Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/jb1giO4_hHgaB3DyVM5Z68SrZto.roa
File: jb1giO4_hHgaB3DyVM5Z68SrZto.roa (raw, json)
Hash identifier: 0ZVS466+LVVyNsWPIgDQNF5oKTzyFDKAlrZsYohM5EI=
Subject key identifier: 8D:BD:60:88:EE:3F:84:78:1A:07:70:F2:54:CE:59:EB:C4:AB:66:DA
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 0185F442AAF29AC99B33BA6B0CAFC1856629
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/jb1giO4_hHgaB3DyVM5Z68SrZto.roa
Signing time: Fri 27 Jan 2023 17:24:47 +0000
ROA not before: Fri 27 Jan 2023 17:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 185.117.183.0/24 maxlen: 24
2a03:52a0:183::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f4:42:aa:f2:9a:c9:9b:33:ba:6b:0c:af:c1:85:66:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Jan 27 17:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dbd6088ee3f84781a0770f254ce59ebc4ab66da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:ba:54:05:cb:ff:23:ef:7d:15:2a:65:35:
99:a9:e7:10:ed:20:5b:da:21:f9:6c:5c:4f:55:d8:
0b:4e:eb:15:4c:8e:9c:e5:cb:74:9e:50:3c:91:cc:
46:fd:33:92:2b:a4:c7:a3:01:6c:c2:e4:d3:cf:8f:
8e:24:8c:f1:7b:b9:8a:7a:a3:bc:99:2b:6b:9e:12:
02:97:58:ed:2a:99:20:3e:65:89:a3:ac:7f:c3:fc:
de:a8:95:f4:af:ef:89:2e:34:ba:07:c7:95:a2:37:
77:6e:a1:9a:7a:e8:81:2a:04:11:95:cf:00:d0:bf:
23:1a:aa:3d:45:16:35:34:a7:64:75:2e:f8:4b:f6:
1c:48:2d:e9:1e:62:a9:c1:3e:ba:bd:43:f3:69:f6:
b2:cb:d0:6a:24:e6:1b:ec:5a:71:01:c5:d6:97:27:
0e:ef:f7:84:e2:e3:12:dc:19:56:d9:c7:e2:90:ce:
90:97:6a:9e:fd:03:7b:94:22:8a:d2:9b:40:ec:90:
7c:39:1d:e0:a0:6f:6a:52:67:b4:5e:d6:4e:0b:36:
c8:af:09:37:53:38:e0:3c:8d:90:28:28:af:bb:90:
6e:bd:dd:64:8b:f5:ce:48:04:e5:5f:43:4e:9d:c0:
5c:2b:d6:27:2f:50:16:0b:11:ad:b2:df:4a:3d:40:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BD:60:88:EE:3F:84:78:1A:07:70:F2:54:CE:59:EB:C4:AB:66:DA
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/jb1giO4_hHgaB3DyVM5Z68SrZto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.183.0/24
IPv6:
2a03:52a0:183::/48
Signature Algorithm: sha256WithRSAEncryption
7c:e2:b5:c8:bf:67:49:12:be:5a:76:b4:71:1b:15:c6:44:f6:
f4:62:d3:fd:b1:5e:51:25:d6:69:5f:7b:17:27:82:f3:4f:71:
70:4a:19:11:df:3d:3f:2e:08:2a:a6:a4:dc:15:b0:65:12:3f:
fd:8c:fb:33:37:73:f1:d1:77:c2:d9:72:59:c1:08:9f:32:75:
d7:42:42:a3:79:b5:2a:0a:74:ee:8c:80:f3:b9:ac:31:57:10:
07:94:00:28:10:a6:7e:60:b6:5b:35:9b:fe:d3:6a:a0:f5:bf:
f9:7b:60:f2:7b:11:9e:c0:96:f1:a1:5b:75:80:39:b5:f9:72:
86:ea:84:a5:ae:97:e6:a2:8b:37:c8:2a:18:60:3f:d8:0b:0c:
7c:53:c4:82:d1:be:8f:92:e9:70:31:d5:bc:d0:14:a5:3f:de:
66:56:39:b7:29:4d:16:d9:22:d5:44:71:ec:c4:dc:f3:97:51:
f6:3c:1a:48:ed:d7:23:f4:99:75:4f:91:db:0e:12:8d:e3:b5:
23:4f:89:5a:0e:e1:3b:c1:98:83:41:1e:eb:b9:ad:61:d2:37:
10:d3:66:07:74:ba:b1:5a:bf:7a:b2:12:33:f1:f7:80:96:a9:
35:4f:1b:8e:19:68:4b:15:5d:a9:52:0d:65:29:cf:ca:7d:bd:
b0:ee:4c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:51 2024 by rpki-client on console-fra.rpki-client.org