Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/4tiwSP1daUvOr5FcMM2R_crjMvY.roa
File: 4tiwSP1daUvOr5FcMM2R_crjMvY.roa (raw, json)
Hash identifier: 7skkS1pJhHvsqErG+mg/4ib67j4LR0eUB9hzaR+KCEA=
Subject key identifier: E2:D8:B0:48:FD:5D:69:4B:CE:AF:91:5C:30:CD:91:FD:CA:E3:32:F6
Certificate issuer: /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Certificate serial: 018799ABBB5FD6415B455EF2A0D6AB55027E
Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/4tiwSP1daUvOr5FcMM2R_crjMvY.roa
Signing time: Wed 19 Apr 2023 13:19:41 +0000
ROA not before: Wed 19 Apr 2023 13:19:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 185.24.80.0/24 maxlen: 24
185.24.81.0/24 maxlen: 24
185.24.82.0/24 maxlen: 24
185.24.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:99:ab:bb:5f:d6:41:5b:45:5e:f2:a0:d6:ab:55:02:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Validity
Not Before: Apr 19 13:19:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2d8b048fd5d694bceaf915c30cd91fdcae332f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ec:71:6e:2a:28:b3:16:a7:6e:79:49:bc:eb:
3d:7b:2c:95:e1:39:72:5b:31:c7:59:55:c5:83:f3:
b5:c4:d1:89:1b:ca:88:38:8d:c2:55:b0:3a:a8:9e:
c1:d3:94:11:dc:66:bb:0c:76:3c:c5:4e:d9:ce:83:
0f:8b:2a:ce:24:05:5d:3f:5b:a8:f4:4f:82:ba:42:
0c:6b:a0:06:62:d8:76:87:0d:97:f9:27:e7:b0:d7:
03:ea:d1:15:7c:12:ee:28:95:15:43:19:bc:ec:be:
db:38:8b:3c:58:ce:24:83:13:7f:4a:ae:a3:0a:5a:
0f:b0:3e:4f:b0:aa:94:e7:07:53:24:b3:ca:dd:45:
3d:4f:cf:b8:e5:53:37:91:65:e6:bc:8d:aa:c3:f1:
5e:16:7f:a4:9e:27:e1:44:3d:9f:fe:88:92:02:9f:
ee:0e:a9:1f:01:b7:4f:0a:bd:71:ba:fc:49:57:f5:
bb:54:71:14:7b:e3:29:0e:b4:c9:3c:e0:d2:49:69:
a4:cd:d3:ba:da:62:32:3b:f4:0b:92:e9:5d:69:e7:
8f:ec:63:d2:70:cf:5b:29:5e:43:06:d9:c1:a6:90:
26:33:12:17:b4:41:1f:09:b8:85:b1:53:f7:33:d3:
47:64:97:88:3b:b5:f3:d1:ae:f1:6b:b9:69:8a:90:
d7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D8:B0:48:FD:5D:69:4B:CE:AF:91:5C:30:CD:91:FD:CA:E3:32:F6
X509v3 Authority Key Identifier:
keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/4tiwSP1daUvOr5FcMM2R_crjMvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.80.0/22
Signature Algorithm: sha256WithRSAEncryption
24:b5:ab:2c:36:10:d7:ab:88:bd:10:df:e2:be:1f:09:44:57:
f3:4c:a3:61:00:e9:9c:90:ad:f2:89:7e:7c:f6:61:e2:8c:b4:
ae:ea:3f:87:49:af:82:a9:2f:51:f2:e7:4d:84:08:6a:7d:50:
f5:8b:52:c7:d6:37:af:81:c7:83:10:2f:5a:e2:f3:8d:b5:e4:
d1:6e:b6:cd:3e:5d:95:10:9b:d0:75:5c:f0:eb:cf:b0:6e:9e:
ad:20:f7:56:37:fb:b8:27:42:52:7d:80:46:cd:e3:5d:b7:a5:
41:c4:30:18:7b:d9:f9:83:af:55:aa:b7:12:17:4f:0e:87:35:
ec:4a:1f:82:18:97:09:86:76:41:63:ee:42:3f:24:66:ef:74:
1d:5c:c5:c1:38:dd:af:c7:8b:23:89:8a:e4:22:5e:da:6c:5f:
fc:a6:eb:ff:c8:28:2b:28:42:fe:70:70:bb:0c:ca:02:50:da:
a2:7f:b2:93:79:e2:21:d3:09:58:e1:85:1b:87:92:a3:24:e4:
55:5e:f0:8f:b3:89:00:6e:57:53:eb:9d:e5:ba:06:43:3e:fb:
df:e5:df:b7:12:60:6b:a8:3b:a6:83:95:23:95:24:c4:31:36:
01:3c:2e:93:8c:0a:fd:74:1c:da:2e:2b:d4:6f:f8:fb:2c:53:
1a:66:c0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:43 2024 by rpki-client on console-ams.rpki-client.org