Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/B76XOtGIjgb71-tSgNq00Hcikl0.roa
File: B76XOtGIjgb71-tSgNq00Hcikl0.roa (raw, json)
Hash identifier: vmGYySBHxQ7apjWVOO0wS5ifNwnNOyo/I41f8NMrkwQ=
Subject key identifier: 07:BE:97:3A:D1:88:8E:06:FB:D7:EB:52:80:DA:B4:D0:77:22:92:5D
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 01869EFBD49F36EF387CC4AAA483BADDA013
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/B76XOtGIjgb71-tSgNq00Hcikl0.roa
Signing time: Wed 01 Mar 2023 21:02:29 +0000
ROA not before: Wed 01 Mar 2023 21:02:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 185.237.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jul 2023 12:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9e:fb:d4:9f:36:ef:38:7c:c4:aa:a4:83:ba:dd:a0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Mar 1 21:02:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07be973ad1888e06fbd7eb5280dab4d07722925d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4c:5f:6a:dc:cf:d5:2a:b9:33:62:ad:6f:5f:
90:25:99:82:4f:d5:34:9e:05:ab:77:e8:74:ae:43:
73:ea:31:43:41:7e:b6:92:5a:94:e7:fb:b1:de:8c:
4c:54:3a:80:06:64:ab:7b:64:76:6c:ae:50:1a:da:
94:ac:2f:2c:da:85:25:53:9a:5a:32:28:39:a3:d5:
91:47:50:24:a4:06:4c:27:e4:38:32:68:a7:aa:de:
3d:22:c3:97:ce:0e:a9:ca:b0:26:55:a4:03:3b:72:
b8:53:d0:58:26:e6:7a:d5:cf:b6:d2:3f:a3:47:91:
5a:3a:06:d4:a7:8f:f3:ac:4b:cb:44:cf:0e:b2:ed:
da:21:e7:9e:1a:4e:a8:bd:5a:76:cb:5d:68:63:c0:
cc:81:d7:20:e2:24:c1:3c:ee:2d:da:f0:3b:a7:89:
e0:e5:b5:a2:be:b5:b6:18:21:b5:c4:6f:c3:d9:d5:
93:ef:f0:71:a8:14:2b:57:a8:f5:37:f9:6c:df:8d:
d9:ee:76:ba:4a:9a:03:f8:62:a7:55:e6:d2:5e:f0:
45:f5:f6:26:ab:73:db:54:cc:d2:31:60:c5:e5:be:
19:53:a0:0b:25:ff:ec:af:5a:62:9a:01:b0:07:d8:
5a:a6:09:17:1e:a9:34:84:fc:01:dc:77:87:9a:4d:
9e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BE:97:3A:D1:88:8E:06:FB:D7:EB:52:80:DA:B4:D0:77:22:92:5D
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/B76XOtGIjgb71-tSgNq00Hcikl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.82.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b7:bd:dc:f2:d8:ae:71:87:6e:41:b5:fd:0a:4d:80:32:e9:
ef:36:de:d8:88:22:b6:c5:97:d2:32:fd:86:7d:f4:cb:d8:53:
8f:00:86:57:f2:a2:11:b4:6a:9d:16:29:03:b7:da:fe:7c:7d:
97:f1:5a:5d:c9:eb:c8:d7:fa:6b:66:e6:02:b5:e6:e4:7d:14:
b9:e4:cb:02:4d:4d:46:26:b2:16:19:45:1f:39:45:56:d4:69:
26:12:f1:b9:ea:9b:ec:ec:9d:e3:fd:f9:85:ef:9d:d9:fe:54:
f6:90:4f:0d:43:43:a8:91:86:20:51:82:e9:fd:4b:ce:1c:e5:
96:d5:a6:38:43:04:54:40:43:be:05:09:2e:ee:ee:67:4d:aa:
02:2f:81:cc:e7:5a:cf:d6:8d:a6:85:fb:63:9a:7b:c9:15:d0:
5e:e8:0d:92:29:06:44:bc:fb:6f:1b:21:69:61:e5:44:5f:c6:
99:4c:8f:33:01:39:39:dc:7a:08:0d:9f:04:75:39:5b:88:16:
27:23:24:f9:86:b9:fc:88:eb:c3:e0:60:0d:34:80:81:e4:27:
86:28:c9:a9:22:4e:9f:75:b1:36:00:0c:e1:07:51:a8:7a:b3:
96:15:c2:fc:3b:1b:4a:60:14:2f:09:1b:24:89:26:71:a2:a0:
eb:c0:66:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:59 2024 by rpki-client on console-fra.rpki-client.org