Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/dzE7Si9-l-ACu1l4Q4Wf_18w3cM.roa
File: dzE7Si9-l-ACu1l4Q4Wf_18w3cM.roa (raw, json)
Hash identifier: l/bzpaeCvUd8xz8VJGtIXV2P88WIFkNsXG4RNSILtCY=
Subject key identifier: 77:31:3B:4A:2F:7E:97:E0:02:BB:59:78:43:85:9F:FF:5F:30:DD:C3
Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial: 0189D9D146A3402260A416ECF1BADE355BCA
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/dzE7Si9-l-ACu1l4Q4Wf_18w3cM.roa
Signing time: Wed 09 Aug 2023 10:21:58 +0000
ROA not before: Wed 09 Aug 2023 10:21:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.189.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Aug 2023 12:41:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d9:d1:46:a3:40:22:60:a4:16:ec:f1:ba:de:35:5b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Validity
Not Before: Aug 9 10:21:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77313b4a2f7e97e002bb597843859fff5f30ddc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:75:46:95:22:e0:21:2b:f2:ac:27:1b:27:fb:
d0:3a:19:47:42:db:78:05:df:80:02:73:05:d8:26:
3c:bb:2e:2c:c1:0f:71:d9:6c:38:68:6f:2f:32:f4:
aa:41:8e:df:36:a4:98:08:24:d7:a5:f6:51:da:58:
f5:9b:36:ce:dd:1a:fc:eb:10:26:11:45:b4:9e:db:
e9:f9:5f:84:27:5c:7c:ee:c3:bd:f8:ce:eb:29:e1:
19:c7:64:57:4d:11:d6:b3:4f:f5:91:ac:07:07:b5:
51:4d:f1:41:e0:e0:18:43:16:2d:2c:9e:56:83:ed:
6e:8b:67:de:c5:2f:88:4c:d1:71:55:8c:40:4a:df:
27:a2:22:66:5a:ea:3e:2a:86:a0:de:ee:0b:c5:9e:
7d:07:40:4f:91:26:5c:7e:7a:b7:09:6e:ea:fa:b1:
ae:79:3b:e6:63:63:77:8e:51:a8:d4:cd:b1:b2:fa:
07:45:d4:74:2b:45:41:0d:25:07:a2:58:2a:3e:74:
e1:47:7c:96:be:e8:87:44:f2:7f:af:86:26:f9:49:
3f:da:05:b3:f8:cd:91:3e:58:ae:a2:e0:b4:c1:19:
6d:3d:77:be:56:22:40:33:86:92:e5:8a:c2:09:da:
df:2c:fd:7d:21:54:b6:30:53:ef:b0:b4:1b:e3:1b:
07:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:31:3B:4A:2F:7E:97:E0:02:BB:59:78:43:85:9F:FF:5F:30:DD:C3
X509v3 Authority Key Identifier:
keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/dzE7Si9-l-ACu1l4Q4Wf_18w3cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.244.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:1c:1c:09:a7:90:7e:87:3d:cb:91:a5:10:6a:57:3a:9f:72:
8f:00:be:3a:0e:fe:03:25:85:8a:fe:9e:d7:ad:f1:0d:0d:be:
43:a5:2a:ab:4b:32:7a:00:b6:29:d1:cb:b0:e6:37:e7:1c:b8:
d1:b8:09:5f:5f:f4:cf:08:db:f2:d9:0a:33:49:ac:11:42:02:
c5:ef:de:30:0b:f1:24:26:ea:c2:a1:e3:3d:1d:be:62:fb:1a:
4d:ba:09:99:68:cd:86:66:73:dc:b8:e9:05:c9:28:3a:6c:d7:
4f:62:d0:8b:12:07:ce:9a:1c:90:fc:e4:28:38:4d:59:8b:0e:
53:6d:52:e9:35:4f:52:7a:31:b2:8a:6b:b4:af:cb:91:2d:e6:
14:32:ab:42:78:79:25:4f:83:8f:43:40:07:83:dd:c0:7a:83:
93:f9:f3:b6:46:20:fd:bc:c9:fc:e3:47:8c:1c:0c:25:ad:45:
80:6d:2b:d7:3d:bd:58:f7:7f:74:8e:2d:0e:e8:7c:8f:67:50:
22:3c:ac:6f:06:2d:a2:a0:4c:b8:c4:38:0c:a5:a1:7a:03:3d:
a5:ba:6e:16:c6:09:58:11:06:f7:bd:9f:b4:a5:93:2f:82:dd:
b8:3e:9d:5a:c3:61:67:55:06:e3:15:78:ae:65:7a:05:a8:aa:
80:52:c0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:57 2024 by rpki-client on console-ams.rpki-client.org