Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/MF5d8t7FJSZKHG4UU250R_8zP7c.roa
File: MF5d8t7FJSZKHG4UU250R_8zP7c.roa (raw, json)
Hash identifier: PhourHo6vjVa8KV1fIJ3N6dhzQMS7erIBGQ4KYE78jg=
Subject key identifier: 30:5E:5D:F2:DE:C5:25:26:4A:1C:6E:14:53:6E:74:47:FF:33:3F:B7
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 01857283566B260602A32177E0B2EC27951B
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/MF5d8t7FJSZKHG4UU250R_8zP7c.roa
Signing time: Mon 02 Jan 2023 12:44:47 +0000
ROA not before: Mon 02 Jan 2023 12:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.21.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jan 2023 09:04:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:56:6b:26:06:02:a3:21:77:e0:b2:ec:27:95:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Jan 2 12:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=305e5df2dec525264a1c6e14536e7447ff333fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:37:19:ee:58:ef:bc:6c:f6:f1:54:b3:2a:e3:
ca:fc:28:fb:91:e4:69:da:63:07:66:84:c6:36:85:
2c:7e:b6:83:78:17:88:93:4c:f3:ed:93:68:fc:81:
f4:ae:cd:72:e4:5b:a2:17:0c:a1:df:2c:a1:42:e7:
43:fd:a7:b7:17:77:43:2b:16:9f:59:0c:e9:8b:0e:
a7:94:b0:03:58:85:22:23:5f:d6:b0:f0:44:9d:a5:
c1:bd:16:2b:75:13:c9:a9:e7:a2:07:1b:2d:fc:2a:
9a:80:59:37:0b:6e:f8:d2:46:d2:7e:06:b5:71:10:
38:52:ac:bd:ea:43:68:a3:46:4c:11:bf:ca:71:a1:
18:1b:76:b3:42:99:74:19:6a:2e:17:f1:26:63:6f:
61:f9:04:3c:92:4e:a9:7e:19:af:b9:6c:23:a5:28:
5e:68:9e:eb:30:4a:9d:2d:53:ee:6c:fa:7c:ac:22:
94:fb:8a:2f:e1:71:e2:f2:33:3a:eb:c0:47:b5:69:
d3:c9:7c:de:3b:0c:4f:e4:af:b0:24:81:10:3b:d1:
73:47:0c:3c:4a:c1:b7:00:8e:dc:5f:15:e7:05:40:
6e:58:ff:ac:44:b4:3f:b8:9c:2c:16:ba:53:f1:01:
0c:9e:0c:a8:3b:46:ac:62:11:74:80:91:c2:1c:b1:
fc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5E:5D:F2:DE:C5:25:26:4A:1C:6E:14:53:6E:74:47:FF:33:3F:B7
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/MF5d8t7FJSZKHG4UU250R_8zP7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.50.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:08:d7:f6:5b:c4:f1:3b:b0:07:71:b9:11:d2:71:bf:0d:06:
7e:9e:6d:ee:97:31:08:25:dc:46:c5:be:3e:31:b7:c3:74:d9:
40:bf:72:4e:a5:58:56:64:8b:4f:0a:27:93:9c:ef:5e:6f:c1:
9a:19:33:5a:d7:02:8d:18:b9:10:4b:32:77:0a:a9:27:4c:de:
f6:24:7b:38:51:ce:17:4e:09:e0:26:a7:fb:c4:08:b1:3d:ef:
d6:0f:de:16:ce:92:c6:4b:9c:b3:dd:28:a9:25:32:99:34:bc:
74:f2:47:f6:41:95:5c:12:0d:38:61:f6:3b:1e:9b:02:5d:0c:
8e:49:99:00:7e:8a:9f:85:81:e1:ec:93:61:f5:ee:07:c2:07:
af:e6:ee:44:88:a1:3a:c3:b6:37:fe:a7:9c:9f:dd:7d:7a:3a:
c2:af:f7:80:e1:4b:33:99:85:e2:5f:64:8d:71:95:89:30:3c:
69:d2:45:e8:8d:48:8c:66:10:9b:57:36:ef:34:25:96:f6:ea:
05:3d:0e:2e:0b:45:0a:05:d0:4e:c8:e7:b3:f4:2c:90:6b:e2:
c1:d4:05:c2:1b:1e:8c:c8:cc:3d:ab:14:d7:a7:2d:41:7f:92:
25:6e:0c:d7:09:bb:70:b8:35:82:e2:94:e4:14:73:7a:7d:4c:
84:c9:37:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:15 2024 by rpki-client on console-fra.rpki-client.org