Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/7F7YtkEgKlHgHN28i_vvdK4TnEM.roa
File: 7F7YtkEgKlHgHN28i_vvdK4TnEM.roa (raw, json)
Hash identifier: sdPEqJDOAbWnaY+LhYri7pNYGDXmhU3azdcqn6HpWR0=
Subject key identifier: EC:5E:D8:B6:41:20:2A:51:E0:1C:DD:BC:8B:FB:EF:74:AE:13:9C:43
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 01856F0B704A291110D0E5B52D21CDE15315
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/7F7YtkEgKlHgHN28i_vvdK4TnEM.roa
Signing time: Sun 01 Jan 2023 20:34:58 +0000
ROA not before: Sun 01 Jan 2023 20:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15418
IP address blocks: 185.132.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:70:4a:29:11:10:d0:e5:b5:2d:21:cd:e1:53:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Jan 1 20:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec5ed8b641202a51e01cddbc8bfbef74ae139c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:9d:e6:98:06:67:2a:62:c9:28:58:2e:00:
bc:f2:46:14:10:4a:e0:c4:f8:f6:c3:f7:0d:1c:8d:
8d:f6:66:7d:9b:84:99:1d:a4:17:f2:43:f0:75:e9:
0a:86:df:72:9c:b6:b5:5d:55:ca:a8:9f:b2:6b:83:
c5:8f:98:da:18:03:14:57:75:d0:63:fb:53:fa:77:
2c:88:50:77:ed:02:e7:d3:6c:04:f5:22:51:59:fb:
b3:91:b0:6a:91:a9:21:af:1a:84:86:b4:20:9b:e0:
37:63:d8:47:8f:ef:f2:a7:49:8c:49:ea:b7:79:42:
5f:9f:87:59:a0:5b:e2:33:64:51:18:55:6b:e0:79:
3a:58:8f:ee:ae:f2:db:37:32:4d:e5:0e:94:ad:cb:
7c:8b:52:c0:ef:66:36:b1:61:72:01:ec:42:cc:fe:
64:7e:fc:d6:82:85:2d:d7:a4:27:6e:ab:c3:59:a8:
ec:d2:54:31:53:60:de:e3:27:49:a1:d4:f1:2f:25:
74:f0:54:98:b8:55:0d:b9:75:23:7f:d5:c1:c7:5c:
32:6e:12:e0:f5:fa:79:1b:45:dc:bb:58:19:f2:8d:
c1:c2:46:28:3a:4a:33:18:88:99:42:51:30:c9:61:
d4:65:1f:d9:75:e2:a8:1a:2c:b3:19:5e:0e:d3:80:
b1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5E:D8:B6:41:20:2A:51:E0:1C:DD:BC:8B:FB:EF:74:AE:13:9C:43
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/7F7YtkEgKlHgHN28i_vvdK4TnEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.32.0/22
Signature Algorithm: sha256WithRSAEncryption
55:e6:2f:f8:82:78:87:15:85:54:86:37:f1:cd:85:a0:ec:2b:
73:d3:e0:01:1c:8c:f7:e6:1c:33:02:be:f4:0a:ac:b9:3c:bb:
6f:f0:be:cb:c2:0f:df:29:c8:b2:41:f0:14:7d:fd:4f:41:ff:
54:06:6d:10:77:ca:a3:83:38:7e:38:5e:c8:7d:10:c7:5b:41:
58:43:62:73:91:92:33:eb:c0:1e:21:b0:88:ec:90:68:c0:59:
a7:d4:57:87:97:4d:f5:99:22:16:9a:3f:76:d3:28:39:79:da:
79:a9:ef:69:a4:60:15:38:c6:cf:d2:07:60:ca:7c:0a:eb:59:
72:3b:b4:43:9e:60:8b:03:0d:73:87:f9:fb:5b:06:45:b1:ee:
c4:6f:75:49:b2:7d:85:dd:3e:0a:fd:98:a8:ac:f6:8a:f4:46:
1a:75:69:a6:e5:f5:eb:a4:dd:74:ee:8e:91:c5:43:d6:ef:94:
5f:e0:28:c2:1d:d2:56:17:7f:3b:85:46:98:13:a8:ef:69:00:
9a:c6:77:97:cf:57:8d:6f:5a:ba:7c:f4:77:e6:f9:93:98:01:
3c:40:fb:3c:13:ef:6d:6d:8d:d3:c4:08:eb:38:59:02:04:9d:
f5:10:90:cb:70:d6:3b:ba:9f:e7:9c:0c:67:17:a8:3a:d2:ad:
74:d9:b1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:13 2024 by rpki-client on console-ams.rpki-client.org