Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/T3xp4H3Zjf96RS5KGzrg8f6fP1I.roa
File: T3xp4H3Zjf96RS5KGzrg8f6fP1I.roa (raw, json)
Hash identifier: x+1asjOWH7tVqIJ9WJc9xps8wDBwajkZVc7AY1q9pTI=
Subject key identifier: 4F:7C:69:E0:7D:D9:8D:FF:7A:45:2E:4A:1B:3A:E0:F1:FE:9F:3F:52
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 018B0A269B0166042920A6F48E8E966E6A4A
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/T3xp4H3Zjf96RS5KGzrg8f6fP1I.roa
Signing time: Sat 07 Oct 2023 12:39:43 +0000
ROA not before: Sat 07 Oct 2023 12:39:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198178
IP address blocks: 185.157.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0a:26:9b:01:66:04:29:20:a6:f4:8e:8e:96:6e:6a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Oct 7 12:39:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f7c69e07dd98dff7a452e4a1b3ae0f1fe9f3f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cd:6b:44:4e:ad:02:16:1b:14:11:65:a8:ac:
f8:51:8a:72:5e:2b:79:ef:38:57:9f:fe:27:4d:30:
88:f6:85:f9:29:ca:73:9c:3b:2c:a4:d2:0a:7f:ab:
3f:32:34:01:1b:bd:be:5a:ca:7f:1a:4e:08:c3:ec:
76:3b:5b:4a:50:c6:36:90:97:71:24:32:f2:10:41:
ca:bc:f9:35:a6:6d:13:00:1c:9c:00:95:9a:de:6b:
fc:42:f4:22:4e:b6:72:5b:85:bb:2e:f5:31:9f:4f:
7e:45:13:bf:ff:bb:46:db:94:ad:2f:86:51:70:a0:
fe:1b:87:b2:cb:35:72:d4:00:5e:4a:b6:d9:ec:42:
03:22:cd:35:6b:f5:18:dd:8a:2c:d5:9b:46:57:fd:
3d:ab:0e:7b:3b:cd:ef:57:c5:c3:f2:84:04:1c:46:
fa:ad:6e:8b:8c:11:aa:5a:6f:d2:0e:1e:5d:95:b8:
be:c5:b4:b9:07:70:68:ea:5e:ea:b1:bd:78:7a:eb:
d9:4b:5f:5d:6d:a5:f4:fe:45:32:72:a8:99:74:18:
4c:ab:c1:a3:c4:1c:a1:82:0f:04:22:e2:df:8e:1d:
93:9a:44:94:a2:23:53:aa:d0:2f:3d:b1:89:b2:fb:
85:0a:de:9a:b7:58:22:84:6d:a7:c7:42:04:82:40:
21:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7C:69:E0:7D:D9:8D:FF:7A:45:2E:4A:1B:3A:E0:F1:FE:9F:3F:52
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/T3xp4H3Zjf96RS5KGzrg8f6fP1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.120.0/24
Signature Algorithm: sha256WithRSAEncryption
43:f7:57:2b:bd:49:a6:e9:2e:37:40:10:cf:e4:04:31:80:5e:
16:b0:cc:c3:65:dd:42:17:c2:51:00:1e:43:88:6c:56:89:d2:
2f:7c:30:e7:9a:5b:02:c4:4e:1d:8f:3f:f0:14:21:4b:b3:5a:
84:f8:8d:1c:4c:c9:e5:a5:cd:fb:46:75:13:e1:24:ed:1f:d5:
74:a5:71:b5:50:53:5a:56:dd:0b:f6:f3:8a:05:d1:b2:1d:3d:
b9:22:59:71:56:af:96:9e:c3:8d:45:c5:f7:4f:bd:e2:29:b9:
03:7a:74:6b:60:7c:63:58:4a:71:8f:b2:5d:10:82:27:00:dc:
48:d8:64:ed:4c:d1:25:55:71:34:8f:24:54:2b:fc:f5:ad:16:
27:6c:24:d8:7f:88:9f:cf:d4:f9:b4:fd:92:59:14:c9:d8:8c:
08:e9:44:4e:9d:d8:44:ae:4c:86:b1:f4:08:7d:90:44:d4:14:
90:a3:c9:db:27:50:2e:8e:0f:0f:e8:55:1c:1e:b8:9e:99:6f:
de:3c:c9:c4:e5:72:ef:e3:69:3a:78:69:99:c3:b1:b6:84:0c:
fc:0a:83:94:e5:43:25:66:f4:95:02:ed:98:fb:2f:cf:13:9d:
9f:31:b2:ea:cb:6c:25:7a:e1:d9:07:2e:83:d0:39:2e:9e:22:
1e:1a:34:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:29 2024 by rpki-client on console-ams.rpki-client.org