Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/41jlXBN5dBRNSfRDvtNcs_VwR2M.roa
File: 41jlXBN5dBRNSfRDvtNcs_VwR2M.roa (raw, json)
Hash identifier: Epj/W2s2pQ3lDEynsB3FBqd1onQY27lM5yoYaQSwNUU=
Subject key identifier: E3:58:E5:5C:13:79:74:14:4D:49:F4:43:BE:D3:5C:B3:F5:70:47:63
Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial: 0189132E6E88C6534A417CDED30FDFF271D2
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/41jlXBN5dBRNSfRDvtNcs_VwR2M.roa
Signing time: Sat 01 Jul 2023 20:39:17 +0000
ROA not before: Sat 01 Jul 2023 20:39:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.139.34.0/24 maxlen: 24
185.139.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Aug 2023 16:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:13:2e:6e:88:c6:53:4a:41:7c:de:d3:0f:df:f2:71:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
Validity
Not Before: Jul 1 20:39:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e358e55c137974144d49f443bed35cb3f5704763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:6e:dd:12:a3:9e:bc:a2:cc:ad:ac:fe:8f:
a6:76:42:44:dd:62:13:b4:0f:58:02:0f:52:8e:90:
84:66:b9:39:66:49:74:cb:a8:fb:46:4c:0c:cb:87:
c3:a1:78:af:06:d3:cf:58:80:e3:57:27:a1:6d:ac:
76:58:e3:24:75:8b:1f:e2:47:0f:54:62:a2:42:39:
15:a8:a9:0d:00:31:15:f8:3c:e3:5b:de:2d:ce:23:
c5:f1:14:48:7e:0e:96:1d:c3:fe:d9:56:55:34:95:
cd:c6:80:3e:ae:42:c3:a2:db:88:30:5f:a9:2d:d4:
77:87:ec:9c:e8:d9:af:c2:cd:c3:dc:56:e1:76:83:
ee:4f:d7:86:ac:4e:a3:5c:7b:c1:ab:91:64:cb:09:
1b:6e:a5:a1:85:76:52:87:6b:a3:94:b0:2e:4e:17:
57:5f:a5:19:ba:1d:92:54:dd:14:3d:51:54:0c:b1:
84:0b:68:61:14:ec:e3:09:be:de:d2:99:db:1c:37:
46:ed:f9:b2:bb:59:3d:f0:65:46:34:66:52:49:e2:
84:1e:ee:c8:8c:02:4b:8d:7f:bf:d3:3d:14:96:63:
b2:c2:1d:aa:0c:1a:c6:42:7e:fd:1d:ea:27:77:00:
de:68:7b:78:dc:da:b2:1f:b1:04:4e:7f:ce:74:33:
c0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:58:E5:5C:13:79:74:14:4D:49:F4:43:BE:D3:5C:B3:F5:70:47:63
X509v3 Authority Key Identifier:
keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/41jlXBN5dBRNSfRDvtNcs_VwR2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.34.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:9b:ea:94:61:e5:71:3b:31:0c:81:56:5a:58:ae:9e:1d:ef:
11:d3:cf:fb:db:2a:38:4c:ce:84:8a:0a:29:1b:2a:aa:39:4e:
b6:00:3d:3e:21:07:44:00:e5:48:38:bd:a3:87:c9:07:9b:81:
29:7c:7f:26:dd:90:4e:82:0c:eb:6b:01:f5:d2:88:29:36:96:
ff:b5:31:7d:81:8b:0e:c1:49:51:fe:df:8d:b7:cd:f6:d4:1d:
45:59:90:3a:c1:bc:ef:ee:0e:17:69:b3:18:a6:ef:1f:54:27:
d2:17:fa:da:9e:6d:03:19:33:8b:40:6f:69:9e:2e:c4:6d:8c:
e5:17:19:7d:11:b1:85:87:4b:46:08:f9:75:f6:8d:3f:67:b1:
db:4f:46:7e:9c:39:82:74:30:9e:7e:bb:68:f2:33:0a:df:76:
90:fe:a6:e6:02:7a:42:cd:9a:d8:df:18:2e:9f:86:91:45:78:
63:25:3f:88:27:f6:5b:67:e4:d1:72:ca:8b:1b:c6:8e:a6:30:
4c:a6:27:1a:5f:dc:1d:a2:31:da:aa:ee:b1:b4:8d:4f:86:27:
70:33:bc:15:8f:b3:93:b9:11:01:8f:5e:31:b5:89:74:87:57:
33:bb:bb:79:f0:79:61:2d:63:9d:87:36:de:97:89:9b:6b:f6:
74:f3:92:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-fra.rpki-client.org