Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/1Ba1zl6kK_NYlO6iG3HQAYZopew.roa
File: 1Ba1zl6kK_NYlO6iG3HQAYZopew.roa (raw, json)
Hash identifier: KBM6M12fiGwXcdHEz1tlc+4uZ3KAXBtWWioipxZIAdM=
Subject key identifier: D4:16:B5:CE:5E:A4:2B:F3:58:94:EE:A2:1B:71:D0:01:86:68:A5:EC
Certificate issuer: /CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Certificate serial: 01896A507E7C72EEF485DA0AACFFDBCA5B8F
Authority key identifier: 11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/1Ba1zl6kK_NYlO6iG3HQAYZopew.roa
Signing time: Tue 18 Jul 2023 18:43:27 +0000
ROA not before: Tue 18 Jul 2023 18:43:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 185.239.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6a:50:7e:7c:72:ee:f4:85:da:0a:ac:ff:db:ca:5b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Validity
Not Before: Jul 18 18:43:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d416b5ce5ea42bf35894eea21b71d0018668a5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e3:54:61:cb:f9:e7:64:40:0c:3c:30:0c:c7:
94:eb:0d:2c:e4:7f:0c:cb:1c:03:3d:e0:f7:ab:dd:
c9:93:3a:bb:9f:e9:77:0b:af:36:c4:f7:d5:55:0e:
62:bf:e6:7b:d7:82:79:99:70:11:e7:d8:ff:a6:18:
8e:05:b9:84:21:b2:ad:7d:75:52:59:5f:06:e1:4f:
e7:52:8b:05:03:8f:4c:f0:3d:5b:78:e9:9c:3e:f0:
bb:27:b4:55:93:05:4f:5f:0b:dc:bc:4d:2c:31:28:
69:f7:9e:b4:3d:ee:dd:0d:08:e2:a7:59:90:ec:f2:
f2:09:cd:45:12:27:dd:45:94:33:b8:d3:b7:21:35:
12:57:8c:bc:00:cf:20:d6:18:7c:66:7c:9d:df:30:
e2:52:1d:c1:71:6d:b2:72:32:dc:ed:86:17:5f:b3:
de:50:54:69:fd:f9:a0:89:31:cc:07:9c:41:59:18:
98:4b:fc:fb:74:c3:6e:24:1d:ab:86:5c:0f:33:57:
cb:2c:90:c7:69:ef:75:b7:36:84:2c:5f:78:94:c2:
1d:7d:6d:8c:75:f9:98:52:bd:bb:0d:fd:b8:f9:08:
fa:18:13:e8:6e:f5:92:80:93:19:66:57:e8:7d:c0:
02:8f:ad:a7:e5:bd:73:29:72:08:74:80:68:b3:3f:
2b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:16:B5:CE:5E:A4:2B:F3:58:94:EE:A2:1B:71:D0:01:86:68:A5:EC
X509v3 Authority Key Identifier:
keyid:11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/1Ba1zl6kK_NYlO6iG3HQAYZopew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.140.0/24
Signature Algorithm: sha256WithRSAEncryption
65:fe:6e:5a:9f:f8:f8:59:7e:4f:b9:0f:1a:d6:b7:b9:f9:42:
3d:56:69:d2:59:d3:52:d5:93:fa:13:a3:62:80:d1:9f:47:36:
7f:96:2e:07:e8:59:c8:84:51:ad:4d:37:a9:84:53:60:90:f8:
fc:b1:da:e9:d4:2d:85:89:33:46:77:a4:9f:4b:50:9c:4a:53:
70:db:ca:88:61:ee:3c:c4:d2:14:7a:59:33:6c:60:76:bc:06:
d7:bc:51:d6:95:25:18:ad:76:ae:90:2a:29:15:11:41:39:7b:
34:0d:6d:f4:76:dc:52:65:f7:a1:90:3c:87:dd:03:f7:0f:cd:
6b:f3:2a:7d:f3:0a:8a:eb:08:f6:41:4a:2c:bb:8d:ca:7f:f6:
02:94:a3:08:ea:4a:7b:b1:2f:2a:2f:db:f0:b7:bc:e4:82:bf:
5a:f1:1d:cf:28:31:a5:9d:38:df:8a:11:3c:50:d6:8c:bd:17:
a1:cd:c0:48:8c:85:0f:10:f9:bd:cb:68:9d:00:af:ad:18:90:
35:d1:46:cc:d0:91:69:58:86:ac:8b:aa:6f:fb:23:43:9b:7e:
65:2a:8e:8c:0f:1b:94:f5:96:50:a3:96:37:1c:cb:8c:33:72:
f0:21:b5:fd:48:59:e3:de:b0:6a:9d:29:c3:06:b0:e4:97:1a:
3e:79:91:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:57 2024 by rpki-client on console-ams.rpki-client.org