Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/xTPaqOxcQ2j1uOj-5ZyiK_743Gc.roa
File: xTPaqOxcQ2j1uOj-5ZyiK_743Gc.roa (raw, json)
Hash identifier: P3x/bgtXbn9JTHmx6FV6PCGZ+t7TNS19wlwVojLidWU=
Subject key identifier: C5:33:DA:A8:EC:5C:43:68:F5:B8:E8:FE:E5:9C:A2:2B:FE:F8:DC:67
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 018DA1EE8D624E10F6CAC9E18C659F0D1054
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/xTPaqOxcQ2j1uOj-5ZyiK_743Gc.roa
Signing time: Tue 13 Feb 2024 10:06:21 +0000
ROA not before: Tue 13 Feb 2024 10:06:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211090
IP address blocks: 185.172.230.0/24 maxlen: 24
185.172.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 13:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a1:ee:8d:62:4e:10:f6:ca:c9:e1:8c:65:9f:0d:10:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Feb 13 10:06:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c533daa8ec5c4368f5b8e8fee59ca22bfef8dc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fc:94:3a:b7:f8:69:6d:d1:d3:ec:eb:74:cc:
12:de:d3:58:dc:88:dc:8a:22:e6:c7:5c:91:81:2d:
4f:2b:5d:a7:e3:8d:42:84:c5:89:87:e6:fb:05:8d:
31:bb:3a:fd:66:a8:c6:b2:b1:74:6d:a1:1d:c6:6c:
22:97:5c:48:4e:7f:7f:e5:3a:b3:6f:45:08:2f:78:
10:16:7f:34:f8:d3:7e:17:63:5e:5b:9e:aa:d2:79:
f9:b9:7d:85:26:17:df:60:82:1d:d7:71:ce:27:ec:
fd:db:bd:87:c2:9a:d4:36:98:c0:01:28:95:61:ec:
31:e6:b7:2f:3c:d7:78:48:e8:dd:b3:ca:20:ed:ec:
5d:42:e2:24:ca:ed:5f:14:30:ea:3c:8c:30:f0:63:
d9:de:61:06:5b:d2:35:4a:a6:05:6d:97:a8:eb:9b:
cd:15:a2:d1:41:27:a7:6f:2d:80:2d:b7:50:20:f6:
54:33:8f:a2:56:30:4e:e8:47:cf:81:cf:a4:32:7d:
d4:9c:1d:29:61:3f:e7:5c:43:60:16:69:9d:a5:71:
a6:57:54:1d:5c:c7:ee:f4:c0:bc:34:ec:67:4c:3f:
58:5b:62:28:8a:be:1a:97:ed:2a:5f:f9:8e:5c:c5:
02:20:9d:c7:1a:38:4d:b2:bf:2a:be:e3:0a:dc:1e:
a3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:33:DA:A8:EC:5C:43:68:F5:B8:E8:FE:E5:9C:A2:2B:FE:F8:DC:67
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/xTPaqOxcQ2j1uOj-5ZyiK_743Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.230.0/23
Signature Algorithm: sha256WithRSAEncryption
77:d4:87:f6:72:cf:ca:20:7f:24:d0:42:b9:87:53:9a:89:0c:
ea:15:82:43:17:03:9b:47:e3:68:81:9c:3f:9f:1c:2a:c9:90:
54:29:47:ae:2e:31:49:41:b0:48:f9:b9:af:27:c8:77:24:61:
80:6c:d2:08:3c:c4:db:9f:03:19:94:35:f1:66:16:ab:40:e8:
74:8e:32:8f:f5:b0:5e:88:d5:2e:db:bd:71:46:37:b5:28:ca:
95:d9:1d:2f:ea:3b:fe:f8:ac:16:62:24:25:13:f3:39:1d:ae:
2f:a1:25:3d:67:bb:a8:61:13:24:6d:fb:35:38:84:ce:0f:a1:
d7:c5:6a:aa:b7:11:38:d1:7c:c6:97:8a:bc:3d:ad:7c:37:6e:
cd:da:9e:31:94:4e:5d:ca:5a:92:48:f0:a7:1f:3b:27:70:9a:
67:3c:c0:58:e6:d6:72:5c:c0:a0:4f:15:89:54:c2:fe:79:25:
f1:5f:a7:65:60:e8:dc:8b:78:c0:b7:16:ec:01:78:af:54:78:
0a:8a:33:9e:c0:e3:ca:6c:c8:50:40:10:be:7f:f7:db:9b:69:
59:a9:53:53:40:6f:bb:ad:64:ae:20:98:81:7b:21:65:ca:dd:
5f:a1:af:ce:2c:8e:c2:6b:69:e3:dc:95:46:07:f3:0a:47:f1:
00:ce:f5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:44 2024 by rpki-client on console-fra.rpki-client.org