Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/foZzMxEUlC4hXtDUfOetwEzXHrc.roa
File: foZzMxEUlC4hXtDUfOetwEzXHrc.roa (raw, json)
Hash identifier: tKBJm+H2ABXlfSeI3zZR2H4ErzT+SdGAKOjXcgy/piU=
Subject key identifier: 7E:86:73:33:11:14:94:2E:21:5E:D0:D4:7C:E7:AD:C0:4C:D7:1E:B7
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 01856BDCB1B5AC6058FBF9F2BB4D3F7DB12F
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/foZzMxEUlC4hXtDUfOetwEzXHrc.roa
Signing time: Sun 01 Jan 2023 05:45:03 +0000
ROA not before: Sun 01 Jan 2023 05:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205225
IP address blocks: 185.188.95.0/24 maxlen: 24
185.188.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:b1:b5:ac:60:58:fb:f9:f2:bb:4d:3f:7d:b1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: Jan 1 05:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e8673331114942e215ed0d47ce7adc04cd71eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ad:6f:52:85:01:4c:5f:43:df:03:cc:7d:a7:
89:1f:fb:d3:8a:89:ba:cc:b1:75:17:1f:a9:fd:63:
86:37:77:50:74:a1:b8:48:af:75:1d:de:c9:04:aa:
52:c8:e0:2d:12:f8:d7:a2:bf:17:7f:14:8f:1a:d9:
a5:e9:30:fc:96:72:cc:75:cb:0d:74:9e:42:6b:a2:
9f:f2:20:61:14:58:10:d6:70:65:fc:9d:8d:95:c0:
3c:09:42:9a:6f:c4:d1:9d:00:7c:b0:e3:d0:c6:2d:
96:48:7c:ba:00:e6:bd:52:ea:1c:bd:02:01:4c:b7:
3c:cb:63:a0:71:86:a9:35:9c:4a:3c:1c:57:0f:9e:
18:75:76:4c:66:c1:da:91:d1:c7:da:f5:b6:12:6b:
7e:ae:51:a1:85:01:9e:5f:4a:4d:7b:42:0f:de:0a:
7a:2a:13:dc:54:eb:7f:b4:01:73:6f:53:ef:61:10:
01:78:75:e0:11:f1:f6:1e:59:ed:35:1e:f5:b1:11:
c9:00:dc:3d:e8:30:e5:7b:2e:06:43:29:9d:1b:8f:
80:d0:a1:f9:7a:f9:72:2c:1f:8c:0b:7a:9d:b5:5c:
7a:cb:e9:c9:a5:e4:94:9c:38:5f:b2:d1:be:01:b3:
a2:b5:5d:30:7f:a6:5b:8f:3f:97:db:f6:d8:cd:a5:
c8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:86:73:33:11:14:94:2E:21:5E:D0:D4:7C:E7:AD:C0:4C:D7:1E:B7
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/foZzMxEUlC4hXtDUfOetwEzXHrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.93.0/24
185.188.95.0/24
Signature Algorithm: sha256WithRSAEncryption
27:52:75:9d:7d:cc:39:fa:f5:24:b3:a2:bf:69:b3:c6:44:78:
2d:53:d7:04:5c:44:6b:d1:05:69:f3:fd:7d:c6:39:f0:f6:7a:
a7:d6:29:42:9a:94:32:56:50:98:99:98:b5:16:48:da:42:97:
78:43:f3:9a:a5:07:ce:19:18:ad:c4:8d:a4:85:1b:39:91:2f:
7a:61:b4:1c:36:10:78:17:71:b5:0f:ed:aa:b3:36:30:16:9b:
0b:e4:0e:42:ec:5f:8e:31:b9:4c:8f:56:e6:4c:96:c8:d3:9e:
c8:f7:de:f4:c3:ea:fc:6e:b9:4a:3f:d3:b3:19:4e:06:62:e5:
a2:33:d5:c3:40:6f:dd:44:c8:3f:33:f6:bb:af:39:9a:d8:2d:
90:82:42:a6:d6:b1:22:d7:79:14:12:21:c9:96:79:20:08:2c:
8e:2b:58:14:39:66:40:e5:ec:1b:89:cd:b9:74:3a:d3:75:8b:
3c:54:df:91:20:24:9a:db:2d:97:58:7d:17:86:d6:e8:40:df:
a7:f2:47:26:a2:83:4d:6e:25:1a:f9:39:f2:ea:93:5f:ec:ec:
48:73:a0:bd:a2:6b:da:3d:ef:7e:99:28:cd:c4:80:07:a1:18:
ab:59:48:85:6a:67:3f:42:1d:e1:33:4e:07:2d:19:9b:26:20:
95:ca:b7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:21 2024 by rpki-client on console-ams.rpki-client.org