Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/ITkbnOQ8D-YSRxsItklZZtELou8.roa
File: ITkbnOQ8D-YSRxsItklZZtELou8.roa (raw, json)
Hash identifier: GLMp3sbm3isc4S+7xsawbeC9BFzGURsRCM9+dWvsZeU=
Subject key identifier: 21:39:1B:9C:E4:3C:0F:E6:12:47:1B:08:B6:49:59:66:D1:0B:A2:EF
Certificate issuer: /CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
Certificate serial: 018B8ABFA01E80811ADEBB8ABAF7AB9960F3
Authority key identifier: 76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/ITkbnOQ8D-YSRxsItklZZtELou8.roa
Signing time: Wed 01 Nov 2023 11:58:15 +0000
ROA not before: Wed 01 Nov 2023 11:58:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199895
IP address blocks: 185.37.13.0/24 maxlen: 24
185.37.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8a:bf:a0:1e:80:81:1a:de:bb:8a:ba:f7:ab:99:60:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
Validity
Not Before: Nov 1 11:58:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21391b9ce43c0fe612471b08b6495966d10ba2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:82:73:ad:f5:e8:11:e5:2b:4a:ea:61:3d:
17:d2:d9:6f:24:06:81:80:5d:98:1f:45:8f:b1:c9:
07:50:49:f1:c9:6e:27:58:b8:f0:f6:2c:82:4b:8d:
5b:c6:9f:3f:ce:e1:8a:c2:64:ce:bb:9c:e3:bb:cb:
3e:f3:18:5b:7e:82:f3:33:a6:f6:05:54:16:0d:80:
22:c0:c5:df:84:66:c2:e2:09:4f:cd:d3:b9:e6:6b:
b3:e0:67:f9:c4:b1:91:bf:72:06:b1:78:57:32:49:
db:b3:36:da:0e:ca:4d:52:7f:03:28:12:78:dd:df:
47:2e:fc:e6:14:84:c2:94:44:fd:59:91:3b:7a:fe:
fb:63:38:0d:ba:b1:58:27:16:56:a5:b6:3f:3b:b8:
d3:06:6d:0e:35:ba:21:e3:86:42:b2:7d:c7:80:4d:
b8:16:94:ea:ed:00:98:72:e3:8b:70:ad:62:95:67:
fb:d9:b2:30:cb:e5:74:03:20:29:be:98:ce:47:0b:
9b:8e:ee:16:78:86:5d:02:58:83:57:72:90:4e:63:
51:56:fd:9d:22:8d:f1:4b:21:19:f4:12:1d:bd:3f:
fc:ae:be:a0:58:c8:89:85:3a:a6:13:bc:7c:c4:8d:
54:f8:9c:dd:4c:ad:c4:56:0b:00:d3:a9:3a:2d:dc:
63:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:39:1B:9C:E4:3C:0F:E6:12:47:1B:08:B6:49:59:66:D1:0B:A2:EF
X509v3 Authority Key Identifier:
keyid:76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/ITkbnOQ8D-YSRxsItklZZtELou8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.12.0/23
Signature Algorithm: sha256WithRSAEncryption
92:72:7e:6e:1d:bd:5d:da:fe:73:c8:c6:25:20:02:7b:a6:93:
18:b6:6a:51:8a:38:4c:1a:74:27:38:62:6d:67:c8:d4:91:ee:
0b:4c:7c:49:51:59:9f:3d:f4:51:85:4a:5f:76:0e:fa:89:bd:
f0:7d:0f:41:a5:b5:f0:a4:8a:66:96:a0:c6:79:e2:45:e9:3f:
be:97:d0:24:27:25:26:ae:e9:52:8f:a3:63:de:fc:a6:0e:0f:
24:bb:e2:8e:20:87:74:c8:11:51:cd:bc:39:48:8e:fc:c2:e6:
b6:4d:42:c3:77:95:a9:94:c3:5b:20:2b:ff:9a:30:74:f1:91:
67:f4:77:e1:ff:a4:7f:c3:4a:e1:05:a1:82:79:c8:8f:c5:db:
de:3f:b0:ef:25:bd:8e:c4:27:3f:b1:29:7b:58:b6:0a:ca:d5:
83:68:59:15:e4:e7:50:b2:bb:f8:ba:b4:c6:9f:e2:91:7e:bd:
25:74:cc:2c:95:87:6d:5b:65:bf:c5:99:1d:54:5d:8c:c4:3f:
93:f0:38:39:0c:7e:2c:48:29:cc:03:87:2c:73:f0:36:bd:fa:
64:c5:41:eb:57:6a:ac:3f:9d:8a:04:0c:6e:28:61:23:a8:aa:
7a:1f:97:2c:4b:f0:ea:53:d7:04:fc:1c:a3:fe:5c:78:ac:52:
ca:da:2c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:55 2024 by rpki-client on console-ams.rpki-client.org