Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/ODN4uxoAG--Kt-8Xym8KETRIesM.roa
File: ODN4uxoAG--Kt-8Xym8KETRIesM.roa (raw, json)
Hash identifier: S9Eef/XL36RmPv5fpjICbF4XD/A9uVwdmjNuC1aIp7Q=
Subject key identifier: 38:33:78:BB:1A:00:1B:EF:8A:B7:EF:17:CA:6F:0A:11:34:48:7A:C3
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 0185701513EC4698CEF25ED8EDA106BDBF3E
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/ODN4uxoAG--Kt-8Xym8KETRIesM.roa
Signing time: Mon 02 Jan 2023 01:25:07 +0000
ROA not before: Mon 02 Jan 2023 01:25:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.144.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Apr 2023 12:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:13:ec:46:98:ce:f2:5e:d8:ed:a1:06:bd:bf:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Jan 2 01:25:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=383378bb1a001bef8ab7ef17ca6f0a1134487ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:03:d6:0e:d1:85:d5:6a:30:38:86:68:c7:5e:
fc:4c:02:34:cd:09:a2:98:8b:ae:20:e2:a9:c0:b8:
af:64:3f:c2:a7:38:43:c3:86:16:cc:54:a1:f1:3c:
83:59:cf:5f:92:37:0d:48:06:69:9c:73:6f:63:98:
98:4c:92:35:f3:55:17:8c:b1:3d:1a:74:aa:5f:72:
5e:94:74:4d:df:81:02:81:65:dc:04:43:92:9a:6d:
18:a3:e3:c7:3f:26:e4:dc:16:92:99:ae:04:db:d6:
29:e8:21:cb:98:5b:3f:68:32:82:a0:6e:32:f9:f1:
5b:ac:d3:50:d5:7b:f8:36:e8:28:de:34:b1:05:70:
78:d0:c1:8d:43:39:60:88:ae:3e:5b:f0:2e:13:7d:
45:5b:20:ba:09:13:93:74:98:38:9e:7a:ef:8b:93:
b7:b3:83:65:fe:03:a5:74:49:41:62:a1:02:fb:d9:
76:4f:e3:71:37:0d:20:89:1c:87:2f:dc:59:65:32:
23:7e:12:42:10:8f:e3:e9:70:b3:47:37:ef:54:26:
35:dc:9e:d0:b4:27:c3:67:10:52:6a:e1:f6:21:f5:
03:0c:20:5a:dd:34:6d:12:e7:14:15:e9:a2:44:49:
15:8c:55:31:7b:cf:7d:60:98:7d:a5:d3:d7:d8:b0:
98:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:33:78:BB:1A:00:1B:EF:8A:B7:EF:17:CA:6F:0A:11:34:48:7A:C3
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/ODN4uxoAG--Kt-8Xym8KETRIesM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.12.0/24
Signature Algorithm: sha256WithRSAEncryption
79:41:1e:e0:5a:fa:b8:d4:63:29:75:86:93:54:95:e8:ec:57:
a3:be:ff:44:de:75:26:36:b6:61:19:f0:a9:ef:99:59:3a:ce:
88:fe:d1:8e:6a:af:82:26:7c:dc:b3:93:bf:82:b4:7a:74:a3:
18:ae:71:d7:59:0a:ab:59:17:db:be:f1:8e:73:26:b7:0d:ae:
75:f9:08:67:dd:2f:ef:97:70:9a:3c:7e:ac:57:80:43:8c:66:
8a:b1:48:10:06:c8:e7:09:2b:ed:8b:2c:3f:1f:e2:6a:c8:da:
9f:ec:06:89:12:13:cc:e0:fa:f3:39:d9:48:17:a4:67:20:69:
7f:72:54:ae:3a:15:57:4a:1b:35:9a:b6:89:e0:94:62:97:a6:
09:f8:e7:9a:b0:af:5f:24:28:2d:8a:02:1d:c2:c0:1e:58:ac:
dd:73:17:b6:65:43:4a:53:a8:f5:2b:d0:89:a6:8e:e4:61:d1:
9b:91:cf:5f:27:94:38:98:68:5c:8e:1b:8e:51:0e:2e:3f:2c:
64:aa:67:3c:e6:8f:72:80:14:e0:66:c2:29:63:fd:9d:24:bc:
08:29:0c:fc:c8:c8:0f:b7:3a:b7:12:bb:9d:e2:47:81:be:22:
81:b8:f0:cb:13:4e:76:10:1e:2d:ed:e9:9b:9c:6d:4c:7a:bc:
de:e9:6c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org