Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/lJePIb4y7xG_swXhfKvhsjzTy-0.roa
File: lJePIb4y7xG_swXhfKvhsjzTy-0.roa (raw, json)
Hash identifier: LqixMNLjYM5vxVPwO9MQIK9j8bPFPodBpJDaIZZSpqA=
Subject key identifier: 94:97:8F:21:BE:32:EF:11:BF:B3:05:E1:7C:AB:E1:B2:3C:D3:CB:ED
Certificate issuer: /CN=7dbc2eca324777d74bf2e73c15b0cc7ff3ee75a2
Certificate serial: 01856DE66E1E56AFDD89AC4A4340D05CBD58
Authority key identifier: 7D:BC:2E:CA:32:47:77:D7:4B:F2:E7:3C:15:B0:CC:7F:F3:EE:75:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/lJePIb4y7xG_swXhfKvhsjzTy-0.roa
Signing time: Sun 01 Jan 2023 15:14:56 +0000
ROA not before: Sun 01 Jan 2023 15:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49036
IP address blocks: 185.113.168.0/24 maxlen: 24
185.113.169.0/24 maxlen: 24
185.113.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jul 2023 09:55:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:6e:1e:56:af:dd:89:ac:4a:43:40:d0:5c:bd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbc2eca324777d74bf2e73c15b0cc7ff3ee75a2
Validity
Not Before: Jan 1 15:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94978f21be32ef11bfb305e17cabe1b23cd3cbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:24:ae:ca:18:bf:28:29:3b:43:92:df:00:db:
ab:85:f9:35:13:3d:7a:50:49:08:2d:30:5a:00:f4:
1b:42:67:5d:3b:f5:9e:a0:27:f8:33:d5:a4:2b:bd:
27:c3:d0:83:79:78:56:75:48:cf:de:21:cf:50:a4:
12:2b:a3:29:d9:f3:78:3d:42:c2:fe:76:04:0b:a4:
5a:1a:1f:67:4c:34:32:51:1a:68:10:16:a3:f7:a0:
fd:2f:f5:14:c5:52:d8:0f:5e:cf:7b:28:8a:2e:ae:
8c:51:45:fa:00:bf:d5:dc:3a:3e:35:b5:da:8d:2f:
f2:d3:34:b9:f8:bd:b3:c6:c9:50:51:6b:c4:3f:38:
f0:70:9f:b6:8d:63:74:94:35:2f:ee:f8:d7:4a:f9:
cd:b4:5a:11:da:c6:cc:08:64:04:8d:dc:49:ad:bc:
7c:30:f9:c6:64:6d:73:97:8d:70:0b:e5:1a:59:26:
82:64:2b:de:60:96:6f:99:d8:d7:61:c7:43:29:5c:
cf:c9:4a:7b:53:55:21:33:e8:11:7d:f9:e3:3c:4d:
bf:32:6f:f4:cc:24:2f:4e:96:55:8b:db:69:c9:93:
fd:dd:78:96:92:7f:ae:42:b0:5b:bb:9a:74:24:23:
74:6d:3a:c8:be:83:a0:d4:47:8e:cf:ce:ed:8b:69:
2f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:97:8F:21:BE:32:EF:11:BF:B3:05:E1:7C:AB:E1:B2:3C:D3:CB:ED
X509v3 Authority Key Identifier:
keyid:7D:BC:2E:CA:32:47:77:D7:4B:F2:E7:3C:15:B0:CC:7F:F3:EE:75:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/lJePIb4y7xG_swXhfKvhsjzTy-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.168.0-185.113.170.255
Signature Algorithm: sha256WithRSAEncryption
07:9a:8f:04:0b:07:e3:70:7f:24:b4:fa:6a:a0:6a:64:6d:3a:
95:aa:09:c5:4f:03:6e:17:26:c7:9b:53:54:fa:0c:56:4f:4d:
ec:9f:12:2c:13:2e:02:a9:9a:b3:75:12:1c:a2:b3:76:e7:bb:
df:b4:1e:c2:03:1b:93:d7:6b:64:96:be:78:73:43:e1:11:5d:
cb:d0:fc:aa:f8:51:03:66:a5:ba:67:4b:d4:54:62:f7:21:b8:
10:e3:d8:ad:ca:f0:0a:50:60:6d:c4:dd:73:60:5b:52:3a:1c:
00:14:31:4d:13:0e:ab:c9:6d:c8:6c:ba:25:32:87:3f:2f:a1:
89:f8:89:c7:79:50:6d:45:a1:7c:80:3f:7d:ce:1f:c1:58:35:
2c:61:9c:92:88:5e:6d:0f:cc:50:18:f1:ff:0f:e3:a5:9d:08:
fe:2d:f9:dd:f6:be:f3:4a:86:9a:4a:0b:d1:c4:31:7b:73:d9:
98:0a:eb:5b:9f:e5:aa:1c:e9:fb:85:f1:e8:7e:0c:06:3b:ce:
c8:af:03:3a:69:fb:d1:11:19:c3:47:d4:a0:5b:1d:06:80:ad:
a6:82:b7:c7:25:58:af:ca:86:11:5d:01:c3:93:7a:42:14:00:
4c:7f:e1:3c:7e:fa:da:08:59:23:b3:04:dc:01:6e:f6:8d:26:
c2:4c:3c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:06 2024 by rpki-client on console-ams.rpki-client.org