Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/9l4EGQbFJVHUVaNVha1L8bW9bmQ.roa
File: 9l4EGQbFJVHUVaNVha1L8bW9bmQ.roa (raw, json)
Hash identifier: 8u9g1aNpt198tJxh8mQdpvXW7phssyKy4YIXoWCMEYo=
Subject key identifier: F6:5E:04:19:06:C5:25:51:D4:55:A3:55:85:AD:4B:F1:B5:BD:6E:64
Certificate issuer: /CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Certificate serial: 018CC94E284F3C00F9C2F2E67871F3C99750
Authority key identifier: 9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/9l4EGQbFJVHUVaNVha1L8bW9bmQ.roa
Signing time: Tue 02 Jan 2024 08:33:11 +0000
ROA not before: Tue 02 Jan 2024 08:33:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206406
IP address blocks: 185.187.95.0/24 maxlen: 24
185.187.92.0/24 maxlen: 24
185.187.94.0/24 maxlen: 24
185.187.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 09:42:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:28:4f:3c:00:f9:c2:f2:e6:78:71:f3:c9:97:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Validity
Not Before: Jan 2 08:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f65e041906c52551d455a35585ad4bf1b5bd6e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7d:f4:6c:51:ff:1f:06:61:b3:f5:54:75:f8:
0b:e9:66:6f:a9:71:e2:0f:ed:18:3f:52:37:2d:52:
e8:4d:73:0e:2e:f7:94:ec:74:60:23:d2:4c:77:be:
f5:ff:75:cc:5c:cc:99:e3:d5:c7:c7:6d:46:c9:00:
50:de:06:06:2b:13:6b:07:c8:14:e4:44:11:91:63:
26:b0:a1:71:cf:fa:b5:05:24:12:11:e6:85:62:17:
10:e7:08:48:38:ec:0c:09:a2:18:c3:99:6e:a2:24:
1d:c6:55:97:7f:2a:ad:ce:37:76:cd:0c:f0:49:22:
f5:f8:5e:5e:01:2b:ca:3d:01:2f:26:ce:03:5b:c6:
4a:d2:69:3a:93:c8:ba:c0:b8:09:2a:b9:e3:11:97:
2a:ca:75:f8:b7:67:11:e6:4b:32:0f:96:e7:9c:19:
23:49:3f:b3:e7:84:ed:cd:a2:1c:4d:68:9e:72:25:
4e:b0:8f:a2:d9:ba:1e:3c:c5:2f:c6:9e:59:4a:8e:
43:4e:e6:02:3e:c9:ce:43:ba:ba:d6:53:7e:c4:ff:
92:6d:e0:b6:ef:bd:7a:f9:50:8f:57:96:70:28:40:
59:b3:d5:5e:db:c2:32:a4:7e:61:3e:29:cb:ae:96:
60:c1:13:b9:bb:22:e2:2c:f6:f1:f3:39:0f:65:1c:
50:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5E:04:19:06:C5:25:51:D4:55:A3:55:85:AD:4B:F1:B5:BD:6E:64
X509v3 Authority Key Identifier:
keyid:9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/9l4EGQbFJVHUVaNVha1L8bW9bmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:23:7f:de:5c:db:85:78:7c:07:bf:48:87:76:88:70:fc:d9:
de:4d:e9:8f:74:ff:23:08:91:8f:63:4b:ee:35:b0:9f:5d:00:
47:a7:be:e3:af:e5:1c:31:6a:6d:c9:f2:49:6b:23:6c:07:8e:
9c:b0:ea:a8:69:6e:c5:5c:3c:98:91:eb:78:a6:59:76:d0:e1:
05:5a:fb:8c:df:7f:6b:44:69:6e:07:ae:fd:90:b2:df:08:34:
a6:2d:79:bf:34:cc:2a:f0:c3:5e:75:b3:92:d5:ac:3b:16:02:
9d:b2:1d:79:27:7c:a5:5d:18:40:61:54:31:21:88:61:0c:ea:
be:c0:d3:ff:56:98:3a:7b:ca:30:69:3c:e0:17:a4:60:f2:0b:
c1:8f:7d:72:ee:78:40:df:8e:72:cf:33:b6:d5:38:8a:c3:06:
b3:97:fb:e1:be:e8:08:1e:f0:62:37:ea:70:77:fb:d8:c9:bb:
8b:58:56:f1:6e:3d:18:03:79:53:28:63:c0:c3:81:ff:9b:52:
b6:98:89:1e:a5:04:ea:cd:cb:88:2b:89:96:ba:44:bc:46:3d:
bf:3e:16:71:d0:eb:a7:91:e2:11:83:8e:dc:10:57:e6:98:24:
d0:3d:80:fd:6a:c6:aa:62:20:78:1e:59:4d:fa:a3:01:c8:b2:
54:6c:ec:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:22 2024 by rpki-client on console-fra.rpki-client.org