Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/4OoVHFcHj-g5XPX50UIgswgezd0.roa
File: 4OoVHFcHj-g5XPX50UIgswgezd0.roa (raw, json)
Hash identifier: RwdjKkkSFTIFjRHqh2x8ti5r5XdDsuLc3AMslq/GpbU=
Subject key identifier: E0:EA:15:1C:57:07:8F:E8:39:5C:F5:F9:D1:42:20:B3:08:1E:CD:DD
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 01869A3EB27E6B7949DAD18C53C1501E93D1
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/4OoVHFcHj-g5XPX50UIgswgezd0.roa
Signing time: Tue 28 Feb 2023 22:57:25 +0000
ROA not before: Tue 28 Feb 2023 22:57:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205896
IP address blocks: 185.200.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Mar 2023 16:59:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9a:3e:b2:7e:6b:79:49:da:d1:8c:53:c1:50:1e:93:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Feb 28 22:57:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0ea151c57078fe8395cf5f9d14220b3081ecddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4a:a0:10:4a:cc:dc:78:54:fa:23:e2:41:42:
ac:14:7e:b5:fb:40:7e:f8:89:51:92:41:75:f4:bc:
f3:7f:18:71:71:b1:74:b6:23:37:ac:35:2d:04:a1:
e2:bb:c9:c1:10:37:91:21:b3:82:c5:91:cd:e2:2a:
d5:0e:99:05:a0:0a:5f:60:a1:84:82:48:9b:88:39:
cf:77:3b:d0:ef:f1:5a:02:b8:b1:89:2d:6e:02:7f:
fd:18:55:22:4f:0d:7d:bc:77:c9:45:83:eb:36:b1:
80:13:67:90:ac:80:a9:6f:0e:da:9b:df:4c:a1:39:
58:9a:0e:05:84:1a:d1:05:4a:98:6c:5d:4e:3a:68:
7b:09:1f:6b:4f:60:ec:fb:6a:ea:5d:ce:ff:a2:d4:
8b:8c:e1:4d:c0:87:69:99:a3:98:9a:3a:fb:1d:94:
59:96:56:05:78:c2:73:d1:45:41:d6:45:30:9d:19:
79:d4:0f:59:f3:4a:91:dd:2a:7b:06:97:87:5f:f2:
5f:67:bd:1e:ff:70:d1:11:9f:07:2e:89:65:9a:b2:
85:1d:cc:b1:5b:7c:09:94:4e:93:ab:6d:75:65:ea:
1f:88:c2:ca:d6:1d:be:00:56:1b:c8:fd:35:80:d9:
22:12:69:ae:2a:b1:ec:f2:7e:d0:a0:2d:e2:77:fc:
60:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EA:15:1C:57:07:8F:E8:39:5C:F5:F9:D1:42:20:B3:08:1E:CD:DD
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/4OoVHFcHj-g5XPX50UIgswgezd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.246.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:52:81:6a:06:c8:24:5c:dd:ef:dd:77:78:a7:e4:c7:84:69:
8e:c3:2a:07:52:40:0f:f0:98:87:4f:10:55:5b:8e:be:ae:30:
cc:56:56:f2:39:17:f9:2f:95:ea:3c:4f:68:b8:c1:91:d4:bb:
0a:70:4f:a1:68:58:98:87:70:5e:3f:45:8b:b6:3a:0b:cc:bd:
37:4f:78:50:00:c5:c1:11:9f:56:0b:c7:d7:c7:ad:2d:75:9b:
e0:f2:bc:e3:6e:09:d3:70:a6:71:d2:6f:c2:f4:dc:25:24:93:
3c:28:39:8f:48:be:93:ba:93:18:c5:9e:f5:73:b3:6e:bd:ac:
0a:79:b1:ac:a6:47:a2:fc:0d:c5:fb:7b:73:fb:d1:ce:bf:8c:
be:1c:e6:fc:8f:b8:06:d4:11:81:18:df:3c:2a:93:10:d5:b8:
31:03:51:dc:d4:b1:59:9b:0d:6d:49:61:b9:44:b6:d1:6a:a9:
a4:f4:45:3f:b2:fb:70:75:ca:47:8a:e6:e2:bf:5a:50:2b:02:
30:79:d2:80:71:9d:35:f4:00:6f:9a:ce:75:d1:f9:c0:1f:1b:
c8:9d:5f:d4:72:f2:ce:d6:a9:95:65:54:21:14:0a:28:d3:53:
53:7d:49:6b:8b:82:64:98:57:d6:51:fb:99:9f:c6:3d:a8:03:
ed:37:58:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-fra.rpki-client.org