Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/odTCs6bWeQQmR7XEFwLWYh1KTsE.roa
File: odTCs6bWeQQmR7XEFwLWYh1KTsE.roa (raw, json)
Hash identifier: G4+50U1XN4YwZ2CN8ZI2WsRWXVT14PmxC/wmhYQ9QZI=
Subject key identifier: A1:D4:C2:B3:A6:D6:79:04:26:47:B5:C4:17:02:D6:62:1D:4A:4E:C1
Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial: 018573B19C72436E18E9B76CF8685EA38B18
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/odTCs6bWeQQmR7XEFwLWYh1KTsE.roa
Signing time: Mon 02 Jan 2023 18:14:57 +0000
ROA not before: Mon 02 Jan 2023 18:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203684
IP address blocks: 185.187.86.0/23 maxlen: 23
185.187.86.0/24 maxlen: 24
185.187.87.0/24 maxlen: 24
185.186.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 Nov 2023 05:55:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:b1:9c:72:43:6e:18:e9:b7:6c:f8:68:5e:a3:8b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Validity
Not Before: Jan 2 18:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1d4c2b3a6d679042647b5c41702d6621d4a4ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:e4:76:a5:13:94:e9:45:41:76:98:89:da:
30:ad:08:b4:c6:21:d0:0a:a1:68:e9:bf:47:eb:8f:
03:aa:be:2b:19:32:f5:03:32:07:22:63:6e:9e:73:
75:1d:e8:0e:e0:f8:ba:b7:11:8b:03:d6:70:bd:4d:
92:b4:e2:05:fa:82:4b:7d:1e:b4:1e:3a:4f:de:b3:
0d:35:fc:ef:23:f6:1e:dd:af:c7:e2:4b:ac:48:d8:
e1:11:bf:47:8c:a8:da:56:24:93:fe:70:4e:98:89:
2b:d9:82:60:5b:5e:9a:62:28:8a:58:a0:84:9f:09:
38:a3:56:c9:61:ec:27:48:96:00:65:28:3e:60:eb:
11:9f:79:d0:92:1a:03:98:b2:7c:58:ea:65:2a:bd:
0b:47:c7:3f:e1:80:32:df:4d:30:43:5b:27:af:43:
69:df:57:b6:7d:41:9c:aa:62:9a:b2:d6:61:38:4d:
b7:0b:4c:bf:67:1b:55:84:eb:67:20:a0:f9:d7:4d:
98:6c:ec:c3:c9:9e:db:96:8e:ca:b4:ba:8b:8e:6c:
4f:2f:5c:e5:bb:dd:9e:be:12:2a:5d:fa:da:8f:db:
93:e2:47:3d:32:81:a4:0b:22:6e:44:92:79:3a:03:
de:1f:13:33:54:42:c8:cd:d8:d4:5a:50:f1:7c:7a:
74:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D4:C2:B3:A6:D6:79:04:26:47:B5:C4:17:02:D6:62:1D:4A:4E:C1
X509v3 Authority Key Identifier:
keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/odTCs6bWeQQmR7XEFwLWYh1KTsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.240.0/24
185.187.86.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:97:81:f1:61:bc:ff:90:9e:fd:05:57:1d:83:ac:51:dc:df:
a0:60:80:df:f8:cb:78:77:00:74:05:a1:26:6f:34:bc:1e:1d:
ca:16:99:16:a8:27:e1:68:ee:45:64:6e:dd:5f:01:f3:42:31:
5b:66:9f:34:75:eb:9e:e3:49:65:b0:f8:49:20:d4:c0:0d:b8:
06:97:06:55:66:30:49:84:dc:53:60:8d:45:6c:ce:65:32:44:
56:58:f1:57:8d:af:e0:37:bc:f0:d3:f2:b9:6a:6a:48:81:ea:
01:c4:9f:be:4c:d5:a8:bc:7a:e4:f6:25:49:c5:98:9a:da:60:
b3:50:88:f4:38:95:93:ca:39:3b:c2:24:a4:fd:cb:d0:17:ed:
1a:7f:1e:c0:ae:05:42:92:0b:b7:9e:32:14:e5:b6:6f:55:8d:
d7:70:db:09:84:ea:b5:50:95:58:77:6c:30:8c:86:c5:fd:ad:
91:41:84:dc:0d:d2:14:45:8d:92:76:71:4d:c9:ed:11:43:74:
92:b6:20:a6:42:20:4b:c6:dc:8b:4e:c5:b0:40:73:d4:c0:dd:
96:95:bd:e3:2f:37:af:6e:07:9e:05:b5:0d:47:64:74:88:6d:
84:4e:61:5b:49:9e:b9:cc:db:dd:4d:ac:7d:d6:84:3c:25:41:
34:85:c2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:46 2024 by rpki-client on console-ams.rpki-client.org