Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/Kx6ZvcM8B1XF4KT-6aSpEOidF1Y.roa
File: Kx6ZvcM8B1XF4KT-6aSpEOidF1Y.roa (raw, json)
Hash identifier: puAAmkRg5ATUdNjvHR9lZ+pr8kDOPrTJxerW36GogSU=
Subject key identifier: 2B:1E:99:BD:C3:3C:07:55:C5:E0:A4:FE:E9:A4:A9:10:E8:9D:17:56
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 0185700B932467D6E1BA6490F9E95BD4BA92
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/Kx6ZvcM8B1XF4KT-6aSpEOidF1Y.roa
Signing time: Mon 02 Jan 2023 01:14:44 +0000
ROA not before: Mon 02 Jan 2023 01:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205836
IP address blocks: 185.204.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Nov 2023 11:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:0b:93:24:67:d6:e1:ba:64:90:f9:e9:5b:d4:ba:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Jan 2 01:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b1e99bdc33c0755c5e0a4fee9a4a910e89d1756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b7:3e:88:ec:3d:b9:1e:98:4e:b8:a5:5b:f6:
d3:bb:84:a7:31:c9:35:53:fa:8f:6e:ee:55:c0:cc:
df:a1:a8:ba:1d:32:24:37:75:03:dc:5d:39:3a:48:
45:52:ee:93:fe:dd:67:71:4d:57:93:6a:1f:72:a6:
9d:f3:97:10:a7:60:63:1a:32:3f:b7:3e:4b:63:f2:
4a:50:e3:6d:32:db:d0:f5:74:8b:5e:8e:52:eb:e4:
38:55:50:da:92:8c:f5:e3:30:bc:49:bd:75:ed:d2:
15:75:16:38:cd:f5:9c:03:54:54:14:07:f2:2b:7e:
8e:03:8d:c5:5a:3c:6e:78:71:19:51:5a:cf:3e:28:
85:66:67:22:33:68:2a:1e:56:0d:eb:1e:5b:f2:42:
c4:a3:2d:2f:01:24:2e:51:a5:fd:63:59:1c:2e:8e:
8d:fd:f0:b1:76:01:e0:26:e3:3a:62:3b:66:50:cd:
2f:f1:33:9b:22:f1:31:85:96:df:1d:bf:dd:86:14:
96:53:54:04:f0:d9:45:d5:54:e7:04:9a:15:0e:96:
dd:c7:2a:cb:cf:9f:b8:f2:6e:b2:7a:5d:be:db:f8:
e6:ed:40:30:0d:d8:1f:9e:47:93:6a:12:b9:40:44:
8c:3e:28:d1:57:17:e4:dc:ec:9a:4d:6f:5e:23:42:
06:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1E:99:BD:C3:3C:07:55:C5:E0:A4:FE:E9:A4:A9:10:E8:9D:17:56
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/Kx6ZvcM8B1XF4KT-6aSpEOidF1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.202.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:2a:f5:ec:29:37:2e:22:76:51:4f:ec:ec:9a:16:8f:57:dc:
16:c8:cc:68:bc:a7:77:f8:1a:8d:5c:96:5c:f6:32:f9:3e:6c:
b2:a4:b1:37:4f:98:18:d0:3a:c4:97:fe:bd:20:ce:1d:5f:83:
e9:11:81:4c:a9:83:d2:e9:f6:fa:f5:d9:19:5b:74:7c:b3:dc:
cf:b9:08:24:d1:e0:16:dc:e7:65:10:8a:a7:3f:13:79:08:ba:
8f:58:ee:5a:49:aa:8f:98:33:9b:fd:a6:fc:5c:4d:35:de:4b:
d1:c8:17:07:5b:18:2c:5e:2b:a4:79:76:7f:ed:b1:db:4d:44:
b2:1a:cf:8d:53:89:c1:ff:01:01:68:7e:be:70:70:2c:96:6b:
1b:dd:fe:28:fc:70:fc:9e:4c:38:4d:f5:7d:a9:40:5b:d2:e6:
61:af:5e:75:51:83:7a:55:2d:ed:8e:4e:32:6f:08:28:c0:d4:
2b:68:01:99:cf:52:12:10:0d:46:96:5e:7d:df:6c:85:c1:00:
fc:82:23:7f:b4:93:20:26:13:92:5c:c8:dd:c1:d1:a9:4f:08:
eb:29:24:a4:2d:0c:1a:b8:aa:c4:8a:e7:e8:b1:d7:2b:ff:86:
f7:81:a3:bf:2d:08:a7:52:f9:72:85:3a:00:e3:3c:e6:5e:df:
1e:bb:35:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-fra.rpki-client.org