Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/xOl3OhUlgjRGZR81nI6a0Xmgyqw.roa
File: xOl3OhUlgjRGZR81nI6a0Xmgyqw.roa (raw, json)
Hash identifier: Nr4GLktO7oTRQfhfQU0JQ+tNhm4EkSuzsoYnAVTYlHQ=
Subject key identifier: C4:E9:77:3A:15:25:82:34:46:65:1F:35:9C:8E:9A:D1:79:A0:CA:AC
Certificate issuer: /CN=7eb92b38df197ca2cbae302693226b23f32a3f76
Certificate serial: 0186991F39565AAF3149C92D46062DD2DF15
Authority key identifier: 7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/xOl3OhUlgjRGZR81nI6a0Xmgyqw.roa
Signing time: Tue 28 Feb 2023 17:43:25 +0000
ROA not before: Tue 28 Feb 2023 17:43:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204754
IP address blocks: 185.241.185.0/24 maxlen: 24
185.241.186.0/24 maxlen: 24
185.241.184.0/24 maxlen: 24
185.241.187.0/24 maxlen: 24
2a0c:a880::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:99:1f:39:56:5a:af:31:49:c9:2d:46:06:2d:d2:df:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92b38df197ca2cbae302693226b23f32a3f76
Validity
Not Before: Feb 28 17:43:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4e9773a1525823446651f359c8e9ad179a0caac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4c:2c:2e:8b:92:1c:a2:42:3f:0b:a7:f3:2f:
57:63:5a:34:4f:35:44:64:e4:b5:4c:8e:62:3b:11:
47:9c:ec:ee:0f:f2:bd:5a:00:ff:5f:9e:ec:e0:e9:
d4:b8:0c:e3:61:7e:ac:d1:51:cb:e4:9f:72:75:d5:
ab:7d:5d:af:7c:66:07:54:fc:fa:33:96:f4:53:4f:
8b:7f:a2:a4:f4:4d:11:33:f2:67:dc:7f:3f:47:c6:
cd:d6:16:ed:1b:d2:73:35:4a:04:43:ae:eb:d3:51:
11:a1:4b:c0:81:b2:45:2d:23:8f:4b:89:47:3f:f8:
4e:78:02:73:06:63:d1:e4:07:73:36:9d:c5:f4:10:
71:70:39:41:6b:f3:b5:fc:2a:8c:02:42:68:da:fd:
31:35:3e:c4:7f:32:2d:c3:37:d6:85:e9:76:48:29:
c1:44:8c:ea:ee:32:6c:be:4b:14:f0:cb:b8:10:ec:
87:f9:2f:2c:ba:e6:de:f4:fe:1c:5f:66:ff:5b:05:
fc:6b:90:44:58:ee:ae:30:ab:f6:31:5d:8a:b1:8b:
ed:87:54:fd:64:e7:e0:28:23:e5:99:36:00:89:a2:
cf:be:6b:bd:b2:c8:65:ed:9b:af:76:0a:2a:0d:1b:
0e:03:7e:8f:3c:48:22:ae:d4:02:2e:58:7e:7a:74:
30:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E9:77:3A:15:25:82:34:46:65:1F:35:9C:8E:9A:D1:79:A0:CA:AC
X509v3 Authority Key Identifier:
keyid:7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/xOl3OhUlgjRGZR81nI6a0Xmgyqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.184.0/22
IPv6:
2a0c:a880::/29
Signature Algorithm: sha256WithRSAEncryption
52:5f:10:51:a8:b4:1f:61:6e:23:42:2b:21:5e:fd:e6:ee:5e:
8d:31:b6:56:b3:a9:0e:0a:6e:0d:4a:a6:5e:42:27:ea:e2:4d:
54:67:bc:ba:3b:b0:cd:2e:9a:92:eb:9d:ff:4e:48:cf:bf:16:
ac:b6:7e:ce:e1:6e:f4:3b:65:b4:99:9c:b4:e1:d2:6d:29:b7:
24:a8:31:d5:21:68:f1:a7:96:04:5b:5d:d9:ef:be:d0:30:fe:
89:9a:7d:45:10:30:6d:43:86:6a:80:c7:4c:c0:23:67:13:8c:
8e:2f:1b:f0:b0:74:e0:62:46:38:eb:cc:43:ef:04:7f:f7:81:
13:12:de:8d:9b:70:a7:b2:8d:14:61:03:a0:91:d3:28:12:21:
62:ed:9e:38:3d:bf:9e:a5:3f:b0:01:eb:a7:a6:cd:db:7d:a3:
85:37:e1:ae:90:17:52:8f:43:d6:19:fb:34:74:52:c1:09:fd:
55:36:8b:d3:33:ec:cf:a7:58:7c:a6:3d:cb:8c:82:f2:47:df:
ed:c7:ab:fb:22:83:9b:8e:66:bb:df:0b:d1:19:1d:26:54:7e:
e6:df:9d:00:27:dd:fc:9e:8c:d3:b5:e4:79:a8:d2:4e:9d:65:
04:69:a8:e5:4b:e3:54:18:a4:c8:4d:c7:fd:5c:da:64:c4:06:
5f:14:ab:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:18 2024 by rpki-client on console-ams.rpki-client.org