Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/j7w11wN631cO8PoHJ564TsuAeik.roa
File: j7w11wN631cO8PoHJ564TsuAeik.roa (raw, json)
Hash identifier: eYDpIbViwB/zJ0fqZ+WXoGcuowirXJ7BZcImGIweuU8=
Subject key identifier: 8F:BC:35:D7:03:7A:DF:57:0E:F0:FA:07:27:9E:B8:4E:CB:80:7A:29
Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial: 01857139CE0545B075BC0A696EB1021FCDEF
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/j7w11wN631cO8PoHJ564TsuAeik.roa
Signing time: Mon 02 Jan 2023 06:44:51 +0000
ROA not before: Mon 02 Jan 2023 06:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198518
IP address blocks: 185.238.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:ce:05:45:b0:75:bc:0a:69:6e:b1:02:1f:cd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Validity
Not Before: Jan 2 06:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fbc35d7037adf570ef0fa07279eb84ecb807a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ec:35:b1:b4:bb:eb:ee:67:ce:66:02:89:5c:
01:4e:39:da:d2:e4:76:8f:f2:a7:45:db:b2:b1:81:
d3:81:b8:86:c5:88:82:64:b1:44:ed:24:ea:c6:86:
60:6f:d1:99:e1:1c:d6:ad:df:a9:f4:09:0a:cf:5b:
de:c1:d5:d7:9c:e7:20:9f:10:67:bd:bc:ec:2a:8d:
7e:d4:2c:08:56:1d:75:31:a2:6d:01:fe:77:4e:b8:
83:cf:86:1e:1a:24:f1:f2:43:3e:bf:4b:e7:f3:08:
c0:14:ab:46:4c:20:ce:45:a7:7c:39:3f:83:24:36:
79:b6:f0:da:90:f7:87:cb:43:7d:0b:6b:87:34:53:
a1:05:ce:9b:44:4e:7f:7b:93:f0:d8:e9:f4:e6:bd:
7f:d7:d9:bf:98:fd:0c:ce:35:e9:af:57:4e:7b:5e:
d6:ab:06:ec:d0:7c:36:21:d3:e1:0a:5d:8c:e2:f4:
93:24:c4:67:a6:97:d5:9c:02:4b:86:92:0c:e7:51:
c4:75:c0:8c:c1:f8:1e:63:77:55:54:05:09:2e:3d:
ef:77:09:db:9b:aa:ff:75:ba:a3:36:a2:2a:23:2f:
74:b5:f8:8f:93:49:7f:25:51:43:b2:00:ac:9b:e5:
69:4c:f5:5c:e7:bb:bf:80:a1:08:7b:0d:0a:c5:9a:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BC:35:D7:03:7A:DF:57:0E:F0:FA:07:27:9E:B8:4E:CB:80:7A:29
X509v3 Authority Key Identifier:
keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/j7w11wN631cO8PoHJ564TsuAeik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.60.0/24
Signature Algorithm: sha256WithRSAEncryption
15:67:61:31:1e:db:81:c3:e2:21:22:7d:24:92:18:43:b6:a2:
f8:fe:4f:88:b2:56:2c:db:30:e8:71:53:2d:d5:e8:8f:f1:b0:
19:80:17:f7:df:07:f9:73:c9:f3:b5:d2:a2:ec:ff:b6:69:55:
4e:dc:1e:54:f3:9c:10:69:f9:50:88:ca:7a:80:e0:ee:58:7d:
96:c3:a4:5d:35:30:e8:94:0e:53:e7:8e:15:7d:90:ed:d5:ba:
ce:79:b0:8e:23:57:dd:46:14:ae:63:20:e3:d8:7c:51:14:29:
01:15:c5:cc:28:ea:13:82:63:38:cc:97:59:24:d9:c7:1c:74:
e0:ad:ef:8d:f2:cb:9b:d2:c4:e3:4d:b6:0d:fe:04:81:4a:0f:
fe:72:67:08:34:44:2d:86:e2:d8:64:b8:d7:00:9b:2b:17:3b:
d7:05:0e:8a:2a:b6:61:d4:c6:79:6b:66:58:6c:64:54:fb:8e:
eb:36:a8:28:70:bd:a4:42:3b:55:a9:f6:4f:f4:94:d3:ef:80:
87:63:fc:70:8e:cf:da:57:6a:0e:87:1e:06:d9:ed:d7:32:db:
5d:fc:79:c7:ca:3d:d2:e2:1f:08:2f:b6:cc:14:46:02:5f:4d:
36:85:ce:d6:68:c4:16:1d:1d:a0:d1:40:dd:6d:f5:50:6d:20:
29:4d:40:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:44 2024 by rpki-client on console-fra.rpki-client.org