Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/dPfpzz3bmegpZ2RxlJg89ndmFeQ.roa
File: dPfpzz3bmegpZ2RxlJg89ndmFeQ.roa (raw, json)
Hash identifier: 2++U2vdDdjxbwfHJetW7TTCs6CtyZh3uy6I96NtljFw=
Subject key identifier: 74:F7:E9:CF:3D:DB:99:E8:29:67:64:71:94:98:3C:F6:77:66:15:E4
Certificate issuer: /CN=2614411899d721f343ed2a39629969417b5b655d
Certificate serial: 01856D0AB7B0B2773E200E55EDA6F56E4C3F
Authority key identifier: 26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/dPfpzz3bmegpZ2RxlJg89ndmFeQ.roa
Signing time: Sun 01 Jan 2023 11:14:57 +0000
ROA not before: Sun 01 Jan 2023 11:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207046
IP address blocks: 185.249.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:b7:b0:b2:77:3e:20:0e:55:ed:a6:f5:6e:4c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2614411899d721f343ed2a39629969417b5b655d
Validity
Not Before: Jan 1 11:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74f7e9cf3ddb99e82967647194983cf6776615e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:8a:80:1a:20:6a:cd:b9:77:62:18:3a:df:
90:fe:9b:cf:ec:13:74:bb:55:29:ae:6d:95:3c:11:
dd:f9:1f:ba:34:1a:b9:46:f1:f9:21:5b:fc:20:a4:
32:82:fc:29:54:1e:a3:e2:e9:ee:55:cf:4d:eb:eb:
1b:07:01:29:de:04:a4:78:e8:fa:07:1a:2b:f3:1d:
8f:a8:79:b1:30:1e:b3:eb:ba:9d:6f:23:65:ec:39:
c9:54:48:1d:11:68:ad:a3:f8:18:70:0f:20:4c:c9:
a7:4a:86:1d:49:6b:df:a5:bb:df:13:68:ee:c8:29:
89:22:aa:35:82:ca:9f:f9:1a:b4:ba:d0:8a:a3:1c:
c3:02:99:10:0c:1e:b6:fa:31:15:f7:f3:37:69:a0:
d7:5a:4a:dd:3d:2c:6f:45:54:3e:30:66:9a:05:82:
87:b4:f5:68:cb:42:7a:bd:6a:dc:fe:de:2f:61:30:
bb:2c:1b:f3:1d:86:85:ac:96:1c:ed:31:f3:c6:a2:
c5:fe:47:34:30:d0:28:9c:7f:c7:f6:a8:f3:41:0f:
d2:b1:95:30:a2:9f:59:f9:14:2d:ff:69:c8:0d:25:
1d:bf:0c:3d:b2:97:0c:ce:00:aa:49:4b:4d:f9:98:
26:a7:1a:11:0a:12:f2:a2:4f:3e:89:7e:d5:a1:6d:
b7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F7:E9:CF:3D:DB:99:E8:29:67:64:71:94:98:3C:F6:77:66:15:E4
X509v3 Authority Key Identifier:
keyid:26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/dPfpzz3bmegpZ2RxlJg89ndmFeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.52.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d6:f9:80:ab:95:23:8b:ad:58:2f:01:2c:60:5f:b6:90:93:
3f:7b:12:4a:9e:5f:74:8d:08:8a:b2:b6:75:d3:b0:9d:d1:09:
01:02:6b:d0:08:4e:18:43:05:92:b6:ba:ac:bb:8b:d8:96:5c:
b7:a9:b2:21:70:86:27:ef:e5:c2:10:4f:c6:05:84:8e:c5:9f:
d2:98:b0:78:ca:7f:5f:de:1e:93:c4:c5:0d:96:e9:9b:f0:ac:
05:38:f6:54:02:ec:3c:fe:29:ed:6d:96:16:23:88:ab:34:b8:
d6:a8:13:2d:0a:af:c1:bb:6e:97:49:37:85:b4:2f:4a:a9:a7:
d2:5b:d0:f0:03:63:f0:b7:08:a9:1e:de:26:be:7c:b3:b3:43:
c1:b8:fb:af:16:ee:09:d8:2f:c3:f3:94:4c:93:37:8d:26:6c:
c6:d9:66:3c:ca:b3:1d:7b:72:1d:56:21:4c:08:88:22:43:5d:
f7:74:ef:87:eb:e3:74:e5:90:c3:00:79:d9:c0:69:6b:a0:8a:
e6:36:58:f3:f8:2e:da:b9:98:8a:b8:d9:e2:28:08:84:ec:68:
db:de:8d:0a:1b:4c:61:f7:d9:b5:a7:c9:7d:3d:b1:05:0f:25:
0c:b4:da:30:e6:ed:e4:d2:45:49:a1:e8:79:bd:72:a7:8b:99:
a8:4e:0b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:27 2024 by rpki-client on console-fra.rpki-client.org