/22 maxlen: 24
185.205.40.0/22 maxlen: 24
149.3.144.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:e6:18:d5:c0:02:06:45:c8:de:2c:a1:39:46:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533eead413a1705fbfcb2adbe90c69f055e275da
Validity
Not Before: Jan 1 21:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bf6af35b9f648b2609e10120c6a83b2431279f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e3:d2:1f:da:4e:0b:12:18:26:ae:38:ef:27:
8f:00:99:ec:96:40:78:5d:47:35:38:a7:d3:b9:40:
b5:00:80:1d:4b:23:d4:23:34:64:e4:42:cf:6c:64:
fb:57:f5:04:4c:16:bd:94:16:86:d8:5e:77:d2:18:
6b:91:9b:71:53:b2:cc:9c:e9:b7:54:9a:86:05:1d:
72:46:65:b7:a4:b2:a9:58:1c:72:71:4b:10:6c:12:
93:bd:4c:2c:f1:ef:fc:6f:55:ee:30:91:9f:ad:fb:
2b:49:0e:45:f9:46:be:6a:4d:02:4a:b5:a2:9a:ad:
97:43:0e:05:9a:80:04:d4:84:f0:ee:2f:48:94:78:
9c:6e:ec:9c:04:68:d7:c4:9c:57:63:a1:bc:f1:b6:
49:09:4f:48:9d:e4:29:87:82:e5:ee:a5:29:8e:0b:
50:cb:9e:37:e0:30:ff:5e:35:f6:41:ac:8b:d7:f3:
35:fd:bd:dd:03:c6:a2:06:ec:23:4c:eb:9b:91:91:
5b:11:8f:2a:f2:84:d7:a8:ba:11:e9:01:fb:0b:6e:
66:1c:ae:cb:70:c5:29:50:0c:72:c5:98:4a:43:1b:
99:21:9c:e9:04:b9:40:2f:78:4a:68:2a:d3:7e:d5:
02:fb:56:74:b3:33:07:62:eb:bc:3c:38:97:46:0f:
68:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F6:AF:35:B9:F6:48:B2:60:9E:10:12:0C:6A:83:B2:43:12:79:F7
X509v3 Authority Key Identifier:
keyid:53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/e_avNbn2SLJgnhASDGqDskMSefc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.3.144.0/21
185.77.84.0/22
185.205.40.0/22
Signature Algorithm: sha256WithRSAEncryption
16:fa:50:20:ac:f8:f2:88:13:99:77:a2:4d:6b:9e:14:45:28:
04:03:4f:d2:ab:bd:1a:53:d1:b2:f9:f4:9a:b1:cb:79:63:a7:
e6:fb:22:b5:63:bd:78:b3:a2:25:44:da:12:d1:13:e9:4b:15:
29:83:aa:e4:0b:30:96:08:49:74:87:81:db:3b:3d:7a:24:70:
1e:14:18:da:1d:fe:99:8f:a0:84:67:a6:59:ed:3c:43:b5:b0:
85:ed:fe:e7:b4:a5:b5:68:48:d6:42:a1:a0:28:03:40:91:f0:
01:e5:9d:a8:3e:cc:ac:11:ff:22:57:76:89:7d:cb:b4:53:d1:
16:5b:4f:7d:e0:8b:9e:57:36:50:df:3d:eb:61:2d:da:85:1f:
48:4b:ce:60:9c:f7:a7:9e:ff:0d:8f:d7:52:32:62:ca:e1:62:
8e:77:65:ba:f4:7e:5d:23:cb:04:cd:6c:ad:7c:a7:4d:5a:f4:
ed:49:b4:66:b3:6c:ce:dd:61:42:f5:f4:be:6d:d5:1d:bc:38:
13:48:0a:50:b2:fb:24:97:29:d1:46:d1:9a:a4:10:d9:5d:d0:
cb:6b:df:c1:51:66:e5:90:e1:f9:a7:4b:c0:ad:4f:bc:a3:07:
53:ee:0e:89:1b:01:2e:c0:18:74:13:2b:20:ba:31:8c:0a:91:
fe:83:aa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:27 2024 by rpki-client on console-fra.rpki-client.org