Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/Dxh1W2JThABsVFHZCTsfVPe5YQw.roa
File: Dxh1W2JThABsVFHZCTsfVPe5YQw.roa (raw, json)
Hash identifier: Qmvzo178CAa3mL5HNgZQrTXM1FoPd4RToj7CWo8/8+M=
Subject key identifier: 0F:18:75:5B:62:53:84:00:6C:54:51:D9:09:3B:1F:54:F7:B9:61:0C
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 018C1ACE126FE9ED9BFB7F825971FED5D498
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/Dxh1W2JThABsVFHZCTsfVPe5YQw.roa
Signing time: Wed 29 Nov 2023 11:19:21 +0000
ROA not before: Wed 29 Nov 2023 11:19:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208582
IP address blocks: 185.211.60.0/22 maxlen: 24
185.51.8.0/22 maxlen: 24
2a01:aee0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:ce:12:6f:e9:ed:9b:fb:7f:82:59:71:fe:d5:d4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Nov 29 11:19:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f18755b625384006c5451d9093b1f54f7b9610c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:ee:46:26:b1:70:ca:cf:f9:a9:7f:2e:6a:
1f:f3:93:0c:a2:17:ac:70:d6:b0:98:02:f1:be:f7:
76:02:92:31:74:de:3b:c7:f9:e9:ad:26:f8:7e:2c:
1a:b1:e4:e6:0d:9a:24:b3:4f:05:bb:94:73:a2:1b:
0f:16:51:52:c8:87:26:cc:97:2a:c8:82:37:13:62:
54:15:f4:ce:fd:d9:bc:82:c7:3f:15:ad:dd:b5:ae:
32:d7:c7:df:a1:a9:18:a3:19:e7:2a:46:65:8c:d5:
26:03:56:ca:5f:c7:38:45:5f:e7:10:4b:bb:3f:79:
81:91:32:18:26:20:fa:3f:a1:cd:fe:ba:b8:a8:82:
0c:bb:14:11:4d:5a:b4:59:19:6d:c4:1e:d0:c2:ac:
a0:af:1e:1a:fe:cd:0e:b9:c4:5c:4b:ee:85:ff:1d:
a8:a2:11:fa:87:4a:3a:d1:65:37:9d:fa:bd:97:6e:
fc:1f:d9:01:c4:98:e8:f0:09:2f:ac:87:84:28:2f:
6f:09:70:fa:73:1b:46:6c:6b:0a:8f:a4:24:bc:b5:
63:4c:d2:c2:0c:9a:ff:66:d7:be:61:9b:01:6b:f5:
e7:15:f2:94:5f:91:8e:ec:eb:d3:a0:95:43:1d:d6:
8a:a5:a4:48:a3:00:de:b9:f6:2d:fc:32:a9:d3:58:
ad:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:18:75:5B:62:53:84:00:6C:54:51:D9:09:3B:1F:54:F7:B9:61:0C
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/Dxh1W2JThABsVFHZCTsfVPe5YQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.8.0/22
185.211.60.0/22
IPv6:
2a01:aee0::/32
Signature Algorithm: sha256WithRSAEncryption
84:35:a7:c8:21:50:48:71:27:63:24:48:73:55:68:b8:96:a2:
bc:75:1a:07:08:d3:7d:56:45:1f:4d:8b:f6:38:bc:4e:90:e8:
80:40:98:98:20:20:24:34:60:50:03:71:f3:28:fe:74:f9:50:
eb:0f:e4:a2:ba:6f:6b:4b:f5:11:53:c4:1b:c6:53:28:53:e8:
05:ba:5a:24:42:be:ca:57:a2:cd:b6:c5:7f:c5:2c:e1:85:9b:
cb:95:5b:61:48:c1:0c:87:e1:fd:b4:c4:72:fa:3b:90:2e:68:
bb:a6:42:bc:db:f7:f5:c0:09:44:43:a0:0a:71:88:ad:53:00:
d5:2e:7a:f0:23:20:51:61:f5:08:0b:82:77:e6:e9:33:33:71:
01:ee:f9:6b:76:26:41:56:0c:ab:4a:28:5d:66:da:1f:de:6e:
a4:14:27:69:83:c1:f2:9f:ce:8b:14:ab:36:85:51:41:d8:fc:
0f:07:36:9f:4f:1a:8f:83:b9:f0:c3:d5:dd:6e:b8:fd:0c:c7:
6a:8d:d7:03:ba:aa:d0:ec:e6:a9:f3:db:71:d5:3d:0a:f1:cf:
d5:ce:48:59:9c:d6:eb:84:f6:1b:41:4b:1e:01:b5:e7:04:da:
41:e6:99:24:7c:90:63:b4:b7:4e:c0:b7:da:f7:e5:fc:a8:21:
da:26:c6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:44 2024 by rpki-client on console-ams.rpki-client.org