Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/RXI7zhKH6hQZCCccMxZlfjFeyX0.roa
File: RXI7zhKH6hQZCCccMxZlfjFeyX0.roa (raw, json)
Hash identifier: 7gNqr295pIcZpvQKgX6sDE1fRcQ1t9LKSpyQEgHFN98=
Subject key identifier: 45:72:3B:CE:12:87:EA:14:19:08:27:1C:33:16:65:7E:31:5E:C9:7D
Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial: 018CC6B78ACBB79A1AEA3C46E9F9AD95FE9A
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/RXI7zhKH6hQZCCccMxZlfjFeyX0.roa
Signing time: Mon 01 Jan 2024 20:29:26 +0000
ROA not before: Mon 01 Jan 2024 20:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60472
IP address blocks: 185.128.11.0/24 maxlen: 24
2a0f:5ac0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 08 Apr 2024 12:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:8a:cb:b7:9a:1a:ea:3c:46:e9:f9:ad:95:fe:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Validity
Not Before: Jan 1 20:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45723bce1287ea141908271c3316657e315ec97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c9:5a:b1:95:99:93:97:0c:83:8a:87:b2:f9:
bd:a0:d5:5a:82:55:6f:e5:08:8f:df:fd:2c:06:ff:
0b:00:19:4a:26:7a:5f:27:e2:c5:19:a3:18:e4:4c:
d5:3e:57:75:b7:be:86:d7:e6:d6:03:3d:9c:42:db:
09:27:49:df:ba:60:e4:44:a2:54:33:c5:ea:37:03:
33:96:11:9d:06:3c:90:ac:82:19:1d:eb:b1:1b:aa:
48:5c:26:d6:f2:c7:73:9f:cb:1d:fa:be:54:2c:57:
8d:e7:ca:3e:c2:26:7f:aa:41:f4:4c:12:e3:13:e0:
da:5e:25:0d:05:7f:12:e9:58:5f:b1:92:f7:4b:ef:
7b:9e:41:57:ec:9d:bc:26:9f:35:d9:47:df:37:88:
22:58:c8:b3:68:26:3c:f9:79:ef:29:60:8f:34:e8:
15:67:28:33:38:01:e4:59:ba:e8:9a:9f:6e:c8:ff:
a8:66:fa:13:5a:8c:39:02:21:c8:ce:9b:1c:03:cd:
98:94:0b:e7:cb:50:fe:3b:54:6f:c8:1d:70:85:e7:
6f:5e:67:36:df:99:65:df:b5:38:d7:c6:85:a6:63:
03:89:80:9a:a4:e6:52:88:d8:4c:2b:e2:f7:3e:4b:
4d:c7:ae:35:1c:d5:29:18:a6:43:c7:5b:6f:2b:a5:
6a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:72:3B:CE:12:87:EA:14:19:08:27:1C:33:16:65:7E:31:5E:C9:7D
X509v3 Authority Key Identifier:
keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/RXI7zhKH6hQZCCccMxZlfjFeyX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.11.0/24
IPv6:
2a0f:5ac0::/32
Signature Algorithm: sha256WithRSAEncryption
30:e7:fa:c0:2f:d6:5d:dc:87:84:00:57:24:e2:cf:f2:d5:e5:
8a:e5:15:59:8f:0e:6c:5c:66:b3:75:8a:b7:7e:fd:9b:6a:d6:
25:a1:ea:7c:9c:89:ea:03:3c:48:0a:50:07:10:c1:06:92:2b:
07:5e:0d:26:24:68:ae:6c:69:dd:e1:6a:67:e0:a4:55:ea:36:
f7:f4:e0:ed:89:6c:26:c9:1b:81:d0:ca:ac:38:f0:d0:b6:00:
ec:35:6e:9c:fc:7a:ff:83:b7:f5:52:ee:4a:81:ec:6b:a6:2e:
e3:c5:37:cd:81:2e:05:f4:eb:29:dc:80:4b:53:d8:94:0b:20:
75:b6:04:0b:47:93:aa:23:08:1b:47:7f:98:20:c2:dc:59:58:
d6:3d:e5:7d:ae:27:ee:96:0c:10:da:65:15:c1:c7:e8:70:b2:
53:bf:7e:23:cc:25:5a:0e:cf:f0:cf:8e:67:42:e9:63:5b:c5:
0c:86:99:19:cc:02:60:b3:83:41:cb:c1:78:7b:88:d6:25:90:
49:8c:be:0a:52:8f:51:c5:8a:f3:22:16:2a:30:46:1b:51:52:
12:a1:59:c3:46:5e:ab:bb:52:e2:f8:05:7d:1a:da:1c:0f:f1:
91:7e:90:78:d2:e1:9e:61:cb:1e:7a:d8:ed:b0:6d:4f:c3:8f:
a5:62:49:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:10 2024 by rpki-client on console-ams.rpki-client.org