Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/7E5u4kupvGYEZtXHrMUMt8j7ie0.roa
File: 7E5u4kupvGYEZtXHrMUMt8j7ie0.roa (raw, json)
Hash identifier: 1uuQZB+pwvuwCU0S+s7vhWZDpvTEHjH8j35sgy5i+uM=
Subject key identifier: EC:4E:6E:E2:4B:A9:BC:66:04:66:D5:C7:AC:C5:0C:B7:C8:FB:89:ED
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 0185711E46102A87A52A49CC25D77AB2A6C8
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/7E5u4kupvGYEZtXHrMUMt8j7ie0.roa
Signing time: Mon 02 Jan 2023 06:14:47 +0000
ROA not before: Mon 02 Jan 2023 06:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203984
IP address blocks: 185.145.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:46:10:2a:87:a5:2a:49:cc:25:d7:7a:b2:a6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Jan 2 06:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec4e6ee24ba9bc660466d5c7acc50cb7c8fb89ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:69:ce:67:f8:04:05:04:30:91:0f:7c:be:
61:19:e3:68:18:9b:a3:49:b8:c1:41:6d:e2:68:ac:
ec:20:14:b8:77:c9:3d:54:93:ad:d5:7c:cc:3b:2d:
05:6a:74:60:2e:c4:51:b5:c4:89:5f:5a:ac:ef:30:
21:64:01:f2:c8:8c:17:eb:e0:e7:b8:b2:9c:00:a8:
4e:2f:c1:ce:04:71:e8:2a:b8:9c:7e:9c:92:99:65:
bd:c4:f2:ef:ee:16:23:c8:a8:33:02:e8:1b:8d:0f:
5e:70:55:a5:35:56:45:fa:33:5b:99:c0:a4:9d:95:
61:b8:54:a1:5b:a8:67:12:d3:eb:07:ed:c8:f6:6a:
c3:06:e9:f8:a8:43:fa:bd:34:c3:2c:03:12:86:7a:
f2:57:f6:59:b1:7b:a0:a2:7b:b5:05:dc:1a:06:17:
48:15:40:83:84:2b:cd:a4:4a:3c:59:20:40:5f:d7:
1c:40:5e:6c:7c:d1:89:c8:da:1a:a3:dc:8f:f0:cf:
e5:bf:cc:62:26:b3:28:62:01:c9:08:e3:e4:cc:56:
5d:58:5d:27:a2:a0:cc:36:30:dc:40:2d:e7:ce:b9:
95:5f:7b:ff:fb:8f:34:55:59:1a:72:26:ac:ba:90:
70:a5:46:c3:10:36:18:80:15:eb:b3:45:3a:9e:f1:
30:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4E:6E:E2:4B:A9:BC:66:04:66:D5:C7:AC:C5:0C:B7:C8:FB:89:ED
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/7E5u4kupvGYEZtXHrMUMt8j7ie0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.76.0/24
Signature Algorithm: sha256WithRSAEncryption
80:3c:3d:9c:ec:ee:cb:ea:cb:56:28:ec:36:22:1c:25:3f:7a:
6f:fc:e4:4a:dd:f2:ea:46:63:36:82:70:5f:75:dd:60:58:20:
6f:4a:1c:9a:db:87:5f:16:91:7f:29:28:fd:35:b1:a3:18:2e:
75:f8:42:c6:fa:8d:55:b1:b5:97:d8:72:fc:e5:88:04:09:99:
17:0c:39:00:89:51:6a:2d:0e:57:cb:9c:1a:f8:39:28:82:94:
9d:fb:b3:75:5e:3d:f5:f0:2a:ce:37:a5:32:79:f7:e8:92:96:
b5:00:6a:c9:9a:f3:f0:87:b1:2b:bc:54:b1:9e:66:05:44:6d:
38:a9:32:35:ec:8a:80:0f:43:f1:7e:5c:60:86:f1:e8:48:ab:
87:fd:08:63:b6:d3:61:a8:93:c1:ad:fb:e4:d9:69:d9:3b:d6:
03:1c:47:b9:2c:ea:ac:38:db:ab:f5:d2:4e:83:98:e0:78:5e:
ce:24:2f:cc:cb:af:35:bf:e5:d7:09:e7:88:82:32:5f:c7:7b:
1d:b2:bb:e2:a8:4d:7c:60:4f:ab:24:a7:5f:ca:25:b3:f1:fb:
61:65:15:24:e2:cc:31:4a:b7:0a:2e:57:dc:ba:bc:69:b2:bb:
e5:1f:5e:de:55:7d:c4:80:fb:a9:72:11:1b:33:5e:22:5a:eb:
b7:a1:7c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:31 2024 by rpki-client on console-ams.rpki-client.org