Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/pTEzklP7KMP_jtesKhYx-M-9Ak0.roa
File: pTEzklP7KMP_jtesKhYx-M-9Ak0.roa (raw, json)
Hash identifier: tf/wIfplzQxiUHEMuejFtPIILc3so1dZ0QvQ/sGD1xI=
Subject key identifier: A5:31:33:92:53:FB:28:C3:FF:8E:D7:AC:2A:16:31:F8:CF:BD:02:4D
Certificate issuer: /CN=bc83c2843c1649b0054c91124fee03114095e163
Certificate serial: 01856D9D24259A07501663ACDD3336A8FB1C
Authority key identifier: BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/pTEzklP7KMP_jtesKhYx-M-9Ak0.roa
Signing time: Sun 01 Jan 2023 13:54:53 +0000
ROA not before: Sun 01 Jan 2023 13:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 394805
IP address blocks: 185.240.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:24:25:9a:07:50:16:63:ac:dd:33:36:a8:fb:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc83c2843c1649b0054c91124fee03114095e163
Validity
Not Before: Jan 1 13:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a531339253fb28c3ff8ed7ac2a1631f8cfbd024d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:b8:e7:56:c7:a9:de:c7:a4:88:24:46:a9:
01:cf:32:67:29:f4:7b:c8:02:1e:1f:72:07:92:53:
b2:b2:d7:09:31:47:09:4d:ed:fd:6c:42:d7:d9:73:
14:8f:9d:f9:25:d2:64:85:1d:50:e6:8e:f0:9a:73:
bb:92:3e:12:46:dc:b9:51:9d:4b:bf:3b:2b:a1:b1:
89:11:34:02:4b:cf:48:cf:47:b3:a3:3b:6d:04:24:
61:7a:f4:32:4a:1f:2f:30:f2:4d:3e:56:43:b3:28:
42:a5:57:97:c7:11:a4:3a:1d:3d:64:45:a5:e3:30:
f2:4b:dc:68:7f:36:ea:0c:05:d4:73:86:71:8c:2e:
b3:d5:78:5e:fa:75:79:70:e2:7f:ec:3b:66:c7:32:
ca:86:ad:c9:ab:70:34:15:e8:bd:59:a6:d7:8c:2b:
52:20:a8:5d:c5:c5:a8:ba:8a:25:b4:b5:d8:ef:80:
39:4a:59:d8:54:c0:15:58:89:7c:82:4e:75:14:7b:
82:9a:23:dd:84:dc:a8:6a:fd:6a:de:df:8e:b5:f3:
a3:0f:b5:b2:a4:78:4a:cf:c2:c9:d9:69:d8:e8:5f:
c5:f9:d6:3e:36:89:62:52:cd:12:40:c0:ae:82:f6:
3e:91:61:56:7c:ed:c2:45:4c:da:d5:82:b2:7d:a2:
63:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:31:33:92:53:FB:28:C3:FF:8E:D7:AC:2A:16:31:F8:CF:BD:02:4D
X509v3 Authority Key Identifier:
keyid:BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/pTEzklP7KMP_jtesKhYx-M-9Ak0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.186.0/24
Signature Algorithm: sha256WithRSAEncryption
35:34:2a:3b:cb:0d:55:8c:c6:cb:ff:ff:af:e2:b4:f4:00:43:
1c:e0:ba:ca:dc:51:39:b0:43:37:fc:a8:29:1e:4a:a9:34:61:
d7:0c:1c:bb:6f:ed:c2:27:29:42:47:c3:65:4e:1a:dc:9c:4b:
9d:52:b5:91:e3:b0:c9:92:e5:f6:10:0a:f5:69:f4:7e:f3:2d:
f1:4d:9a:b3:60:86:f9:cc:c4:ea:db:58:61:35:26:2f:90:46:
d2:c2:dc:03:e3:63:8f:9d:ab:44:d2:2f:21:fe:43:4f:db:c2:
38:fd:cd:61:cc:5b:cb:0e:8b:b7:ce:97:89:6b:70:c0:65:f3:
ff:25:8c:98:0d:53:d4:fd:9e:4b:56:db:c5:59:05:03:68:f5:
07:3a:f7:65:29:fd:a1:8c:bf:13:60:e4:dc:74:0c:2c:9b:ef:
8e:f9:cf:25:eb:c7:6a:dc:f9:e0:57:d1:c4:d6:f0:31:29:29:
80:02:6c:49:f8:d9:35:13:be:5f:f4:52:1a:90:08:9a:97:11:
7b:36:5e:58:c1:33:a3:82:dc:99:0b:e7:19:ec:9e:bf:58:8f:
c1:ad:0a:09:02:ab:49:a2:5e:fe:be:68:93:5d:78:ce:2f:82:
7e:c8:d1:ac:6b:b4:99:ef:e3:00:92:dd:05:d1:b4:fe:48:78:
c7:d5:0d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:40 2024 by rpki-client on console-ams.rpki-client.org