Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kP7zxOnlVGsMvEN79H86SRHrQqQ.roa
File: kP7zxOnlVGsMvEN79H86SRHrQqQ.roa (raw, json)
Hash identifier: diJEq3D0PXyxUnx/4DvcKtdioFDPf4GEHc0wxKiV4Uo=
Subject key identifier: 90:FE:F3:C4:E9:E5:54:6B:0C:BC:43:7B:F4:7F:3A:49:11:EB:42:A4
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018C1AA3F4C6AADAA5E9AE1FCE728FF56AC5
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kP7zxOnlVGsMvEN79H86SRHrQqQ.roa
Signing time: Wed 29 Nov 2023 10:33:21 +0000
ROA not before: Wed 29 Nov 2023 10:33:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32167
IP address blocks: 185.223.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Dec 2023 10:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:a3:f4:c6:aa:da:a5:e9:ae:1f:ce:72:8f:f5:6a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 29 10:33:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90fef3c4e9e5546b0cbc437bf47f3a4911eb42a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:70:2d:97:01:3d:81:3d:3c:68:cf:2c:d8:f4:
eb:68:d2:a2:ed:3c:68:32:b2:d7:8a:84:fa:ae:40:
97:c6:d1:19:dd:f5:90:9e:18:8e:8c:5f:29:e9:06:
97:32:b0:24:e3:7e:b1:6a:e7:6e:80:b3:9c:50:a3:
fd:88:da:4d:8e:cd:21:5e:1e:19:0a:4c:4e:af:fe:
6c:84:56:aa:e5:6c:f9:1f:df:c7:23:44:09:77:2d:
1a:fc:3b:f4:46:9d:81:8a:8a:12:25:a4:e9:9b:11:
a2:a9:12:b6:c5:0e:07:45:54:fd:df:60:d9:46:24:
77:62:96:50:ca:e9:04:c3:f2:85:44:4a:28:aa:3e:
d9:d2:1a:15:e4:cc:97:73:65:8d:14:ec:01:cb:59:
64:76:21:e4:d4:1a:96:22:52:3a:64:d0:ae:b6:9c:
94:89:0e:65:ac:86:17:fe:06:ff:e1:43:24:41:b7:
04:f1:e7:89:36:9e:12:9e:f7:01:48:c1:d4:80:d5:
40:c1:27:8a:81:5a:a0:02:4a:fe:d0:52:38:d5:15:
20:6b:fb:fb:fb:bf:ce:73:a7:21:24:46:88:3c:d1:
ae:e5:e8:c7:a8:40:d1:23:0f:2c:60:f5:97:da:ab:
1b:26:3e:b7:b1:3c:30:eb:a1:24:1f:fc:75:b3:9a:
8f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FE:F3:C4:E9:E5:54:6B:0C:BC:43:7B:F4:7F:3A:49:11:EB:42:A4
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kP7zxOnlVGsMvEN79H86SRHrQqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.78.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c0:cf:95:1b:e1:62:9d:6a:a8:a7:80:1f:5c:0e:9d:70:de:
83:6e:37:79:52:0a:50:4e:2a:18:25:40:11:cc:38:9b:2a:d9:
47:b7:db:f0:2c:3d:35:39:bf:7f:ec:a1:59:31:44:8a:7d:bb:
1b:75:bf:8b:2c:89:14:f5:e7:d5:ef:5f:61:44:3c:41:4e:5c:
19:80:4f:06:ed:b6:0c:f6:5b:59:40:14:e1:e8:98:0e:53:d8:
42:31:18:1d:97:77:5d:c8:c2:36:43:c5:78:72:44:72:24:05:
76:19:79:10:f0:05:5e:05:4e:ee:0d:09:12:3a:61:4d:d1:dc:
7e:86:b3:4a:ac:53:40:62:2e:db:2c:ff:65:5c:19:f5:43:ba:
b0:f2:de:91:56:71:6f:f6:c8:27:d8:6c:78:1a:49:96:08:31:
2d:67:4d:2f:6b:9b:c4:f5:cc:bc:73:90:86:00:a9:52:03:36:
64:aa:f4:2c:e9:f5:42:27:da:50:e2:b6:d4:d0:60:fc:79:8f:
4e:89:61:dc:d1:f8:8e:ec:35:69:ce:53:43:b9:67:94:dd:a8:
28:c5:17:62:24:12:a1:6a:42:cf:1d:a5:9b:74:4d:69:8e:44:
0b:23:8b:28:3a:be:b3:17:a9:12:aa:ab:0f:25:68:d7:5a:7c:
56:f9:85:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org