Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/pcPfSM_gFh-JmhHQIto7ePF7b5w.roa
File: pcPfSM_gFh-JmhHQIto7ePF7b5w.roa (raw, json)
Hash identifier: 7oj47gFAKZZUWyxJAvBmbXiS2WwjHDnGus+EnJUlgBU=
Subject key identifier: A5:C3:DF:48:CF:E0:16:1F:89:9A:11:D0:22:DA:3B:78:F1:7B:6F:9C
Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial: 01904AFA632F83540825D53712AF72B025A3
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/pcPfSM_gFh-JmhHQIto7ePF7b5w.roa
Signing time: Mon 24 Jun 2024 16:00:41 +0000
ROA not before: Mon 24 Jun 2024 16:00:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 185.233.165.0/24 maxlen: 24
185.233.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jul 2024 11:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:fa:63:2f:83:54:08:25:d5:37:12:af:72:b0:25:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Validity
Not Before: Jun 24 16:00:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5c3df48cfe0161f899a11d022da3b78f17b6f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:01:f0:3b:04:ef:30:1f:5a:c8:3a:26:f0:85:
60:45:6b:76:a4:29:bc:71:2d:9c:05:18:57:04:d8:
6c:00:88:a6:cd:62:00:41:da:ce:c6:ab:94:b2:2b:
53:ce:0f:1b:a5:c2:d5:aa:89:b0:a1:ff:3b:58:0f:
e8:4b:bd:3c:5d:f8:a6:12:16:37:e2:c5:fd:f8:98:
e6:fb:7d:ed:ed:94:63:40:3a:38:54:88:15:3e:c0:
8f:dd:e0:1a:f0:52:69:9c:a0:83:7d:cc:66:4a:25:
1b:0c:95:88:86:3c:13:4d:a7:56:3a:5e:ed:9a:c6:
c9:cb:8d:f9:6b:8d:b7:81:3c:f1:56:58:39:fb:4b:
ce:77:19:0d:43:3c:63:c7:30:45:32:f0:7f:e6:52:
95:1c:23:bb:0c:17:07:27:6b:96:7c:bf:e9:ca:8f:
d5:8c:5f:30:31:94:c4:2f:41:fc:37:2f:d8:e9:7c:
3c:4f:9c:3e:af:ee:10:8b:b6:83:cc:4c:66:fe:a3:
53:37:1d:66:24:46:7a:cd:4b:3f:b3:b7:b0:b2:f8:
ad:46:b5:11:2b:37:1d:62:62:e2:ff:24:38:97:1a:
6c:e0:f9:43:0b:db:a6:f0:c8:27:4f:18:33:2a:a7:
36:36:8e:12:e1:36:57:9f:41:7c:bd:80:85:a8:81:
ec:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C3:DF:48:CF:E0:16:1F:89:9A:11:D0:22:DA:3B:78:F1:7B:6F:9C
X509v3 Authority Key Identifier:
keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/pcPfSM_gFh-JmhHQIto7ePF7b5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.165.0/24
185.233.167.0/24
Signature Algorithm: sha256WithRSAEncryption
44:09:b4:84:8d:2c:17:15:09:25:6e:03:11:82:5a:15:00:bc:
69:85:10:5d:34:86:0c:52:fb:dd:96:b4:b5:5d:66:40:1d:89:
f9:59:b7:fc:7c:c7:14:6a:36:05:31:55:0b:d1:84:f7:3c:f6:
bb:27:5a:08:6f:0d:68:b7:01:b7:41:02:24:5b:8b:9e:70:d1:
ba:b9:88:81:31:11:cb:e0:65:3c:a8:6e:2a:dc:bb:96:8c:4b:
db:28:5c:11:2a:61:e2:3b:84:d4:de:63:42:c1:4a:ed:a2:5f:
f5:71:8a:6a:42:53:2f:66:9c:aa:36:f5:d8:06:35:0f:ad:c3:
e6:7f:21:cd:7d:99:8e:59:4d:79:1a:4d:fd:9f:b5:bd:0e:ea:
18:8a:40:98:dd:b2:2f:51:e2:d7:51:37:74:b6:e8:0c:a7:e2:
53:45:0a:fb:46:0c:3f:fa:81:e1:ff:0a:40:28:ad:46:90:48:
55:c0:0f:93:e0:2c:18:84:38:f1:59:14:83:c8:b2:80:3d:db:
67:c9:35:bd:50:ca:20:77:ea:43:4f:48:5c:3d:7a:8e:67:d1:
c2:d2:ba:ee:bb:2f:38:df:1e:9c:19:bb:8f:f5:a8:b3:3d:2b:
ba:32:ca:a2:58:56:41:cc:c6:5b:13:78:ca:45:38:e2:b2:97:
08:f0:19:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 14:05:03 2024 by rpki-client on console-fra.rpki-client.org