Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/CBFZ3lyKrme7Ffdza1iOUj-RqlA.roa
File: CBFZ3lyKrme7Ffdza1iOUj-RqlA.roa (raw, json)
Hash identifier: xKFYwlki4UZP33Z3nsrRNpEPJGJhaHSybNeGWfBNPyc=
Subject key identifier: 08:11:59:DE:5C:8A:AE:67:BB:15:F7:73:6B:58:8E:52:3F:91:AA:50
Certificate issuer: /CN=9246785f469be8aa7151e3333e47465d478fd0e7
Certificate serial: 01856C41398D8AEDE7A8EBAE1139779E359F
Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/CBFZ3lyKrme7Ffdza1iOUj-RqlA.roa
Signing time: Sun 01 Jan 2023 07:34:51 +0000
ROA not before: Sun 01 Jan 2023 07:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43142
IP address blocks: 185.24.18.0/24 maxlen: 24
185.24.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Apr 2023 07:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:39:8d:8a:ed:e7:a8:eb:ae:11:39:77:9e:35:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7
Validity
Not Before: Jan 1 07:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=081159de5c8aae67bb15f7736b588e523f91aa50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:01:c2:d4:84:b0:03:6f:30:98:7f:79:d9:
93:bc:b8:c5:65:08:83:a6:2f:6c:eb:f1:63:2c:c3:
37:1c:50:b9:52:f9:5f:ff:b2:82:a2:d0:f5:9b:be:
b6:bb:1c:1d:9c:fd:1e:11:c8:c1:fa:51:58:ce:61:
0a:28:d5:2f:ad:e5:ec:5a:53:b0:4f:ce:1b:09:e9:
5a:88:2b:b2:d7:2d:51:31:28:ed:ba:14:a6:5a:d1:
e8:ee:10:80:0c:50:6f:bc:20:ad:0d:d0:d8:98:e3:
0e:ed:8a:70:58:b3:8b:fd:96:c3:35:b1:3b:4a:bc:
07:41:59:3a:84:56:46:74:ca:dc:c6:59:33:11:97:
4d:87:ea:58:0d:30:8e:ae:d3:f4:c2:16:ab:85:06:
60:b9:7b:fc:7b:6a:bb:27:80:23:8c:4a:4d:03:98:
e7:68:1f:31:fe:8e:d6:d7:b3:f1:a7:49:7b:a2:a7:
d8:18:f7:dc:b0:a4:ae:ca:a0:fb:eb:4d:79:2e:a7:
0c:ab:a5:17:81:64:db:6f:b2:bd:dd:34:60:a4:17:
0d:c9:62:1d:a4:6f:28:6f:9d:38:22:14:e5:18:42:
9d:b2:cf:e2:98:38:eb:29:14:ab:c1:f9:14:5b:32:
e5:62:b8:3e:69:d5:34:cd:63:f0:70:d1:ba:63:e3:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:11:59:DE:5C:8A:AE:67:BB:15:F7:73:6B:58:8E:52:3F:91:AA:50
X509v3 Authority Key Identifier:
keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/CBFZ3lyKrme7Ffdza1iOUj-RqlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.18.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:57:71:9b:dd:be:5e:12:89:79:94:2d:da:b1:96:1c:00:84:
33:1a:bf:22:b4:3a:73:08:c3:da:f0:23:ea:0d:56:b5:a9:b3:
5d:cf:8a:85:a9:db:07:42:5d:f9:fb:29:af:a2:c0:1c:88:f7:
70:9e:b9:35:f4:df:96:22:35:e3:ab:2c:10:e4:59:38:6e:90:
c4:e9:67:75:1f:1f:24:58:38:fe:b3:b2:13:ed:ca:a0:65:39:
16:f4:b4:5c:29:cf:a8:c3:97:de:4d:75:fe:54:57:87:e8:d4:
89:86:35:3c:c9:7f:94:41:e4:ef:5a:42:cf:d0:d8:4f:d3:5d:
c9:e0:33:94:7c:a2:ed:de:8d:55:dd:70:ab:d6:be:ab:37:ee:
97:a5:d1:53:38:a1:0c:17:4e:e0:65:f7:b0:a7:26:dc:47:ac:
8a:67:f8:89:a9:80:bb:1b:fb:66:49:11:0b:34:36:c8:6b:01:
d5:0a:f3:70:99:1f:fb:74:ef:a1:97:88:77:f0:3a:73:8c:28:
cc:91:33:fa:b3:08:6d:7f:80:46:b1:88:93:92:f8:e1:93:d4:
5b:19:8b:76:b7:ac:c0:f8:02:f2:7f:09:f1:ac:a7:4f:3d:6d:
33:27:d6:5c:b2:3b:52:04:38:58:80:58:4b:e2:5f:72:43:e2:
3b:67:61:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:25 2024 by rpki-client on console-ams.rpki-client.org