Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/dGbHBB9Ul5ocEudd6A73tWuWoV0.roa
File: dGbHBB9Ul5ocEudd6A73tWuWoV0.roa (raw, json)
Hash identifier: wJcfHTb7ZyZ4bhJJA0FUbtb3BpnPvCDSCNvGUySjEqs=
Subject key identifier: 74:66:C7:04:1F:54:97:9A:1C:12:E7:5D:E8:0E:F7:B5:6B:96:A1:5D
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 018B062AB4A4C7AB4F1E4940CA196913F0A5
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/dGbHBB9Ul5ocEudd6A73tWuWoV0.roa
Signing time: Fri 06 Oct 2023 18:05:43 +0000
ROA not before: Fri 06 Oct 2023 18:05:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39600
IP address blocks: 85.237.72.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 06 Oct 2023 19:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:06:2a:b4:a4:c7:ab:4f:1e:49:40:ca:19:69:13:f0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Oct 6 18:05:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7466c7041f54979a1c12e75de80ef7b56b96a15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:32:70:4e:d6:fd:43:c5:32:7a:a8:5e:3f:f0:
bd:90:fd:cc:40:53:d0:d2:d8:ea:6f:44:55:23:89:
9b:a8:6d:3b:f8:67:41:c1:aa:cb:7d:34:61:58:eb:
4f:a2:d7:bc:35:13:85:68:fc:bb:cd:30:85:66:92:
4b:b8:52:cd:3d:fc:34:13:cd:5b:86:89:51:f7:b2:
75:e4:bf:24:28:58:d6:cf:87:4f:0b:e6:ee:b3:32:
28:34:5f:87:ff:e0:8c:e7:a9:f3:06:65:fe:fe:53:
19:81:ce:07:dc:24:69:c3:c3:e5:15:1b:89:09:5b:
81:12:5c:6a:fd:79:42:ac:7f:74:55:a3:29:80:7a:
4b:39:20:ec:ec:1b:d4:ef:e0:88:9f:fb:ed:9a:38:
a3:5c:80:75:9e:a5:11:15:e4:a8:36:48:87:56:a2:
16:88:56:cd:37:2d:c2:83:43:93:72:88:00:df:e6:
bd:23:66:60:d8:4a:54:ee:63:a0:1c:83:b7:69:27:
c4:f7:59:cd:42:9a:81:64:a2:1e:49:2c:86:59:45:
3e:b7:e9:7b:55:01:ce:02:02:6f:de:34:43:84:36:
1a:8b:7e:2f:3a:55:aa:cd:86:f0:9f:39:f9:94:7b:
00:a4:78:f0:96:bd:81:08:8e:50:c5:5f:40:73:58:
e8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:66:C7:04:1F:54:97:9A:1C:12:E7:5D:E8:0E:F7:B5:6B:96:A1:5D
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/dGbHBB9Ul5ocEudd6A73tWuWoV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.72.0/22
Signature Algorithm: sha256WithRSAEncryption
15:18:23:c0:80:77:3a:30:2b:a9:1e:d1:9e:ec:63:fb:0a:1f:
0a:14:b2:8f:80:aa:fa:60:ab:a0:3c:8e:a0:35:20:bd:84:21:
fb:47:2a:f2:11:a3:bf:6b:d8:80:1e:4b:c2:4c:d9:d2:d9:80:
df:7d:6f:2d:e2:85:3e:f2:f6:25:2a:5d:4c:61:98:10:4a:57:
d3:74:87:87:98:72:34:f9:60:f6:13:af:a8:3a:1e:4d:44:27:
ca:cc:b8:20:a7:9a:68:ef:10:66:77:7b:0c:1c:02:a1:47:0e:
fb:fc:a2:9d:7c:21:19:4e:fe:c4:29:7e:e5:d4:2d:c1:72:2c:
c5:81:e2:42:31:dd:1e:8f:6d:da:f6:14:c4:88:4b:f7:5e:5d:
e7:25:f9:ff:e7:fb:9c:e1:32:fe:1a:de:81:42:f1:13:0e:2c:
03:18:7c:00:ea:cf:94:12:e2:53:92:23:63:1d:17:25:f5:b3:
e9:9a:5c:79:db:3b:8c:1b:3f:f3:af:b1:fd:1c:da:05:e5:71:
a6:dd:a0:90:6a:a9:ff:78:e4:6e:15:65:42:f5:86:9e:ca:cc:
2b:91:c0:6a:c6:09:17:c8:df:12:be:88:ab:66:5b:b8:e1:b5:
f0:a2:6a:ee:05:76:d9:54:22:52:6a:78:be:ad:32:3d:0d:8c:
97:cd:da:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org