Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/M7FydAjghrUKxuQBK5lrM237VJ8.roa
File: M7FydAjghrUKxuQBK5lrM237VJ8.roa (raw, json)
Hash identifier: LRBUBmWgF4uKIfpXx0Tz0d3KOkoa//UF5j4ozlkfYd0=
Subject key identifier: 33:B1:72:74:08:E0:86:B5:0A:C6:E4:01:2B:99:6B:33:6D:FB:54:9F
Certificate issuer: /CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Certificate serial: 01862D81D74EF932874E4B0546BC2D9CF1FD
Authority key identifier: 5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/M7FydAjghrUKxuQBK5lrM237VJ8.roa
Signing time: Tue 07 Feb 2023 20:12:09 +0000
ROA not before: Tue 07 Feb 2023 20:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201073
IP address blocks: 185.86.204.0/24 maxlen: 24
185.86.205.0/24 maxlen: 24
185.86.206.0/24 maxlen: 24
185.86.207.0/24 maxlen: 24
2a05:bb80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 08 Feb 2023 10:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2d:81:d7:4e:f9:32:87:4e:4b:05:46:bc:2d:9c:f1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Validity
Not Before: Feb 7 20:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33b1727408e086b50ac6e4012b996b336dfb549f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b4:b3:41:1f:ed:29:fb:72:23:25:a6:e1:a1:
15:ce:45:3f:22:9d:dd:a4:7e:3f:e5:66:1f:9d:25:
82:7a:39:d2:ea:f0:b3:cb:7a:94:7a:9d:18:00:ad:
c9:59:f7:95:1c:a8:67:34:3e:ad:08:2d:14:b5:48:
ff:ea:96:8c:23:18:fb:94:2c:e0:50:bc:c5:b2:01:
2f:3f:c9:93:60:7b:97:a5:58:e5:32:e3:20:56:1b:
79:bf:8d:17:9e:53:08:3e:58:be:6a:8c:3d:62:78:
85:9b:8f:0c:b4:2d:f2:6e:08:c3:40:44:c3:42:79:
89:eb:62:0a:01:68:3b:a1:78:e8:a0:6c:53:ae:f2:
1e:f1:a2:e4:60:b8:24:6f:39:15:d7:04:1f:74:f2:
28:74:b0:ad:c9:fe:14:02:a0:16:20:64:3c:c9:2e:
39:b7:fd:67:3a:e5:7e:dc:d7:8e:24:8e:b1:e9:de:
74:0b:91:c4:30:11:13:c0:5b:04:97:6e:5e:11:1e:
b8:d1:60:39:c5:10:fe:31:90:bb:3b:f6:1f:35:d0:
c4:4e:e6:68:7a:ad:48:2e:99:32:64:e2:5a:c0:de:
2d:7b:07:b6:f4:21:f6:fb:cb:c2:a7:56:bb:13:63:
c6:a6:6a:4c:6c:06:3f:ec:10:22:44:eb:7f:74:04:
1b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B1:72:74:08:E0:86:B5:0A:C6:E4:01:2B:99:6B:33:6D:FB:54:9F
X509v3 Authority Key Identifier:
keyid:5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/M7FydAjghrUKxuQBK5lrM237VJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.204.0/22
IPv6:
2a05:bb80::/29
Signature Algorithm: sha256WithRSAEncryption
2f:44:0e:56:2e:1e:41:99:28:ef:f3:9d:3d:ba:78:c4:45:5f:
d1:38:f1:6a:4a:61:0d:52:11:f2:e5:21:84:b2:51:d6:92:e8:
f9:1a:86:57:3e:1d:96:31:c4:b0:f9:d6:ef:36:15:9d:1a:fe:
cc:1a:5d:ae:a7:16:8f:eb:70:f6:50:fe:cc:36:8d:b7:16:d4:
13:0b:93:73:18:75:b4:df:99:d4:44:c2:73:b1:aa:67:2c:06:
1f:16:c6:5f:a1:cd:de:9e:45:03:53:a9:ea:02:84:20:50:4c:
54:84:4e:00:b5:1c:60:97:c7:38:56:b9:a9:8e:e2:57:1b:5b:
3b:9b:10:bf:d2:bb:f2:7c:92:b0:ba:9d:ff:d9:50:92:a2:79:
dd:6d:fb:04:1c:94:03:21:0b:92:7a:80:88:3e:90:39:9a:16:
86:05:dd:f6:cc:93:c3:1b:9a:c7:9b:2f:28:3b:4b:d1:d9:2a:
b3:46:a8:30:f6:da:70:2a:8a:1f:c6:1b:79:d2:9a:67:35:1f:
24:30:a0:b4:52:10:29:76:e9:06:24:9b:d8:5c:7a:6d:32:98:
23:f1:21:9a:62:93:2e:61:57:02:29:1a:f2:d1:1e:b4:02:cf:
20:1e:b4:60:b0:ee:32:8e:38:e6:fe:60:8e:c5:23:9d:67:4b:
83:c8:bc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:53 2024 by rpki-client on console-fra.rpki-client.org