Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/Q7DXK1aOjQ1CQasIU5dccRVq_Eo.roa
File: Q7DXK1aOjQ1CQasIU5dccRVq_Eo.roa (raw, json)
Hash identifier: I+N1+5+uva0dhhuDaR+69TLlFI6YBnrFoA1+Hh5jlqs=
Subject key identifier: 43:B0:D7:2B:56:8E:8D:0D:42:41:AB:08:53:97:5C:71:15:6A:FC:4A
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 01872378F30F1D4937988B89C83FE7A8BC93
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/Q7DXK1aOjQ1CQasIU5dccRVq_Eo.roa
Signing time: Mon 27 Mar 2023 14:29:01 +0000
ROA not before: Mon 27 Mar 2023 14:29:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212183
IP address blocks: 185.79.2.0/24 maxlen: 24
185.79.2.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 30 Aug 2023 09:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:78:f3:0f:1d:49:37:98:8b:89:c8:3f:e7:a8:bc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Mar 27 14:29:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43b0d72b568e8d0d4241ab0853975c71156afc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3a:49:b4:5c:ec:c7:e0:6c:5f:53:d7:75:96:
45:85:67:cc:71:bb:9c:3e:94:59:0f:9a:99:bf:4b:
9d:2b:a1:f4:f6:99:19:6c:ec:c6:b7:ac:ed:b5:d3:
89:36:b6:b6:34:30:f4:05:fa:4b:d4:36:56:43:57:
2d:64:b8:f1:ec:fc:86:55:fc:3f:6c:5f:81:82:08:
ec:bc:d1:cd:68:1b:ab:2b:90:d5:5a:1b:52:0f:e5:
3d:05:1d:29:d6:ba:7e:0b:46:6b:be:d3:d4:97:b1:
5d:37:4e:42:ae:79:d1:e8:7e:97:c4:b6:0e:e2:29:
5f:5f:11:6d:58:ce:bc:28:61:9b:9f:aa:3f:9b:d4:
96:10:63:14:6b:d2:7a:b9:53:74:92:ef:d9:af:10:
dd:44:5b:fe:96:22:21:57:bf:3c:cd:52:d3:a0:7c:
61:ce:87:5c:d5:e1:a2:f5:91:f8:37:06:4c:9d:57:
d4:73:96:9f:cd:7d:b2:77:a2:35:07:9e:42:2a:0d:
90:3e:96:c1:8a:a4:46:62:90:75:e3:51:f1:ea:5d:
d9:17:35:33:09:c9:da:bb:ad:0d:85:af:e3:d9:b5:
41:2f:1b:50:96:1d:a4:52:02:6c:c4:14:8e:76:d1:
a6:14:3d:60:cd:67:aa:b4:66:de:b6:be:18:18:21:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B0:D7:2B:56:8E:8D:0D:42:41:AB:08:53:97:5C:71:15:6A:FC:4A
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/Q7DXK1aOjQ1CQasIU5dccRVq_Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.2.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:f1:65:df:c0:58:0d:07:1e:79:4f:cc:1b:9a:3b:2a:94:ab:
1b:cb:86:1d:85:dc:46:39:25:65:5f:7a:10:cc:7b:f9:ce:6d:
5b:dd:e8:e5:9e:37:92:5b:77:ea:d3:d2:ee:6b:16:c2:a5:1e:
ae:d4:71:7a:18:d1:0d:f7:ed:f9:40:df:c9:97:1c:67:81:05:
bd:59:e9:1a:f4:66:49:13:5a:0c:ae:fb:82:39:f2:95:a5:50:
75:5c:b2:f1:19:26:81:5f:55:dd:1a:b2:3b:49:f4:1e:99:d0:
a4:10:03:ce:ad:54:14:09:3d:cd:a5:85:c7:14:4f:e6:ed:de:
16:ca:7d:49:3e:bb:0b:c9:45:13:d4:84:7a:aa:bd:62:0a:d6:
1a:c5:04:ae:e0:f3:5a:09:ab:4b:91:7e:b7:c1:10:c3:0e:d8:
8e:e6:2a:b8:ba:35:f0:e7:38:16:39:c1:31:ce:0a:e0:82:ae:
0b:f0:e1:05:bb:a0:72:1b:a4:ca:51:00:88:86:2f:e8:aa:ea:
22:2b:a2:d9:bb:a8:1b:c5:90:1f:bc:c0:3a:57:28:3c:11:87:
9c:ff:a3:4d:7b:c2:f4:d1:90:88:ec:5d:39:15:09:f2:ab:99:
bd:2f:4d:ff:05:99:82:58:97:a8:c5:c6:24:b5:b8:ea:47:61:
78:5b:e0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:45 2024 by rpki-client on console-ams.rpki-client.org