Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/iBlsK5cpvelvwhkiHXbRAe7fYMg.roa
File: iBlsK5cpvelvwhkiHXbRAe7fYMg.roa (raw, json)
Hash identifier: rGk7Q6YAG1LLCDuCp035rE6+wJL2Z9BHeVM5+YIxkB8=
Subject key identifier: 88:19:6C:2B:97:29:BD:E9:6F:C2:19:22:1D:76:D1:01:EE:DF:60:C8
Certificate issuer: /CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5
Certificate serial: 01856F2FE95A7AB86E929C099A0FAEE6D07F
Authority key identifier: EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/iBlsK5cpvelvwhkiHXbRAe7fYMg.roa
Signing time: Sun 01 Jan 2023 21:14:48 +0000
ROA not before: Sun 01 Jan 2023 21:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50115
IP address blocks: 194.54.160.0/22 maxlen: 24
185.236.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:e9:5a:7a:b8:6e:92:9c:09:9a:0f:ae:e6:d0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5
Validity
Not Before: Jan 1 21:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88196c2b9729bde96fc219221d76d101eedf60c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cd:e0:2e:1a:19:28:b0:56:3a:50:8f:35:94:
1a:08:0b:35:5c:1f:f5:c1:e2:bc:49:8a:2a:63:4d:
c2:24:fb:22:47:a0:1c:d3:6f:a6:4e:78:7a:79:ba:
f0:0b:24:75:24:33:bd:6d:51:f7:54:09:6d:25:c0:
93:8b:85:62:11:c5:ca:ee:11:22:e1:e9:0b:91:80:
cf:89:53:f5:6d:7f:aa:00:75:23:7d:6a:a5:1d:35:
f8:26:30:59:2b:32:df:ce:1d:8e:fa:9f:c6:47:39:
17:8c:6b:e7:30:dc:3a:8a:3a:95:6c:48:b9:04:f9:
91:75:82:29:71:2d:c8:8d:17:39:23:cc:da:5a:07:
41:89:5c:57:10:bc:6c:4a:e8:a8:5b:e8:c9:f0:28:
a1:5d:77:05:f8:70:66:24:c0:92:4c:db:40:2c:ef:
ed:3b:77:16:f6:4d:7d:94:71:44:33:d7:93:0a:5d:
c5:c0:f6:aa:87:be:75:39:8c:0b:00:fb:70:02:47:
cb:65:60:09:ff:c8:7b:0f:ec:ab:57:a2:d1:e3:3e:
12:95:66:9c:04:80:88:b1:78:01:42:a7:73:71:66:
85:13:63:d4:7e:25:19:60:b5:10:98:4a:06:1e:da:
72:8d:32:a4:36:6f:13:3e:38:56:e7:8e:f0:66:c8:
0f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:19:6C:2B:97:29:BD:E9:6F:C2:19:22:1D:76:D1:01:EE:DF:60:C8
X509v3 Authority Key Identifier:
keyid:EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/iBlsK5cpvelvwhkiHXbRAe7fYMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.46.0/24
194.54.160.0/22
Signature Algorithm: sha256WithRSAEncryption
82:f0:81:06:f7:4d:a5:14:66:04:6f:e7:67:c5:41:1c:bd:2e:
39:c0:f1:cc:7b:8b:67:3d:18:1c:61:1e:a3:35:6e:a1:c3:85:
0a:53:0c:76:50:5a:26:ad:39:27:73:2a:23:68:f5:4e:da:5d:
08:fb:9c:e4:e1:66:01:35:92:e7:bc:dc:a2:18:29:e1:2e:a2:
5e:11:11:9b:21:e2:a9:1f:a4:46:79:ac:a8:95:af:5a:8c:60:
79:a5:72:52:3b:dd:d4:71:f5:56:a3:54:7e:5c:16:eb:fe:84:
f3:9e:6e:93:e2:0d:14:6e:fa:48:fe:62:a4:c2:b1:1d:05:2c:
42:f3:22:d6:b1:11:62:c2:27:3d:17:8b:03:24:40:61:fa:9f:
9c:3e:7a:13:ec:9f:fa:5f:31:b5:06:68:68:22:b8:af:d3:32:
61:c3:02:cd:f9:99:97:36:65:e3:d5:22:82:fc:ea:bf:f7:42:
0b:e3:52:98:91:21:11:23:59:5e:a3:2d:eb:8e:e2:64:48:3c:
04:42:5f:de:1c:62:9d:0e:ac:26:ae:8e:84:43:c6:0e:51:98:
16:9b:59:38:af:6d:e7:83:56:3d:2c:e6:63:5a:7b:7e:a1:03:
a9:bf:93:40:87:8c:06:7e:a2:2c:4b:5d:dd:b7:e7:d5:8a:eb:
e7:3f:88:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:52 2024 by rpki-client on console-ams.rpki-client.org