Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/7h0WfdN7Qo2_EYOfbAbCNR-34vw.roa
File: 7h0WfdN7Qo2_EYOfbAbCNR-34vw.roa (raw, json)
Hash identifier: x3MLBftB+ePBdEP9CX+4JgTQLYU77nnuO4HZiGvDA34=
Subject key identifier: EE:1D:16:7D:D3:7B:42:8D:BF:11:83:9F:6C:06:C2:35:1F:B7:E2:FC
Certificate issuer: /CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Certificate serial: 01880474E509B71316B4F26B06DE5A3CED69
Authority key identifier: 64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/7h0WfdN7Qo2_EYOfbAbCNR-34vw.roa
Signing time: Wed 10 May 2023 06:59:09 +0000
ROA not before: Wed 10 May 2023 06:59:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48171
IP address blocks: 185.238.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:04:74:e5:09:b7:13:16:b4:f2:6b:06:de:5a:3c:ed:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Validity
Not Before: May 10 06:59:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee1d167dd37b428dbf11839f6c06c2351fb7e2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8f:7f:aa:16:1e:16:36:41:7a:b4:9c:da:52:
69:3c:d1:ee:11:3d:a7:f3:14:93:cc:27:5f:c0:6c:
4b:d4:42:cf:ef:ed:09:3e:22:de:c2:47:1f:36:0d:
f0:d6:45:98:99:70:5e:33:81:98:01:d9:d2:36:8e:
76:02:84:c1:31:27:98:db:db:c8:98:df:69:70:e9:
9c:7f:04:8e:0a:86:41:80:4c:74:fd:e5:67:2b:60:
98:10:c1:81:df:b6:a1:45:61:dd:c8:68:78:09:ce:
03:85:19:ec:8f:e1:64:f7:9c:6a:f3:ed:c9:0d:d9:
9b:a8:f7:ed:a0:5d:77:8d:8a:d7:25:8a:53:3e:e3:
cc:82:5d:61:87:12:e8:77:f8:ab:af:16:91:a2:80:
32:d4:6e:83:b7:73:1d:07:5a:dc:47:1e:aa:fa:96:
d3:0d:d7:f9:44:ec:2a:ac:1a:1a:65:95:91:49:7d:
6a:d6:ec:d4:fe:4b:0f:a0:66:e0:ad:e5:9e:fa:78:
d9:be:3b:cd:10:82:45:ee:74:a4:5a:a6:86:98:82:
73:3b:89:90:3c:03:1d:66:d1:c2:77:8a:84:9a:25:
15:f0:e9:f0:73:14:f4:78:4b:22:2c:9e:b2:ee:45:
43:78:de:2d:57:f8:d2:33:51:d4:24:ca:1c:5b:5c:
d8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1D:16:7D:D3:7B:42:8D:BF:11:83:9F:6C:06:C2:35:1F:B7:E2:FC
X509v3 Authority Key Identifier:
keyid:64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/7h0WfdN7Qo2_EYOfbAbCNR-34vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.184.0/22
Signature Algorithm: sha256WithRSAEncryption
78:c8:29:02:50:75:15:9f:d4:d3:8b:fb:91:96:50:ae:a8:47:
b9:fc:fd:24:d5:de:13:85:9a:c7:ac:98:29:5b:b4:64:6d:67:
8b:09:38:1d:04:d8:de:e2:5a:21:eb:9b:f9:e4:d4:31:a5:16:
ce:82:bd:e6:1c:15:3b:7b:c3:f6:6a:31:39:ab:23:1b:50:81:
46:c6:87:36:83:74:95:94:b6:c1:9e:d0:01:6a:f5:24:f0:61:
32:2c:6b:2a:32:84:59:b8:f1:ee:d4:63:d8:37:d5:50:99:df:
c3:62:87:2f:96:de:08:ba:cb:f3:36:6e:91:9d:d3:52:1c:7d:
b0:a6:7f:3b:66:d8:87:e7:7a:de:1a:04:65:70:42:28:93:99:
a7:2d:2d:cf:47:41:51:ba:21:d1:24:2d:9b:f1:9c:70:2e:7e:
8e:b6:5a:06:5c:de:52:1d:88:1c:f3:5d:96:cb:2c:79:88:9a:
cd:c6:ec:9f:30:d2:f9:e6:8b:c8:88:6d:67:70:e9:ea:d3:bf:
12:7c:4f:2f:34:db:b8:77:5e:27:3f:c3:89:0f:f5:b9:85:ec:
06:ee:05:b6:6f:3f:95:8e:f5:a5:79:57:a7:df:c7:5e:bb:84:
01:5b:d4:ff:1a:2d:f5:e7:62:13:16:4b:f4:1a:c2:95:d1:ec:
47:b0:08:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:05 2024 by rpki-client on console-fra.rpki-client.org