Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/7FFSVOorSyJbvnEFJA9_-S4kGzM.roa
File: 7FFSVOorSyJbvnEFJA9_-S4kGzM.roa (raw, json)
Hash identifier: 0gILEA1Iq3fIiMG1WOkmKiSsi99CexnnLq48Oo4vQoo=
Subject key identifier: EC:51:52:54:EA:2B:4B:22:5B:BE:71:05:24:0F:7F:F9:2E:24:1B:33
Certificate issuer: /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Certificate serial: 01856D940B13E203910F6BC9AB03E30D8A14
Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/7FFSVOorSyJbvnEFJA9_-S4kGzM.roa
Signing time: Sun 01 Jan 2023 13:44:56 +0000
ROA not before: Sun 01 Jan 2023 13:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50710
IP address blocks: 185.118.96.0/22 maxlen: 22
185.118.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Feb 2023 08:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:0b:13:e2:03:91:0f:6b:c9:ab:03:e3:0d:8a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Validity
Not Before: Jan 1 13:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec515254ea2b4b225bbe7105240f7ff92e241b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:83:a5:1e:e6:7a:be:20:ea:31:32:bb:63:
70:f4:4b:6d:1f:e5:35:49:9d:fa:b6:f8:af:9b:5a:
46:5e:41:f6:44:27:48:87:bc:40:b0:1d:0e:58:be:
8a:6c:84:fe:bc:0b:fe:8d:9d:c3:6f:21:01:75:ac:
eb:c2:8b:08:0a:12:3c:df:d2:45:d9:39:b7:11:50:
72:cc:6f:34:aa:a1:a6:7e:65:c2:7c:b5:93:38:e5:
a6:1b:cf:95:a6:42:db:55:40:65:45:ea:ff:90:46:
ac:2f:71:4e:6f:0e:ac:d9:6a:e0:04:e8:0a:3a:50:
15:cb:97:f7:42:9f:42:c3:bd:f5:52:8a:11:78:ec:
3b:aa:c5:89:49:4f:b3:7a:d3:50:f8:32:c6:8e:cb:
81:67:d2:ce:01:76:d1:d0:83:4d:cd:b8:1b:11:0e:
dc:4f:96:65:07:5a:87:03:e8:5f:52:45:f8:5a:fb:
5f:e8:80:fa:51:f8:e2:4c:d1:bf:95:11:c0:0c:e9:
52:0a:7b:73:5b:a0:06:b6:bd:bb:c4:25:7b:10:fa:
46:d5:cf:2b:6c:e6:d9:6a:4f:93:9c:9d:43:e6:d0:
81:c0:56:5c:74:71:40:49:d6:05:55:22:a9:4a:c2:
db:11:15:0e:a1:00:51:5c:e8:3f:f8:4c:9e:8c:80:
37:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:51:52:54:EA:2B:4B:22:5B:BE:71:05:24:0F:7F:F9:2E:24:1B:33
X509v3 Authority Key Identifier:
keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/7FFSVOorSyJbvnEFJA9_-S4kGzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.96.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:5b:1c:2a:ca:a6:df:39:c3:b4:6a:e2:8c:f4:a7:66:73:e8:
88:90:4d:8f:41:2f:77:87:5a:57:13:75:13:5d:95:70:2a:9e:
b4:78:43:b1:64:6d:9a:df:fc:cb:59:9d:17:8b:1d:a6:70:21:
0b:78:f9:5f:f1:3c:1d:21:e0:d4:bd:56:5f:2b:14:a6:1d:07:
28:84:0a:ad:12:10:99:d0:19:b8:49:73:c8:64:10:d7:8c:3e:
b1:69:1e:d7:9d:c6:7b:3e:44:06:11:43:c2:02:76:08:02:17:
8c:27:44:c3:88:ae:58:84:28:31:84:4f:1d:65:a5:f0:31:73:
17:62:62:4b:27:e0:86:59:fc:42:74:55:07:bc:d7:23:9c:a9:
d0:5b:86:77:6c:2a:82:4b:62:05:9e:4b:fb:4a:a9:eb:4a:ae:
56:04:6b:2f:30:2a:5e:b5:3f:00:f2:a1:9c:38:90:e9:b9:4c:
c9:5b:a4:c1:b5:7a:20:51:46:4c:9f:5a:2d:5b:c7:29:18:7a:
53:2e:02:6b:34:b5:32:0c:3a:22:a9:29:62:b2:b6:a5:b8:8f:
71:81:59:a6:21:06:22:f0:4a:b8:4a:08:7e:05:24:ae:48:fc:
19:94:b5:81:17:ad:50:a2:78:6f:ae:66:ff:e9:4c:54:6a:7b:
8e:05:ee:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-fra.rpki-client.org