Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/fSGFZqXh2xdDvGwcsG9lBoerxhY.roa
File: fSGFZqXh2xdDvGwcsG9lBoerxhY.roa (raw, json)
Hash identifier: 5fR+nZKw1oqnfIWfrXykvjjOMg4Xo3f+O66fQQ0m40I=
Subject key identifier: 7D:21:85:66:A5:E1:DB:17:43:BC:6C:1C:B0:6F:65:06:87:AB:C6:16
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 0186114E5799F5C161AA43A749399061D128
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/fSGFZqXh2xdDvGwcsG9lBoerxhY.roa
Signing time: Thu 02 Feb 2023 08:46:32 +0000
ROA not before: Thu 02 Feb 2023 08:46:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211432
IP address blocks: 185.21.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Oct 2023 23:13:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:4e:57:99:f5:c1:61:aa:43:a7:49:39:90:61:d1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Feb 2 08:46:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d218566a5e1db1743bc6c1cb06f650687abc616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:50:05:9d:77:1a:85:c7:6f:fa:b6:e5:87:ee:
e5:ad:a6:14:2c:51:db:d5:56:4b:79:b4:86:20:69:
92:85:8f:95:5f:bd:b0:8a:3a:41:58:0c:6b:24:1f:
cd:9d:84:92:3b:80:eb:15:9e:bd:15:d7:9d:7c:45:
a1:58:1b:9b:6b:5f:3c:50:03:3c:1a:c9:80:f8:29:
3b:56:dc:b3:53:cf:30:17:21:e4:43:bf:c6:fb:b0:
5a:07:fc:1c:39:eb:ac:b6:94:67:4f:ad:2c:2e:7c:
c5:c1:d4:d3:65:36:6f:b9:9e:00:9c:9b:ea:d4:10:
8f:f7:04:5d:55:ac:99:5b:a9:c7:e6:ef:3b:0b:86:
84:1d:8f:d9:02:ef:db:3a:0d:06:d3:c2:32:2b:5e:
11:90:42:f3:0d:e8:bd:86:ef:3e:92:03:67:9b:4b:
e7:f7:0d:44:89:22:08:b3:3a:a6:64:14:c9:07:65:
dc:d5:20:dc:06:d0:6f:83:82:39:19:1f:a1:2e:94:
0c:13:6a:43:63:fa:03:84:df:84:69:81:90:ab:50:
c7:2a:e8:e8:36:c1:8b:39:63:17:9a:38:cf:c0:74:
dd:1c:e8:12:79:26:2c:34:71:af:f5:68:95:45:75:
1c:9d:78:82:aa:0f:2e:df:03:e4:cd:56:60:72:f5:
6c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:21:85:66:A5:E1:DB:17:43:BC:6C:1C:B0:6F:65:06:87:AB:C6:16
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/fSGFZqXh2xdDvGwcsG9lBoerxhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.50.0/24
Signature Algorithm: sha256WithRSAEncryption
81:55:92:78:40:b7:68:13:8a:43:16:40:a4:55:d1:ed:fc:c8:
c5:23:e7:ce:d1:c9:5b:13:a4:f5:79:68:48:39:fa:76:2c:20:
8e:c4:df:ac:e6:80:c5:c2:80:6b:20:23:84:bb:5b:5d:9e:11:
75:a1:0c:fc:57:43:d3:e3:62:50:b9:d6:67:9a:a0:70:1e:24:
00:36:18:4b:be:69:67:73:9c:e9:5b:2a:3c:2e:df:5a:40:49:
9a:24:24:29:e5:ab:89:c5:7d:59:ba:7c:9b:69:b2:f8:e0:b5:
65:e3:2c:e8:15:0e:3a:cb:c5:d9:15:ff:05:0a:aa:cf:e1:53:
50:97:b5:12:e7:5c:78:44:55:6d:7c:32:a9:fd:ac:f1:02:27:
83:5f:04:a4:df:97:7d:d6:a7:af:e7:15:11:7a:31:41:ea:d8:
94:27:ec:b4:ac:79:c9:d5:a9:af:2f:18:26:44:04:3d:7c:90:
92:66:a9:95:08:50:ff:77:55:95:09:ed:5c:6f:1b:1a:29:6b:
71:c3:20:61:b4:d1:66:bb:0e:c4:dc:42:04:fd:9a:d3:d8:5f:
92:7e:da:4d:8e:e1:51:ff:37:52:3d:c7:90:e8:7a:3e:a9:a1:
5b:c0:41:7b:b1:10:a0:e2:cb:45:9c:92:5a:bc:3b:58:d8:fe:
d7:1c:f5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:40 2024 by rpki-client on console-ams.rpki-client.org