Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/bxUVkJWlc_cC--QUMSY4hDZUxyU.roa
File: bxUVkJWlc_cC--QUMSY4hDZUxyU.roa (raw, json)
Hash identifier: USyz0dMWFXcEOKDKE1Td2sj5phP+++iAuJlHA1Mugfw=
Subject key identifier: 6F:15:15:90:95:A5:73:F7:02:FB:E4:14:31:26:38:84:36:54:C7:25
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 018CC3B6DF9BF11E1D0F12536DC8B9E8BC03
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/bxUVkJWlc_cC--QUMSY4hDZUxyU.roa
Signing time: Mon 01 Jan 2024 06:29:51 +0000
ROA not before: Mon 01 Jan 2024 06:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39120
IP address blocks: 185.197.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Apr 2024 07:53:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:df:9b:f1:1e:1d:0f:12:53:6d:c8:b9:e8:bc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 1 06:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f15159095a573f702fbe414312638843654c725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:08:f8:5d:de:a6:da:09:11:78:08:a3:8f:39:
35:c1:11:33:dd:01:1a:be:2a:da:c1:1b:6f:2a:67:
74:cb:fa:e9:fa:62:15:f9:cf:9c:1f:b6:d2:a6:aa:
b8:60:fe:07:11:73:81:6c:2d:a6:c8:72:43:5c:2d:
e2:95:37:70:cf:4c:cb:08:70:ef:df:df:60:8d:62:
66:75:4b:24:90:55:dc:0e:82:0c:16:01:46:9c:dc:
34:ab:10:d7:0f:a0:ad:26:79:72:65:48:cf:32:79:
0f:a8:9e:10:9e:e8:34:98:b9:cc:b2:9d:f4:2e:03:
3a:1a:87:8b:69:84:b2:f8:87:2c:a2:6e:f7:f1:b2:
3e:41:80:87:3f:d6:0a:f3:b3:34:30:c8:c8:21:ac:
ec:f3:c4:d8:6e:45:48:d2:e3:a1:a6:df:8c:61:68:
54:8b:56:c8:e3:4d:a3:8c:fc:e7:45:a1:a4:55:be:
06:db:e4:02:b8:46:f4:52:70:2a:4f:8d:f9:a9:d6:
4a:47:55:87:f0:eb:b6:aa:ed:da:e4:57:0e:0f:08:
5b:51:bd:b2:8b:3b:78:6d:46:cd:d4:59:93:b8:e7:
ee:fa:07:74:76:26:71:76:89:74:e0:83:45:04:fa:
9d:0d:47:c4:cb:13:09:60:87:7d:db:d3:54:39:4f:
34:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:15:15:90:95:A5:73:F7:02:FB:E4:14:31:26:38:84:36:54:C7:25
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/bxUVkJWlc_cC--QUMSY4hDZUxyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.142.0/24
Signature Algorithm: sha256WithRSAEncryption
96:fb:4f:53:9b:a8:c6:62:c5:d9:4f:81:86:7b:c6:57:2b:e2:
60:85:9e:45:34:a9:97:11:a1:3e:41:a4:04:a2:0d:f3:3a:77:
c7:a5:c9:0e:e8:7c:df:9e:ab:14:ff:9c:df:70:14:1d:f1:ca:
26:1d:22:46:7d:6b:32:76:d0:b5:63:b2:d9:1a:c4:7f:e4:1e:
19:af:63:b9:41:ff:41:2a:5a:20:28:be:5f:8f:81:d1:1d:de:
6f:ab:a5:9e:e1:1b:e0:40:eb:df:6d:5f:64:09:20:3f:58:91:
26:ae:ae:6b:48:16:21:3d:ce:f8:86:8d:7e:e8:e5:ed:08:17:
44:c9:02:34:67:ec:86:90:7b:2c:85:46:b4:27:a3:12:55:df:
64:cb:43:7a:1c:e8:39:38:58:ca:8e:74:2d:30:79:d7:19:1f:
30:8a:2d:3a:2f:41:f1:73:cd:5d:39:fd:5a:e0:b6:ab:e9:9e:
6f:f8:52:25:13:bd:63:0c:e2:c2:41:37:b4:6e:bf:3b:7e:a5:
51:7f:ab:9e:e7:16:63:d1:46:7c:e6:2e:26:48:40:31:fc:10:
a2:8e:3a:75:ca:67:e8:0f:5c:df:7f:b0:43:de:07:5e:74:1e:
9f:b6:52:ff:86:24:8c:37:30:07:2d:0c:bf:dc:7e:e4:b5:0a:
2a:68:31:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:59 2024 by rpki-client on console-fra.rpki-client.org