Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/DHtVcL9zwgZi2y5Ms2zeST6wIpQ.roa
File: DHtVcL9zwgZi2y5Ms2zeST6wIpQ.roa (raw, json)
Hash identifier: czFslXSIhBrzINszEA1WikxfPmTmxZLOJMlyyXTseAo=
Subject key identifier: 0C:7B:55:70:BF:73:C2:06:62:DB:2E:4C:B3:6C:DE:49:3E:B0:22:94
Certificate issuer: /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Certificate serial: 018799ABBC14AF14B59D446B042B71BEFD97
Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/DHtVcL9zwgZi2y5Ms2zeST6wIpQ.roa
Signing time: Wed 19 Apr 2023 13:19:41 +0000
ROA not before: Wed 19 Apr 2023 13:19:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60896
IP address blocks: 185.24.81.0/24 maxlen: 24
185.24.80.0/22 maxlen: 22
185.24.80.0/24 maxlen: 24
185.24.83.0/24 maxlen: 24
185.24.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:99:ab:bc:14:af:14:b5:9d:44:6b:04:2b:71:be:fd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Validity
Not Before: Apr 19 13:19:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c7b5570bf73c20662db2e4cb36cde493eb02294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b9:75:b8:de:e7:b1:ac:b7:89:36:9f:1f:6e:
54:40:ca:30:c4:7c:6e:b3:9d:75:bf:73:61:7d:48:
e4:d6:dc:95:c8:51:9f:9f:0d:2c:64:9d:b8:c0:31:
9d:f9:81:67:02:e0:2c:c9:75:77:ad:5d:c9:96:17:
57:81:fe:49:10:dd:31:62:c6:38:5d:98:00:6e:a4:
b6:95:cd:8f:02:e2:1d:d1:6c:93:6a:b3:5a:43:44:
97:53:83:01:34:4e:22:02:e5:93:08:19:9a:f4:19:
62:92:1c:ad:63:b1:e9:14:04:99:b6:99:80:ae:d5:
74:41:0a:f7:9f:88:3b:6a:78:95:40:59:60:ba:b6:
68:57:8c:f0:38:7e:b1:ba:09:fd:da:c6:46:0f:3e:
16:07:fe:fd:a3:63:b7:67:d1:e6:7e:44:e8:82:b5:
4a:f4:58:a6:14:55:3a:09:fd:51:de:83:4d:d0:86:
6b:ca:bd:2a:9f:f0:75:c3:27:25:e2:8d:c5:68:ef:
97:08:14:fb:0a:df:20:14:2e:6d:bb:a4:7e:45:eb:
96:36:3e:f8:2b:d6:08:33:34:b5:ad:eb:ac:6d:58:
aa:a3:f4:49:07:b6:e1:ac:2a:bb:1a:61:c4:e6:b0:
34:f7:5a:9a:1d:99:3b:2e:5c:09:8d:89:87:e7:8e:
47:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7B:55:70:BF:73:C2:06:62:DB:2E:4C:B3:6C:DE:49:3E:B0:22:94
X509v3 Authority Key Identifier:
keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/DHtVcL9zwgZi2y5Ms2zeST6wIpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.80.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:31:b5:f1:a5:03:9d:af:9c:12:a7:ce:ed:ce:14:de:5c:6b:
5a:03:ce:32:53:da:a5:bf:b3:44:d3:e5:22:c1:b5:aa:66:cd:
f7:c4:4a:5b:93:60:7c:01:12:86:6c:40:b4:89:94:27:f4:9d:
76:10:9a:33:ae:3d:a5:c4:0b:c2:7b:5d:17:32:4a:dd:b9:54:
95:8a:04:82:ca:b6:39:ce:db:b2:8a:ad:ee:c6:bd:e5:05:3b:
33:0c:53:01:6b:4d:cf:be:cd:e0:c1:40:5c:80:de:f7:a3:90:
4c:d5:cd:47:a2:e6:52:28:5c:99:40:59:d5:40:fc:1d:d8:cd:
d7:60:de:51:85:9d:ae:4a:27:5b:c0:2f:7f:38:ac:4a:02:3b:
ef:fd:ce:d0:dc:6d:e8:dc:0b:bc:33:88:e3:48:45:73:21:27:
04:15:62:8a:52:5a:25:8b:99:55:e9:51:f7:bd:6a:14:9f:18:
ee:0d:83:30:ce:f1:30:af:05:93:fc:eb:fc:7f:6e:14:78:68:
0f:6e:4d:97:49:4b:70:97:02:f5:02:fc:94:64:ec:f4:4e:87:
93:bb:a6:bf:f5:b1:d6:fe:6b:1b:32:18:b7:7e:e3:37:aa:ab:
75:2c:80:9d:b0:0f:41:21:da:96:fb:1e:d9:94:79:de:2a:44:
8d:52:de:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:43 2024 by rpki-client on console-fra.rpki-client.org