Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/1i_Rj8ij_R4vUj6lxGLArkXQqmA.roa
File: 1i_Rj8ij_R4vUj6lxGLArkXQqmA.roa (raw, json)
Hash identifier: EcFCc9/V1Wkmq2ua3GSkrS9YHHuE/fvJxiK66ybM6YQ=
Subject key identifier: D6:2F:D1:8F:C8:A3:FD:1E:2F:52:3E:A5:C4:62:C0:AE:45:D0:AA:60
Certificate issuer: /CN=61b866e323382caea961e7d2423e53cab5099131
Certificate serial: 01856E26550F2B3DB3579757A5EAEB2841A2
Authority key identifier: 61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/1i_Rj8ij_R4vUj6lxGLArkXQqmA.roa
Signing time: Sun 01 Jan 2023 16:24:43 +0000
ROA not before: Sun 01 Jan 2023 16:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25540
IP address blocks: 185.33.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:55:0f:2b:3d:b3:57:97:57:a5:ea:eb:28:41:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b866e323382caea961e7d2423e53cab5099131
Validity
Not Before: Jan 1 16:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d62fd18fc8a3fd1e2f523ea5c462c0ae45d0aa60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3c:0d:ac:11:46:25:80:13:c1:73:96:2a:be:
82:4e:77:2b:92:0d:3c:c4:89:2e:5f:d3:66:37:de:
ed:4a:be:af:7e:91:61:1d:20:2b:30:32:c8:b7:5a:
03:e0:01:00:57:ff:65:e1:9b:8a:18:28:7d:4f:38:
5b:88:1b:11:f9:e8:0c:d0:e8:ca:1d:9b:40:ae:e1:
99:14:4a:59:41:52:71:a7:18:47:52:30:bb:4b:16:
a2:50:5f:d3:ae:35:6c:5b:fb:65:d3:be:b9:6c:84:
6d:0f:fa:20:2e:0d:ad:b6:8c:1f:5a:7d:5c:13:6f:
78:f5:66:ad:74:fa:e2:69:4e:33:2c:7a:8c:b7:df:
2a:fa:db:87:bb:0a:38:37:f3:2e:19:d9:ac:23:52:
ad:d6:b6:21:c9:2b:6f:17:55:a7:ff:6f:1f:eb:d2:
c2:f2:ec:c8:06:11:ae:af:7a:00:37:cc:25:7e:29:
ec:3a:d8:ba:a4:7f:72:bf:60:62:b8:d7:2c:fa:ec:
43:4c:3b:e2:7d:23:81:48:ca:6a:ff:13:e7:cc:19:
33:95:89:64:96:32:8c:db:a9:e6:aa:69:89:04:9b:
6a:05:c6:62:d4:4e:14:79:c8:74:08:8d:e8:2c:37:
6b:33:b8:51:fa:db:48:6a:df:48:53:31:f9:a4:c0:
33:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2F:D1:8F:C8:A3:FD:1E:2F:52:3E:A5:C4:62:C0:AE:45:D0:AA:60
X509v3 Authority Key Identifier:
keyid:61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/1i_Rj8ij_R4vUj6lxGLArkXQqmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.12.0/24
Signature Algorithm: sha256WithRSAEncryption
58:67:99:85:4b:38:53:00:b7:1a:1f:fd:22:ee:f7:5b:ef:68:
d3:7e:5a:35:53:47:64:12:46:44:9e:72:15:05:f7:6b:86:0b:
df:3b:4d:37:05:bb:81:d7:26:3a:02:1e:11:69:3f:ed:71:df:
00:80:22:95:bd:cd:b8:62:3d:5e:c9:c0:1f:ac:4e:34:de:a1:
65:fc:c3:97:c2:e7:9b:2c:94:65:1b:7e:26:e1:78:2a:8a:6f:
6b:63:af:6d:d4:f2:25:dd:10:77:b2:85:af:1c:2e:55:15:77:
bb:50:b5:76:0f:e6:d7:ff:f2:ee:96:57:f0:86:e4:1e:be:00:
ba:4f:9a:51:50:7a:ab:28:6e:33:f8:e2:25:ab:b9:00:6d:69:
41:f0:1b:d8:29:63:ff:13:f6:05:81:96:78:9a:37:d7:30:fe:
5a:76:16:34:32:bf:46:fb:9b:fd:8f:70:0b:7b:cc:37:2c:01:
64:eb:4e:2d:c5:9f:c2:ec:21:c2:9a:38:65:88:a7:a9:52:f1:
7a:a4:9c:fe:62:ee:18:42:3c:a8:ec:79:d1:3b:33:47:b2:99:
6f:93:66:82:41:8a:64:66:42:4d:42:b0:31:04:c7:14:be:3c:
bd:1d:5f:29:08:d1:0c:a6:35:f0:4d:d2:3a:3a:8a:85:9a:71:
a2:d9:e4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-fra.rpki-client.org