Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/si248vSC8ZD9gTdeYVEGnu-SHpg.roa
File: si248vSC8ZD9gTdeYVEGnu-SHpg.roa (raw, json)
Hash identifier: GGcymV458xlgYRRSc+f3j4O0mUm2tpXL4kGxhoYCX38=
Subject key identifier: B2:2D:B8:F2:F4:82:F1:90:FD:81:37:5E:61:51:06:9E:EF:92:1E:98
Certificate issuer: /CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Certificate serial: 01856DD4311B6D5A9BDE2F89067167834BD0
Authority key identifier: 71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/si248vSC8ZD9gTdeYVEGnu-SHpg.roa
Signing time: Sun 01 Jan 2023 14:55:00 +0000
ROA not before: Sun 01 Jan 2023 14:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211918
IP address blocks: 185.235.140.0/24 maxlen: 24
2a0d:6480::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:31:1b:6d:5a:9b:de:2f:89:06:71:67:83:4b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Validity
Not Before: Jan 1 14:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b22db8f2f482f190fd81375e6151069eef921e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:48:12:30:12:5d:8a:16:2e:9a:13:d9:4b:
66:2c:75:31:3f:54:5e:a8:e1:d7:6d:17:98:4d:52:
f2:ed:da:1d:13:ba:b3:aa:33:f7:fa:4f:ed:0c:0b:
d5:02:33:75:e5:24:ad:27:0d:d6:d8:b5:fb:f3:aa:
0d:fa:24:1f:04:31:1e:5b:f6:b4:5b:57:85:f0:86:
1c:5b:db:02:3a:82:6f:15:d6:2d:d5:73:1e:b0:57:
73:64:0f:2f:d1:50:7b:1b:6a:ba:8b:aa:c1:58:38:
c6:8c:c8:0b:67:3f:8f:d7:16:68:18:ce:cd:d3:d1:
27:a4:03:a9:20:ac:fb:45:f7:4d:7c:32:9b:25:da:
60:9b:50:62:b9:23:e0:b3:c6:6e:d1:6b:55:3b:c3:
64:e7:71:73:6e:23:48:9d:2c:37:80:44:54:f9:87:
2e:a8:1d:e1:e3:24:cb:45:9a:55:5c:2e:4b:ba:2f:
0c:44:5e:4f:7d:4c:72:41:fa:3d:d7:08:78:57:b2:
59:06:d6:90:a2:c1:5d:ad:99:08:47:db:65:a3:2f:
04:ab:10:84:2a:29:bc:d0:b3:44:2a:28:de:22:bc:
b2:9c:2b:31:d6:c2:e5:68:68:6b:13:bc:db:eb:74:
63:06:77:c2:30:f4:5f:94:45:53:47:29:27:1f:6a:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2D:B8:F2:F4:82:F1:90:FD:81:37:5E:61:51:06:9E:EF:92:1E:98
X509v3 Authority Key Identifier:
keyid:71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/si248vSC8ZD9gTdeYVEGnu-SHpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.140.0/24
IPv6:
2a0d:6480::/29
Signature Algorithm: sha256WithRSAEncryption
71:1d:b8:18:28:34:28:e3:e5:d1:67:f9:2b:48:da:4b:3e:60:
ad:74:d2:d5:16:ee:65:e7:df:7f:66:ad:3e:c9:c8:0a:2e:15:
f2:90:62:53:6b:aa:dd:ef:26:5e:25:f5:90:8f:26:3d:69:f0:
e8:b8:2a:52:03:1c:d2:cd:66:ef:75:f5:04:0f:a9:d1:e1:d1:
fa:d6:bf:81:31:93:53:e2:1c:7c:4f:a0:0e:ee:84:67:f6:88:
4c:94:f5:65:cb:37:2e:42:b9:05:75:07:41:f9:21:bc:d9:bc:
c1:7f:27:68:36:79:f9:85:94:92:4c:3a:9d:9f:d9:87:38:44:
c2:36:8b:77:ac:e7:3c:c8:84:40:46:90:93:e8:bd:32:03:e9:
40:92:a5:ea:bf:e0:35:10:15:85:e7:1b:a9:af:1b:56:f4:32:
ee:d3:6a:1c:38:1e:d8:62:e0:e5:80:bd:d7:d5:20:8d:97:b5:
90:ab:c4:1b:41:fb:eb:65:af:68:2a:0d:ca:4d:ef:9a:5d:ea:
64:20:bc:cb:59:7c:96:28:4f:94:8d:84:6f:4d:b7:85:98:01:
d3:1b:68:13:b8:fb:ae:f3:2f:71:04:c0:03:53:9c:5e:9d:33:
99:92:cb:78:a2:ac:d9:ec:c1:34:f1:27:e2:ca:5e:5a:16:7d:
c4:bd:d9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:45 2024 by rpki-client on console-ams.rpki-client.org