Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/sVHUQXNOC9dsfjg6U9a2Co7VqX0.roa
File: sVHUQXNOC9dsfjg6U9a2Co7VqX0.roa (raw, json)
Hash identifier: ZxbDJeIX6VXMWlVJPmxsTJ8EW0trYirdbs6wk/g3ijU=
Subject key identifier: B1:51:D4:41:73:4E:0B:D7:6C:7E:38:3A:53:D6:B6:0A:8E:D5:A9:7D
Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial: 018CC9BC5EF3B23F8548467658D3EBA5AD22
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/sVHUQXNOC9dsfjg6U9a2Co7VqX0.roa
Signing time: Tue 02 Jan 2024 10:33:34 +0000
ROA not before: Tue 02 Jan 2024 10:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59538
IP address blocks: 185.139.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Feb 2024 02:32:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:5e:f3:b2:3f:85:48:46:76:58:d3:eb:a5:ad:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
Validity
Not Before: Jan 2 10:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b151d441734e0bd76c7e383a53d6b60a8ed5a97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:92:9c:3d:f4:b8:92:10:c2:bc:8c:7c:26:56:
6d:3c:60:a4:ea:7c:be:a6:3c:e4:9c:af:65:17:89:
45:64:96:8b:12:53:18:21:01:88:92:95:1f:21:a1:
6f:08:e7:bc:fd:57:98:d1:c6:82:12:09:23:cb:1c:
5f:a2:dd:64:bc:92:be:e9:f8:dc:c5:94:e7:a9:8b:
99:af:21:f2:4c:7c:e8:ac:3c:64:04:7c:12:ed:63:
b0:64:7c:2a:01:0f:bd:82:cd:ee:32:c6:46:dc:73:
c7:f1:6d:6e:c5:a5:a4:71:68:bd:80:f2:90:bc:73:
8a:a1:53:d5:8e:47:b3:f0:18:0b:2c:72:b0:bf:a3:
2d:75:3f:ef:f8:0a:1a:44:da:29:32:19:6e:9f:3b:
71:e4:b7:ac:4a:14:a3:b3:c6:4c:a4:6d:80:e1:88:
ea:89:cd:41:6e:ca:3c:95:9d:a2:d3:ec:11:a2:98:
df:3a:83:89:4f:a0:ca:41:33:0e:43:c3:ab:41:45:
bd:8e:fb:c9:3c:9f:ca:d8:cc:df:cf:9e:a8:fe:0d:
d2:e8:8a:47:dd:84:c4:82:ea:7d:bf:90:e2:06:ec:
0a:08:e7:0c:1d:e9:bc:a6:f1:ed:8e:d4:81:75:b0:
60:32:24:e7:2a:9e:80:1c:32:8f:4d:9c:25:63:05:
17:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:51:D4:41:73:4E:0B:D7:6C:7E:38:3A:53:D6:B6:0A:8E:D5:A9:7D
X509v3 Authority Key Identifier:
keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/sVHUQXNOC9dsfjg6U9a2Co7VqX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.35.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:79:53:1b:ef:97:76:9b:ec:d4:b8:62:55:85:5a:90:03:c8:
8d:98:f2:6c:5a:4b:57:77:a4:47:45:10:26:2f:fb:4b:c2:86:
31:59:1c:79:a6:33:07:72:46:af:6b:c9:d6:14:1a:6b:57:dc:
de:e8:a3:95:cd:80:c4:ef:51:ff:8c:71:18:3c:3f:d4:cd:a5:
c7:21:98:fe:e4:8d:30:ba:0c:c1:1e:35:9b:4f:4e:bb:c3:cb:
c5:68:cc:0b:44:ac:88:3b:92:37:46:48:42:95:bd:8c:74:bd:
6e:a4:c8:40:c7:53:db:04:8b:5a:3e:74:48:3a:f6:cb:3d:41:
33:9f:1c:28:3e:2f:bf:11:cd:0d:32:7d:a8:5e:0e:90:a0:ff:
fd:f5:21:f6:7c:8d:61:c1:18:21:ee:2e:94:a1:81:59:61:69:
a6:ec:2f:f1:b7:6d:b5:e3:fa:72:85:93:b4:db:a1:97:f5:bc:
0d:92:73:5d:4b:24:7a:9b:69:d2:2d:8d:a9:8c:3a:03:e1:fa:
13:90:fe:4c:1f:59:f2:eb:57:82:50:b2:f5:fb:1a:97:1a:3e:
ff:bd:a8:91:85:db:10:8e:08:ca:b0:47:7e:d9:61:dc:04:44:
59:50:60:92:ae:23:03:80:ac:96:ad:e7:84:10:e9:40:c4:f0:
5d:9b:27:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:47 2024 by rpki-client on console-ams.rpki-client.org