Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/6SIl0QAgOiIgLPHrnenhBml0XM4.roa
File: 6SIl0QAgOiIgLPHrnenhBml0XM4.roa (raw, json)
Hash identifier: KxIK1tDQi3a41M4a4SjokvGRMUSKo6yStQ/0Ous8zzA=
Subject key identifier: E9:22:25:D1:00:20:3A:22:20:2C:F1:EB:9D:E9:E1:06:69:74:5C:CE
Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Certificate serial: 018CC4939E3A684E8C892B598905B95446AE
Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/6SIl0QAgOiIgLPHrnenhBml0XM4.roa
Signing time: Mon 01 Jan 2024 10:30:57 +0000
ROA not before: Mon 01 Jan 2024 10:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35600
IP address blocks: 185.17.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 18:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:9e:3a:68:4e:8c:89:2b:59:89:05:b9:54:46:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Validity
Not Before: Jan 1 10:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e92225d100203a22202cf1eb9de9e10669745cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:15:75:e5:03:a4:ca:9b:40:4f:19:bf:c9:66:
1b:0a:6a:36:5c:6f:6b:ae:c9:66:eb:69:a0:fb:cd:
29:85:7c:cf:bf:29:b2:be:d5:55:e3:06:65:c4:dd:
19:bf:4d:57:52:26:fc:b6:99:da:81:fb:ef:e8:99:
14:5e:0c:f1:0b:68:ff:63:98:0d:f8:6a:42:89:73:
9d:01:58:b2:8c:29:91:af:3e:e2:ec:3d:3f:a6:23:
1b:98:c4:44:75:8a:6e:f5:0d:db:8d:ac:c7:7d:89:
71:27:f7:af:ac:7c:dc:22:51:93:fe:82:74:78:ea:
8b:26:14:4e:e9:6c:c4:ad:ab:c1:3f:85:60:6d:e5:
75:4a:60:31:83:02:65:b8:67:87:b2:f8:d9:b0:be:
56:16:7d:d2:eb:fb:37:35:38:fa:3a:46:e8:2a:df:
17:6b:38:3a:c7:e4:6a:f6:30:d9:00:aa:80:c9:13:
1f:5d:70:fa:f8:d4:fe:e4:6a:c0:2b:4b:be:c7:95:
c2:8d:18:a9:1d:7b:29:8c:37:5d:f1:c2:86:41:f3:
af:52:ff:53:48:dc:8e:60:d6:39:eb:e4:8b:58:20:
67:bf:20:b8:6c:bf:a3:dd:87:b2:e5:49:11:f2:92:
fb:01:4f:dc:b8:ef:ed:77:a5:a6:1d:90:d4:0b:37:
74:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:22:25:D1:00:20:3A:22:20:2C:F1:EB:9D:E9:E1:06:69:74:5C:CE
X509v3 Authority Key Identifier:
keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/6SIl0QAgOiIgLPHrnenhBml0XM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.237.0/24
Signature Algorithm: sha256WithRSAEncryption
87:bf:92:40:39:47:3d:ba:94:80:9e:45:74:61:c1:3d:65:30:
71:29:d6:3b:1a:9b:95:49:55:60:d4:5b:f5:33:57:a8:2b:40:
b8:38:0a:12:0f:e1:89:a0:70:37:9a:5c:9e:2e:a1:97:d1:4b:
a4:a1:fc:5b:d7:b9:41:37:d2:0c:b9:d1:5d:c4:25:59:6f:4f:
4b:87:51:a5:08:dc:67:41:5a:89:a0:2b:8b:e0:d2:13:02:36:
f3:96:68:2c:59:13:04:a7:ff:3b:fd:2d:cb:57:a2:66:5e:c6:
df:87:65:1b:8e:c9:08:c1:c0:cb:dc:a7:44:89:32:80:c4:69:
dc:28:47:de:06:1c:e5:fa:5f:61:d1:d6:ae:a8:e2:1b:52:6d:
8d:e3:7e:e6:8e:56:1f:68:54:c9:2b:eb:c7:d0:90:fe:6e:7c:
c9:b3:e1:80:28:42:16:ad:1e:72:65:63:cc:d0:f0:1b:7e:6c:
85:7a:f8:f4:02:26:39:97:8b:ad:26:5e:fd:a9:4a:10:92:6e:
7c:05:14:46:ff:0f:56:50:13:d5:b7:1b:25:5c:e5:bb:69:2f:
0b:f7:f5:08:7f:9f:9f:ec:59:3f:64:90:66:da:15:b9:9c:a7:
ed:39:21:39:ec:46:22:0f:95:f3:3a:46:12:17:4a:91:62:42:
93:80:02:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:19 2024 by rpki-client on console-ams.rpki-client.org