Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/z5JlKwSyLvYgWjzMzNTQU2kos-4.roa
File: z5JlKwSyLvYgWjzMzNTQU2kos-4.roa (raw, json)
Hash identifier: V1rorli1HWmz8B9Mf3J0TEraaxPqJ/9a5a7LMpS3Xv4=
Subject key identifier: CF:92:65:2B:04:B2:2E:F6:20:5A:3C:CC:CC:D4:D0:53:69:28:B3:EE
Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial: 01918385B2829D11DB997DBFB5A58DE68423
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/z5JlKwSyLvYgWjzMzNTQU2kos-4.roa
Signing time: Sat 24 Aug 2024 08:34:22 +0000
ROA not before: Sat 24 Aug 2024 08:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21840
IP address blocks: 185.233.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 07:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:83:85:b2:82:9d:11:db:99:7d:bf:b5:a5:8d:e6:84:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Validity
Not Before: Aug 24 08:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf92652b04b22ef6205a3cccccd4d0536928b3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:16:db:72:a6:97:81:94:75:8a:3c:3c:d1:
1e:91:89:0d:05:f2:b4:7c:c6:dc:e4:a6:d1:f3:a5:
2b:2b:f3:d0:7f:1c:85:a7:c5:d4:39:59:6b:17:7c:
e2:8f:00:f5:70:9c:87:b6:d6:02:68:92:07:2c:9a:
62:db:fb:65:a7:9d:e5:77:f9:e3:d1:b5:64:51:9b:
4d:91:18:4d:24:99:9d:a4:db:f7:a4:ec:35:8e:b3:
dc:65:b3:a8:38:87:ab:4a:95:2b:44:2b:f4:2c:28:
4a:43:01:a8:01:11:9b:bc:79:a9:1a:8e:16:19:9e:
fe:8d:28:35:06:9a:a3:bf:2b:6b:95:6d:18:2e:45:
e4:5e:3a:35:9a:a4:b6:59:d7:1e:3b:15:df:9c:9c:
47:51:27:6e:7b:58:13:47:f8:fa:1d:36:54:9d:51:
15:72:ac:48:cd:b4:9b:a5:e0:1b:98:97:7d:1f:22:
40:ff:21:9a:fb:8b:c4:e1:2b:ba:de:15:c1:11:cd:
b5:22:83:76:5d:09:37:f8:e3:ec:0a:d0:29:9f:e5:
b1:0a:63:18:e8:15:2c:d1:98:93:f7:98:8c:4a:e5:
3d:93:89:41:f7:8c:b0:36:9d:94:6d:ef:f1:fb:84:
cf:7a:05:05:3d:9a:1f:4a:6e:ee:cd:3a:1d:f4:51:
4c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:92:65:2B:04:B2:2E:F6:20:5A:3C:CC:CC:D4:D0:53:69:28:B3:EE
X509v3 Authority Key Identifier:
keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/z5JlKwSyLvYgWjzMzNTQU2kos-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.165.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b2:f0:0f:34:32:20:22:26:b4:4d:b1:bd:e8:53:38:f6:a8:
c7:19:27:cf:2d:95:e6:fa:66:c9:5d:46:ce:a8:42:37:2b:ce:
95:b3:03:2a:74:1e:5a:48:cb:0b:84:06:b8:d7:fe:3d:2b:60:
23:9e:23:17:75:c9:c9:ff:78:b6:81:0e:87:c2:e8:ee:a2:07:
8a:9e:ea:6f:6b:fd:94:09:9d:b2:93:e7:36:9f:49:a4:bf:32:
1d:fb:e6:24:c9:0f:49:96:ed:96:39:fa:48:4e:01:ae:7d:fe:
37:22:5b:05:d4:e5:ea:41:8f:ff:99:3d:c4:f2:ba:75:73:9f:
52:37:44:b8:83:ac:ef:0e:74:71:36:f5:69:a8:43:27:e0:89:
ac:00:35:7c:a2:64:0d:c9:70:69:d5:2b:65:0e:d2:3f:83:04:
0f:4e:e1:8a:1f:80:36:21:b5:32:3e:c9:dd:20:41:6a:e1:99:
12:a2:f1:d7:55:c7:bc:02:8b:9b:62:d6:06:41:0b:86:5d:48:
e3:10:b6:fe:ab:99:69:10:3a:a6:52:2f:fd:99:fe:19:f1:3e:
6e:0e:59:7e:92:3f:c1:fa:a5:9e:c8:fa:c5:13:b2:24:6a:15:
2f:2b:94:54:3a:1f:20:06:fe:5a:c0:66:6b:b4:e7:30:8b:ce:
63:03:e3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 08:30:05 2024 by rpki-client on console-fra.rpki-client.org