Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/xjApJDBCFj-pMRba0GsBVTxLoZ4.roa
File: xjApJDBCFj-pMRba0GsBVTxLoZ4.roa (raw, json)
Hash identifier: /ERaE6sJOMDyH91vZ1PCdBcOJaJNN8c+vaXTourDg6g=
Subject key identifier: C6:30:29:24:30:42:16:3F:A9:31:16:DA:D0:6B:01:55:3C:4B:A1:9E
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 01856FCBB0ACFDD01BF4B2BF6A9DF9666A22
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/xjApJDBCFj-pMRba0GsBVTxLoZ4.roa
Signing time: Mon 02 Jan 2023 00:04:58 +0000
ROA not before: Mon 02 Jan 2023 00:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35758
IP address blocks: 185.200.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:b0:ac:fd:d0:1b:f4:b2:bf:6a:9d:f9:66:6a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Jan 2 00:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c63029243042163fa93116dad06b01553c4ba19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:47:7d:de:11:55:fd:5c:37:c6:20:d9:f0:
62:24:86:ca:ff:2b:12:92:e5:50:07:32:f1:71:00:
f0:c2:1e:b6:3c:d1:dc:c1:ca:05:71:01:d5:92:97:
36:f8:80:89:97:ad:aa:df:a7:a6:3c:9d:41:2a:92:
a0:c1:69:10:e7:12:98:a2:55:f3:12:b6:79:ab:f0:
4e:68:64:36:29:86:03:3f:a6:59:df:96:40:c1:0e:
5b:00:57:4b:a3:bd:ba:ff:62:89:36:61:b5:c9:93:
ed:41:58:23:84:e2:72:14:1e:53:5a:59:5c:d8:b6:
dc:af:19:9d:b2:52:08:81:01:ee:94:ce:01:3b:69:
4c:b7:37:2b:29:ee:70:df:98:51:b4:79:eb:cf:2b:
47:b2:16:80:6e:d7:7a:2f:89:7d:ac:d2:b4:cd:22:
e4:5f:eb:8f:26:32:7d:12:a0:5c:f6:9d:55:c2:83:
d3:c7:63:bd:b3:eb:71:e6:96:a2:15:bb:86:aa:2c:
04:01:5a:5b:12:87:c5:ab:1b:20:cb:f2:f6:e9:c2:
8e:97:da:e1:3c:e7:a9:93:90:5f:0e:3e:5f:2a:1d:
c7:61:ed:86:85:cb:ae:ff:3d:9a:1c:48:b5:f7:3e:
19:1c:fd:5e:d9:dd:e7:a6:01:96:e7:ac:dd:ed:e2:
5d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:30:29:24:30:42:16:3F:A9:31:16:DA:D0:6B:01:55:3C:4B:A1:9E
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/xjApJDBCFj-pMRba0GsBVTxLoZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.247.0/24
Signature Algorithm: sha256WithRSAEncryption
87:cb:38:a3:74:6a:35:55:b1:a7:e4:a9:3a:02:59:12:98:39:
be:85:ff:0a:4a:71:52:33:fe:d0:eb:9d:6d:30:6f:16:79:69:
d3:19:bd:a8:db:fc:84:c2:b5:1b:3e:bf:cb:72:7c:ae:3c:f1:
22:a4:9d:59:97:4f:15:84:d4:6f:c9:39:46:04:d5:53:74:50:
5b:f2:20:b3:f1:95:86:9c:60:14:9a:a0:29:1c:7d:b8:e4:ba:
4f:8d:0c:66:34:b6:27:df:14:c5:54:e5:1f:94:ce:8c:5b:15:
1b:07:7f:a0:2b:86:da:bd:1c:b1:93:4c:f3:64:dd:c6:32:bb:
6e:9c:17:c2:74:a9:08:6f:82:fc:9a:31:67:65:8e:c5:a6:9c:
0d:84:8c:cd:e7:46:ed:70:a9:ef:13:ec:a9:05:1f:b5:df:7a:
5a:81:99:20:6c:92:d6:31:fc:ed:68:e2:07:af:c0:11:ff:cd:
e6:e4:d6:ae:90:dc:2d:72:b7:f6:b4:24:26:d7:83:df:ef:50:
b4:22:27:5a:7a:5b:16:cd:cc:9e:35:c6:06:48:8e:f1:79:96:
5e:12:49:70:6e:43:a5:97:f1:1f:ab:e5:bc:1d:8d:6b:6d:0e:
9f:74:65:80:ef:59:e1:da:0a:15:8f:4c:5a:90:ad:ce:b7:3c:
bf:1b:6d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:29 2024 by rpki-client on console-ams.rpki-client.org