Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/E-7YBzw7g71bea0HqIeAmjdr4sw.roa
File: E-7YBzw7g71bea0HqIeAmjdr4sw.roa (raw, json)
Hash identifier: 6mL9o5jK5e3q+LX4d4lfwBIh0RjLLuVgSPwPRg3GArU=
Subject key identifier: 13:EE:D8:07:3C:3B:83:BD:5B:79:AD:07:A8:87:80:9A:37:6B:E2:CC
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 01856F797297D47FC1773896D0A65B48B3B8
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/E-7YBzw7g71bea0HqIeAmjdr4sw.roa
Signing time: Sun 01 Jan 2023 22:35:08 +0000
ROA not before: Sun 01 Jan 2023 22:35:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201086
IP address blocks: 185.86.80.0/24 maxlen: 24
185.205.19.0/24 maxlen: 24
193.36.63.0/24 maxlen: 24
185.254.94.0/24 maxlen: 24
2a05:b700::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 18 Feb 2023 18:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:72:97:d4:7f:c1:77:38:96:d0:a6:5b:48:b3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Jan 1 22:35:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13eed8073c3b83bd5b79ad07a887809a376be2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fd:84:04:50:ba:7e:66:a0:6b:a6:0a:e7:b8:
d4:35:5d:92:fc:07:8c:49:24:de:ae:0d:5c:0a:61:
2d:72:cd:b8:39:1a:46:2d:51:9d:a7:27:c5:39:88:
d7:05:e2:03:f6:10:96:6a:d5:3d:08:b7:02:8c:7e:
66:83:ad:2f:47:d9:ae:b6:10:c6:ba:5f:93:d0:0c:
b3:9b:a6:81:0b:93:82:55:9a:77:df:7b:64:ec:f8:
b0:92:5f:7d:5b:20:3d:27:84:33:ff:c9:6d:0c:18:
7a:4c:d6:e2:15:3d:7d:23:c2:55:85:22:43:f7:e2:
7c:6c:31:c4:d3:16:5f:3f:82:1c:6d:f4:96:b8:bb:
08:d1:f5:e2:41:7d:a9:be:89:34:8c:ae:4e:84:a7:
62:48:1b:ee:90:a4:7c:c7:78:ab:90:08:1b:65:00:
33:d4:43:f0:da:b4:d4:f9:40:2d:e2:6e:1d:ad:5d:
97:b1:ad:11:7c:0e:a3:5d:80:f2:41:7c:b5:0f:3d:
6c:af:28:64:0f:e7:5d:f2:7c:3a:99:ff:8c:5c:96:
42:e2:c6:32:67:cf:d0:53:ce:c0:7d:92:e7:23:9b:
01:9f:84:dc:72:4a:42:f3:28:89:ad:e8:7e:8f:f2:
bb:56:fa:b4:ed:56:b3:39:ff:a5:4e:67:8d:6e:af:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EE:D8:07:3C:3B:83:BD:5B:79:AD:07:A8:87:80:9A:37:6B:E2:CC
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/E-7YBzw7g71bea0HqIeAmjdr4sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.80.0/24
185.205.19.0/24
185.254.94.0/24
193.36.63.0/24
IPv6:
2a05:b700::/29
Signature Algorithm: sha256WithRSAEncryption
19:6b:c3:ff:14:f5:5d:30:54:24:44:75:e2:2a:b7:51:0a:66:
fc:83:30:13:b6:57:8d:c3:5e:08:af:04:ac:84:a7:33:08:c5:
0f:c8:77:79:09:c1:23:17:d6:f3:1a:8e:a8:26:fd:14:3f:b4:
03:77:47:eb:ef:72:62:a5:92:fa:f6:04:7f:5a:3c:d9:4e:9a:
1b:f4:ee:e1:a5:ce:da:3d:40:75:00:4d:b4:5f:65:9b:96:e9:
c1:75:06:38:9c:7b:5d:9b:51:22:b2:1a:5f:d2:38:7f:cf:c2:
bf:90:b3:d9:be:df:12:73:3a:05:82:c6:3d:e0:31:00:3b:93:
84:c3:3d:24:48:5f:bd:c5:0a:ab:0c:00:54:52:96:79:83:3b:
58:d9:fd:70:31:da:bd:8f:6d:83:16:d2:70:3d:d3:7f:1c:1e:
16:f5:8d:e5:64:13:c2:d7:b7:fb:13:07:96:00:5c:c8:de:a0:
b8:f1:f4:01:62:bf:71:6f:86:a0:04:8b:0b:f6:8a:5e:08:99:
a8:d5:fb:6e:0e:e7:16:2c:3b:83:77:c8:11:47:44:bf:c1:6e:
ce:da:f5:a8:3d:6a:f6:49:fe:25:24:a7:ed:6a:e0:5f:b7:1c:
37:bb:81:b9:96:d1:3e:9e:bb:2d:96:6c:da:50:80:33:07:31:
7c:f4:ca:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org