Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/wFPff1KX5FV3h1JPvhkOwgqrqf4.roa
File: wFPff1KX5FV3h1JPvhkOwgqrqf4.roa (raw, json)
Hash identifier: u074OMTs6a/qLuP8S1GcmTl1HyO1NWKRoLns6TpNGb4=
Subject key identifier: C0:53:DF:7F:52:97:E4:55:77:87:52:4F:BE:19:0E:C2:0A:AB:A9:FE
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0185720C436F05430C54AAC010C2C31D968F
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/wFPff1KX5FV3h1JPvhkOwgqrqf4.roa
Signing time: Mon 02 Jan 2023 10:34:44 +0000
ROA not before: Mon 02 Jan 2023 10:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44024
IP address blocks: 185.225.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:43:6f:05:43:0c:54:aa:c0:10:c2:c3:1d:96:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 2 10:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c053df7f5297e4557787524fbe190ec20aaba9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:35:2a:bb:2c:35:9a:63:7a:62:f5:ca:ea:38:
1b:69:30:0b:e3:70:f1:dd:5c:83:6b:dc:dd:12:48:
a0:a4:61:84:b4:0d:dd:af:da:8b:c8:92:43:70:93:
f4:eb:af:91:a4:e5:40:aa:2c:f0:7d:b4:73:9f:20:
4f:10:01:26:4b:b5:04:9c:54:62:60:25:2e:23:55:
b3:9b:bd:e0:85:d0:04:50:20:d3:68:9a:98:bd:62:
6a:50:f6:e7:c4:10:c5:91:0d:4e:6d:cf:d0:63:04:
46:72:3e:1a:5f:54:d2:63:7e:57:97:a9:d1:02:e9:
38:77:8b:4a:a2:6c:a1:bb:49:4a:20:7f:58:8f:0a:
1f:4a:21:61:f8:e8:ba:d3:4c:98:d7:2c:8d:07:f3:
1e:c4:4b:4a:5c:a1:76:b5:b5:13:4b:d3:78:c6:35:
68:81:59:51:5e:1c:e0:41:50:8d:40:86:92:bd:35:
8e:7a:80:a0:3a:36:31:0f:96:59:c0:b4:80:95:7e:
ff:3b:7c:41:b2:73:78:f3:6b:17:3b:af:16:c3:f2:
9a:f6:24:95:ed:de:53:73:ff:a2:27:00:0b:f5:53:
cc:2d:3a:2a:23:8a:4c:1d:11:b8:a7:6e:5a:a6:ec:
b7:d3:20:c6:b4:5b:5d:1b:60:42:53:65:82:e4:d0:
e4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:53:DF:7F:52:97:E4:55:77:87:52:4F:BE:19:0E:C2:0A:AB:A9:FE
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/wFPff1KX5FV3h1JPvhkOwgqrqf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.207.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:3c:82:ce:e6:cd:5e:65:27:56:bc:2b:2e:47:e1:db:b8:cc:
ba:52:c7:02:75:9c:6b:62:5a:09:91:25:72:54:86:7a:c2:7e:
bf:cb:36:28:b8:d6:6d:4b:0d:d7:eb:0f:8a:0f:d9:e8:0b:1b:
db:2a:17:87:e3:aa:e5:7e:f1:a3:99:1d:8d:21:6c:ad:08:70:
1f:03:48:07:a4:61:d4:8d:6a:91:56:a7:d9:ae:7c:32:f6:17:
03:58:3b:ad:30:1b:2e:32:06:6e:28:65:e8:ff:7c:f2:f5:4f:
91:41:ed:b2:e0:f8:fd:0e:24:cf:d0:2d:ce:9a:f0:33:e8:d4:
9a:40:ac:4b:ca:af:ec:6c:2e:10:2d:63:15:e6:f0:cf:25:af:
50:01:a2:23:bf:04:2a:74:ca:0e:c8:1c:1a:a9:2c:4d:bc:e5:
45:db:2b:56:1d:8f:d5:73:97:bd:f7:fb:2f:50:fa:19:9e:b5:
e9:5a:c2:9c:f2:2c:8c:a9:5c:b0:63:93:6e:eb:8a:55:2e:18:
1e:8c:da:48:b7:ff:5b:35:62:3f:39:fa:5f:7e:77:f1:01:c7:
44:d6:93:e7:ce:52:50:92:26:50:85:4b:86:0f:c8:ae:de:f6:
50:aa:1f:e1:8a:fd:8b:4d:57:b0:76:de:a1:49:9d:48:06:22:
14:c4:56:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:36 2024 by rpki-client on console-ams.rpki-client.org