Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/ePfhqnAjOce7jNon4osnZjHeAEE.roa
File: ePfhqnAjOce7jNon4osnZjHeAEE.roa (raw, json)
Hash identifier: U4esuDB4aoiITj3i/qrYYItSnQSNa4gH0H/mNeVFE4I=
Subject key identifier: 78:F7:E1:AA:70:23:39:C7:BB:8C:DA:27:E2:8B:27:66:31:DE:00:41
Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial: 018CC6B7BBAA08EAE73C177436178822466B
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/ePfhqnAjOce7jNon4osnZjHeAEE.roa
Signing time: Mon 01 Jan 2024 20:29:39 +0000
ROA not before: Mon 01 Jan 2024 20:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201769
IP address blocks: 185.114.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:bb:aa:08:ea:e7:3c:17:74:36:17:88:22:46:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Validity
Not Before: Jan 1 20:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78f7e1aa702339c7bb8cda27e28b276631de0041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:9b:6a:95:80:60:40:21:6d:50:03:df:40:21:
a5:9a:73:8c:06:f2:dd:1e:ea:cf:5c:93:42:73:60:
da:c8:bf:2d:6d:ac:de:2f:c8:f8:17:82:c6:99:72:
38:d8:b0:b9:34:cd:8e:5f:95:44:e8:47:7d:48:bb:
f4:8f:9d:21:73:b4:38:0d:2e:28:f3:e7:d7:b3:19:
39:a4:db:2d:0a:04:d7:61:2b:c1:7d:d0:cc:2c:34:
12:9a:f9:d5:a1:da:9a:fa:3f:10:50:81:99:49:97:
85:e3:54:20:eb:95:6c:c2:1a:8c:85:ef:18:d2:28:
60:86:19:63:63:36:27:08:20:76:73:34:d0:49:34:
c8:91:17:f2:82:85:49:ce:1f:91:74:a1:68:48:ba:
8d:a6:e6:07:84:17:df:15:47:b7:45:6c:49:4e:0a:
92:b2:42:4e:6b:44:87:62:d2:87:cd:64:53:fb:8c:
a8:ae:e2:d3:d8:8f:8e:da:79:b6:60:6e:74:a4:7d:
e7:c5:89:98:d6:41:39:8f:63:90:05:f7:4c:49:a4:
43:d8:bc:56:c5:17:c1:e7:18:88:8c:8e:09:7f:f1:
1a:2e:80:90:fb:47:a5:03:a9:59:5a:a5:38:bc:bb:
51:e3:cd:22:0a:cf:f1:ef:4b:ec:32:cd:b8:e1:5c:
f6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F7:E1:AA:70:23:39:C7:BB:8C:DA:27:E2:8B:27:66:31:DE:00:41
X509v3 Authority Key Identifier:
keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/ePfhqnAjOce7jNon4osnZjHeAEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.68.0/24
Signature Algorithm: sha256WithRSAEncryption
43:43:11:5e:7f:ce:09:0d:1b:cf:11:8b:eb:eb:8b:c1:2f:ef:
97:2f:cd:70:2e:b5:af:f8:aa:cf:fb:27:5b:ea:75:97:e5:06:
8d:43:81:8a:e5:77:3f:da:47:d6:38:d7:02:e7:56:c8:ab:8a:
d5:e9:e0:59:83:57:14:56:10:45:1f:e6:80:c8:c8:5f:79:c2:
19:7c:06:a7:30:fc:df:81:4d:b1:5e:1b:ce:cd:a9:64:21:2f:
20:ee:87:5f:f7:17:d3:31:9f:92:69:a6:b5:14:3f:5b:54:c9:
c3:12:b7:ca:83:61:e3:af:81:1b:73:12:dd:02:ba:c9:37:8a:
ea:8b:e5:da:c9:2c:67:23:17:bb:ca:31:5b:63:40:db:9f:26:
b9:6b:48:81:8f:d0:06:b6:fa:11:39:f7:00:5b:15:04:8f:fa:
8c:1a:d9:46:dd:03:10:ab:2d:a8:42:3f:07:48:45:07:0d:09:
60:0d:b2:fc:81:bb:e1:f1:7d:6d:6e:e1:2f:d8:e8:b5:06:e4:
66:93:72:85:13:43:ca:56:24:9f:4f:64:49:83:26:35:2c:a1:
a9:8c:8b:71:59:3c:34:e0:1a:c5:6a:c0:c1:ea:ce:e9:36:1f:
e7:4f:07:0e:61:e6:37:bb:29:fc:94:de:1f:1e:52:cc:0c:a9:
e0:b5:a1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 14:51:11 2024 by rpki-client on console-fra.rpki-client.org