Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/2N1GT0ixfZyX0_hRjNfypZRv3ec.roa
File: 2N1GT0ixfZyX0_hRjNfypZRv3ec.roa (raw, json)
Hash identifier: VA0GpCwZj82B0gZyy87C+fapVFQGX+aV3ICY24dcTs8=
Subject key identifier: D8:DD:46:4F:48:B1:7D:9C:97:D3:F8:51:8C:D7:F2:A5:94:6F:DD:E7
Certificate issuer: /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Certificate serial: 01857094F25001EEB9C78EB6DE45D0AFE999
Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/2N1GT0ixfZyX0_hRjNfypZRv3ec.roa
Signing time: Mon 02 Jan 2023 03:44:47 +0000
ROA not before: Mon 02 Jan 2023 03:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9063
IP address blocks: 185.168.141.0/24 maxlen: 24
2a10:65c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:f2:50:01:ee:b9:c7:8e:b6:de:45:d0:af:e9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Validity
Not Before: Jan 2 03:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8dd464f48b17d9c97d3f8518cd7f2a5946fdde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4a:1b:44:0a:e3:ad:d4:6b:37:84:25:3e:97:
47:cd:35:24:15:89:28:55:c1:09:54:c1:79:69:be:
6f:ec:75:b8:d6:30:c9:57:ba:d2:33:c2:98:c1:84:
ff:3e:37:20:63:20:18:7e:d5:35:de:29:22:ff:5a:
83:ed:45:a2:5a:6b:dd:d3:38:23:f4:34:9c:f8:88:
50:c4:cc:58:d9:30:9e:5c:cf:3a:0c:25:bb:6d:38:
2b:59:18:f7:48:77:4d:05:cf:34:5e:ae:40:62:d8:
aa:22:35:11:96:26:8c:7f:fc:b7:f6:72:40:84:62:
ef:f5:18:6e:5d:9f:08:78:e5:b9:49:11:6e:a3:bc:
04:bf:03:dd:21:35:e4:86:7c:b0:54:2f:dc:12:35:
07:ce:6a:0d:71:94:66:ac:c4:60:65:ea:68:59:c4:
70:5f:ee:f2:10:8d:11:d6:c0:88:20:80:38:9b:28:
f4:98:60:3e:32:04:43:9f:4f:60:20:9a:d2:c7:e9:
36:e9:46:45:ce:5d:86:90:d0:3a:32:fc:e8:96:15:
cc:6a:82:79:d5:0d:e8:fe:7a:7e:19:1d:f2:82:1c:
12:11:ce:49:c9:0a:88:20:17:82:d6:4d:bf:3a:6e:
81:ff:15:ed:d8:83:4e:d7:cd:a3:bb:a2:5e:50:7a:
1a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DD:46:4F:48:B1:7D:9C:97:D3:F8:51:8C:D7:F2:A5:94:6F:DD:E7
X509v3 Authority Key Identifier:
keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/2N1GT0ixfZyX0_hRjNfypZRv3ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.141.0/24
IPv6:
2a10:65c0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:6e:10:bd:32:a5:18:80:64:21:ff:69:45:cb:b7:ec:ad:11:
5b:f6:ae:b2:0c:ed:27:a9:07:06:4e:80:15:39:21:07:c4:dd:
3b:6b:b1:10:13:4b:43:c3:8d:99:30:f1:e5:3e:7a:0e:71:61:
0a:83:ce:46:79:b9:94:9f:1e:db:d7:fe:a1:c8:9a:de:c9:c5:
18:5c:a2:8b:50:21:bd:ff:91:45:3c:35:41:a1:f6:72:a3:88:
97:0b:83:05:a4:a5:39:be:7a:69:1d:9c:8e:80:62:de:73:80:
b5:9f:8f:d7:16:e1:db:9b:c7:a5:18:bb:cc:b1:78:3f:72:8d:
2a:c5:3c:01:97:e8:49:dd:fe:b3:83:59:57:4b:89:f4:20:42:
f4:1c:49:9e:49:4d:15:59:7d:8c:b4:c4:ac:fa:91:7e:e3:d8:
8a:cd:6a:31:3a:bd:31:0a:52:b7:cf:85:ac:12:46:fe:6d:62:
4f:b5:12:cf:9b:30:23:b3:22:bb:54:7b:75:d2:2e:77:97:0d:
30:eb:fd:62:b8:f3:f7:10:e1:84:53:9d:7c:53:45:9d:c2:3d:
cf:d5:e4:fc:ba:e5:0b:6e:49:4c:c9:4c:7a:ef:d1:71:b9:30:
05:0a:b4:a2:b1:9f:c1:1e:e1:2b:ea:a3:62:f7:e3:8e:11:66:
e0:e6:11:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:43 2024 by rpki-client on console-ams.rpki-client.org