Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/_aphHnDInbtchv_k5qvZFId79IU.roa
File: _aphHnDInbtchv_k5qvZFId79IU.roa (raw, json)
Hash identifier: MtED4D5+HSvhSgjtpibd8pUZfF17DZIErTHDAte2vDI=
Subject key identifier: FD:AA:61:1E:70:C8:9D:BB:5C:86:FF:E4:E6:AB:D9:14:87:7B:F4:85
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 0188F73A5BA872BD77EE9705BEC997F78D88
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/_aphHnDInbtchv_k5qvZFId79IU.roa
Signing time: Mon 26 Jun 2023 10:22:56 +0000
ROA not before: Mon 26 Jun 2023 10:22:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.255.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Jun 2023 11:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f7:3a:5b:a8:72:bd:77:ee:97:05:be:c9:97:f7:8d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jun 26 10:22:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdaa611e70c89dbb5c86ffe4e6abd914877bf485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:29:d8:04:ea:0d:ef:b4:a3:47:ea:de:7d:ba:
70:df:e8:05:9c:49:77:23:e4:6b:66:a3:a4:6c:84:
10:1a:04:b4:f2:3f:42:3e:00:8f:4a:e1:22:1f:27:
04:4b:35:1e:79:5d:aa:c4:b6:15:94:99:f4:bd:53:
d9:f1:d4:79:cf:6e:55:e7:1a:fa:1f:bf:80:44:a3:
a4:c4:3c:ff:ab:e6:a1:52:00:34:47:58:8d:ae:11:
6a:7b:d4:71:b9:86:ca:cc:1a:09:dd:c5:9f:45:3d:
5f:07:e9:59:2d:e0:4d:12:6f:1a:21:e3:49:8a:90:
73:f3:3c:7f:7e:95:c7:59:d3:81:45:47:e3:56:dd:
06:22:e6:b3:20:0a:ce:8c:57:14:7d:41:ff:f6:2e:
25:99:40:40:c3:b0:bc:9b:89:9d:f5:4e:ac:9d:75:
cb:48:58:b7:fc:99:25:75:80:c9:09:6b:df:33:ea:
60:e9:aa:60:e7:49:6e:aa:c9:96:c7:ca:00:5d:d4:
61:1d:17:8e:3d:84:62:fd:b0:d4:99:8b:93:1d:af:
58:fe:fd:28:47:55:08:9c:ea:1a:55:89:da:45:19:
7c:bf:bb:a3:48:d0:b8:dc:2d:3f:d6:dc:08:12:0c:
fe:41:92:20:dd:9a:57:36:29:c6:94:82:e2:a5:ab:
75:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AA:61:1E:70:C8:9D:BB:5C:86:FF:E4:E6:AB:D9:14:87:7B:F4:85
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/_aphHnDInbtchv_k5qvZFId79IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.4.0/24
Signature Algorithm: sha256WithRSAEncryption
15:66:4f:e6:95:41:d6:5c:b0:bc:8e:50:fd:9d:a4:35:ce:8d:
d1:ed:11:51:95:cd:d1:77:dd:49:f3:c4:c4:af:4b:11:84:d2:
b1:a2:92:46:d0:15:9e:f5:33:35:15:0b:5c:a6:84:52:30:bd:
c1:66:3b:92:b7:47:4f:8b:cf:13:a1:cf:23:17:ab:a2:11:05:
f2:a3:82:75:c4:20:03:17:eb:ca:7a:87:c8:fe:3d:96:e8:31:
23:e0:29:01:04:94:e9:7a:3e:ab:06:d6:2f:cf:74:bb:0a:ae:
61:4b:85:28:ca:b0:4c:33:99:b1:73:cc:95:82:64:a0:3c:03:
03:1d:99:6b:00:69:16:1d:f4:06:3e:80:86:3a:aa:a0:72:50:
b2:99:0c:7c:ec:c4:0b:17:cf:91:1e:ef:b9:1e:a3:76:cd:c6:
3e:b0:ff:4b:38:da:06:94:f2:75:0d:43:f1:12:a2:87:6a:d7:
7b:c2:86:b4:c5:d4:da:ea:81:38:d4:44:4e:80:ca:ab:50:ad:
42:ea:73:da:c3:b7:15:e3:a7:ff:52:f4:c4:82:97:7f:f4:dc:
d7:63:ee:04:bb:61:b4:37:f7:b5:00:c3:67:5f:d3:2e:14:43:
b0:93:42:10:f1:85:90:8c:74:ca:35:6d:9c:26:92:54:e1:66:
d2:b7:ed:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org