Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/rxrDiY3hhPksJMDNe6ia8ApclAc.roa
File: rxrDiY3hhPksJMDNe6ia8ApclAc.roa (raw, json)
Hash identifier: bRTznkWE0mmr/tl1ArH6NoJgUsGN2pmk+Os9frNZk0k=
Subject key identifier: AF:1A:C3:89:8D:E1:84:F9:2C:24:C0:CD:7B:A8:9A:F0:0A:5C:94:07
Certificate issuer: /CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
Certificate serial: 01856E8B1B325076B323F14169457B3076B6
Authority key identifier: 75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/rxrDiY3hhPksJMDNe6ia8ApclAc.roa
Signing time: Sun 01 Jan 2023 18:14:48 +0000
ROA not before: Sun 01 Jan 2023 18:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204642
IP address blocks: 185.244.124.0/24 maxlen: 24
185.244.124.0/22 maxlen: 22
185.244.125.0/24 maxlen: 24
185.244.126.0/24 maxlen: 24
185.244.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:1b:32:50:76:b3:23:f1:41:69:45:7b:30:76:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
Validity
Not Before: Jan 1 18:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af1ac3898de184f92c24c0cd7ba89af00a5c9407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:aa:ec:cb:a6:6a:a9:1a:ed:4c:1f:75:04:2e:
7e:85:e3:29:c4:51:6d:c2:37:fe:5e:31:cb:ed:90:
e9:69:1b:cd:6d:c0:95:20:8c:6d:30:8f:d4:d6:d4:
21:b6:d4:3f:70:d3:36:f6:5b:56:a3:64:dc:f1:e8:
9e:f3:eb:8d:1d:ea:c1:53:a1:a4:e8:34:f8:d8:6a:
b6:f2:2b:18:3e:bd:da:7d:ee:a3:a5:96:ca:e0:b2:
4b:11:e8:48:ec:70:20:19:d6:8f:e0:1f:f1:a9:df:
ce:03:c3:da:c6:c8:b1:be:70:93:e4:13:59:c7:72:
21:00:74:65:08:bd:f4:41:d4:47:e2:33:39:56:ac:
b5:68:f4:11:13:70:83:2e:67:86:92:98:d7:c5:24:
7c:1c:e7:33:d9:9e:d4:e2:70:a7:4f:a7:9b:87:57:
ed:4c:68:56:c8:50:78:f1:81:04:fe:f3:f4:57:18:
b2:00:4a:f5:e9:e4:97:b8:51:10:d8:4a:6d:74:28:
c4:be:0d:fb:70:04:04:ae:f0:8d:9c:1f:7e:c4:eb:
d1:dc:b9:6e:ab:01:88:67:c7:68:ee:f3:53:0e:1d:
e0:e4:75:7f:6d:7c:7e:35:19:40:0d:df:3b:1c:fd:
69:a6:9d:cd:66:75:4b:0b:01:54:52:c2:1f:fd:35:
d8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1A:C3:89:8D:E1:84:F9:2C:24:C0:CD:7B:A8:9A:F0:0A:5C:94:07
X509v3 Authority Key Identifier:
keyid:75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/rxrDiY3hhPksJMDNe6ia8ApclAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.124.0/22
Signature Algorithm: sha256WithRSAEncryption
64:40:fa:e2:aa:61:0f:e3:f7:16:5c:4a:40:3b:5b:d6:3e:87:
54:11:3c:a8:53:1d:6f:9d:29:28:36:40:82:78:91:7b:8a:1b:
fb:e0:33:f2:3a:53:b9:6b:1c:c7:64:d6:10:d8:ba:7c:b9:48:
bf:31:9a:60:b9:18:a4:94:e2:fa:44:99:ae:ef:2e:6c:7a:fb:
aa:73:1f:35:9a:46:c6:56:df:5d:db:d8:9c:6d:28:73:8a:17:
3d:e8:23:0c:cb:0f:03:1f:77:13:16:91:fd:31:df:21:2a:be:
c1:5e:f5:c7:9c:1d:6f:2d:c4:8e:04:e7:09:e4:c9:6b:70:5d:
ce:4c:ea:21:00:34:e1:54:96:42:84:20:dd:c0:af:8c:5d:41:
17:ad:da:5f:e2:6b:e2:b8:dd:70:33:2e:f7:33:56:83:6a:4c:
d1:cf:75:9b:bd:5a:d6:60:7d:11:69:20:a2:08:54:50:2d:1a:
4d:82:bd:50:fd:d9:83:5f:c1:cd:c9:88:24:bc:e4:06:2d:9a:
e3:8c:e6:68:cc:6e:b5:d9:66:a3:69:95:5b:dd:bb:13:1e:62:
5a:2e:82:50:0b:c8:58:2c:af:53:f2:9a:fc:9d:d0:98:79:04:
bc:f6:b2:37:d2:14:24:ee:0d:86:04:88:10:21:30:3a:b8:b4:
63:c6:5b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:55 2024 by rpki-client on console-fra.rpki-client.org