Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/x6hhqK6DCj3mMfvwBLCcLwNFvjU.roa
File: x6hhqK6DCj3mMfvwBLCcLwNFvjU.roa (raw, json)
Hash identifier: 4aZNZLws07QDEKofHl1b/56tk2ITebHiz6MbUY7qRCs=
Subject key identifier: C7:A8:61:A8:AE:83:0A:3D:E6:31:FB:F0:04:B0:9C:2F:03:45:BE:35
Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial: 01879A770037DD822C179564C58A3BEA370E
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/x6hhqK6DCj3mMfvwBLCcLwNFvjU.roa
Signing time: Wed 19 Apr 2023 17:01:42 +0000
ROA not before: Wed 19 Apr 2023 17:01:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39230
IP address blocks: 185.212.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9a:77:00:37:dd:82:2c:17:95:64:c5:8a:3b:ea:37:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
Validity
Not Before: Apr 19 17:01:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7a861a8ae830a3de631fbf004b09c2f0345be35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e3:4b:24:30:ff:46:3a:db:56:eb:49:08:89:
c3:3f:66:ff:5d:2c:fc:19:10:96:e7:13:f4:dd:23:
92:38:f7:df:bd:85:fd:c3:07:1e:92:ab:88:9d:3c:
65:52:36:75:91:66:6d:5f:d0:4e:6e:4b:bd:18:05:
2d:fa:4b:46:0b:bc:1f:66:d7:2d:de:54:66:3c:4a:
b1:60:1d:38:39:b0:27:4d:92:93:88:79:9f:ab:14:
84:71:8c:65:51:81:01:b0:cf:f4:81:4f:04:40:8d:
6d:f8:6e:07:59:61:3c:bd:a3:38:01:c5:bb:39:98:
23:da:c1:c8:0d:99:74:ff:e5:12:23:e6:4e:77:a5:
a2:1a:22:6f:cd:ec:43:6e:d8:c9:e9:19:bd:db:e6:
1d:1f:ae:3f:b7:5c:96:83:3d:89:16:22:44:f2:f7:
f5:9b:75:06:2d:d8:b5:94:93:59:f6:75:8d:04:8b:
42:d1:eb:53:bb:8d:32:10:ff:5b:9e:ea:66:5f:b0:
42:e2:92:76:86:05:14:36:ee:7a:b0:d5:97:0e:c6:
73:2e:cf:0d:a6:33:22:b8:2f:21:26:d7:6a:a6:d2:
75:e0:87:22:50:d5:e7:5b:e3:bf:71:ee:d2:5a:1c:
77:c3:d1:04:6b:de:f2:d8:c5:d3:2a:4d:5b:fb:0b:
2c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A8:61:A8:AE:83:0A:3D:E6:31:FB:F0:04:B0:9C:2F:03:45:BE:35
X509v3 Authority Key Identifier:
keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/x6hhqK6DCj3mMfvwBLCcLwNFvjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.248.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:b8:b6:6e:80:30:b0:07:b9:a7:a0:e4:01:d1:74:a1:7d:21:
ae:e1:96:b7:fb:30:2b:ec:e9:43:ac:02:fd:3e:49:bd:cd:47:
9d:2e:44:9c:2c:fa:e8:3b:a7:d8:39:c2:8c:7c:6f:06:00:c5:
bc:01:cb:c6:ec:13:27:14:e1:dc:62:96:46:6b:c3:17:b3:ab:
d0:eb:f6:f5:73:88:b3:db:d4:8b:f2:19:77:67:5d:31:57:10:
c9:f4:a1:01:ea:33:e3:04:61:a8:96:ce:35:41:04:08:68:4f:
8f:34:7e:f0:e8:98:90:31:74:34:33:6a:3d:8c:30:8e:b8:f0:
61:a5:03:22:dc:25:46:1a:7b:a8:51:9c:15:6c:70:58:77:c7:
97:96:31:bc:20:0a:6b:f2:15:72:94:83:1d:2a:f5:ee:e6:f7:
69:ab:93:85:1e:9a:63:61:f6:50:a5:2e:e3:b0:05:d1:0d:97:
3d:ad:34:fa:9c:a4:c0:24:5e:50:6b:23:b9:92:30:2f:d7:32:
ef:07:a5:ac:8e:72:c2:c5:e6:b3:84:64:4b:32:98:14:7c:57:
61:d2:e5:06:16:10:70:d4:54:e1:72:ec:9a:d8:27:bd:e9:66:
64:db:96:58:b1:74:db:78:2b:3b:ac:20:81:4d:88:01:50:db:
7e:d0:a6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:27 2024 by rpki-client on console-ams.rpki-client.org