Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/CHX3WjUQYmbYdG7eQS4WTxjRPdM.roa
File: CHX3WjUQYmbYdG7eQS4WTxjRPdM.roa (raw, json)
Hash identifier: 8HBRIr7QUtenzUyIEk8ziljPPIa77mRjzOGNNrw7m2k=
Subject key identifier: 08:75:F7:5A:35:10:62:66:D8:74:6E:DE:41:2E:16:4F:18:D1:3D:D3
Certificate issuer: /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial: 01857042854AF0E87AD872EBD16C13763A00
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/CHX3WjUQYmbYdG7eQS4WTxjRPdM.roa
Signing time: Mon 02 Jan 2023 02:14:45 +0000
ROA not before: Mon 02 Jan 2023 02:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49544
IP address blocks: 185.226.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:85:4a:f0:e8:7a:d8:72:eb:d1:6c:13:76:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Validity
Not Before: Jan 2 02:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0875f75a35106266d8746ede412e164f18d13dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:39:ac:1f:9f:4f:20:e8:8f:16:e1:75:03:
53:1b:d0:25:ab:0b:5f:52:d7:3d:18:9c:31:da:f4:
ca:67:1d:98:c6:45:02:7a:7c:8e:44:c8:11:7f:65:
35:07:8a:d4:a7:df:83:66:b9:88:61:f3:61:ee:7b:
7e:fd:6e:88:c7:08:26:01:dc:98:f4:ba:48:72:8c:
76:18:40:e9:38:8c:24:68:40:67:3e:64:04:8e:f5:
33:1e:6e:a3:98:c3:11:69:42:f2:52:09:6b:d5:4a:
d5:43:ce:65:43:1c:2e:e1:62:11:34:07:b2:33:f0:
15:9c:e6:74:8b:da:07:0c:f0:d0:ee:67:b7:21:4f:
74:f1:78:ee:7f:9f:8f:8c:b6:33:ad:76:09:ee:0c:
ae:4b:c4:7e:62:3f:78:1c:d0:f1:b7:a3:73:52:de:
08:5f:a4:9f:5c:43:db:8e:86:95:7c:77:b9:13:33:
d6:7a:78:32:d1:0d:9c:4a:e0:35:e6:74:fa:9b:c3:
38:7b:8c:8e:d9:db:09:2b:8d:1d:d2:fe:14:79:ea:
24:af:ae:47:cb:8f:22:54:46:7e:4c:34:b7:1f:f2:
e6:00:25:1a:0f:c6:56:9b:55:97:22:2f:d1:1d:44:
bc:0c:09:90:a2:b9:97:9e:8c:a7:a2:b5:8f:51:e8:
c4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:75:F7:5A:35:10:62:66:D8:74:6E:DE:41:2E:16:4F:18:D1:3D:D3
X509v3 Authority Key Identifier:
keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/CHX3WjUQYmbYdG7eQS4WTxjRPdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.138.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:bd:fe:40:01:1b:b1:60:a9:84:80:62:99:35:33:d3:2b:0f:
20:77:c1:9a:75:46:04:0a:d4:05:b3:c2:f2:7c:3c:c8:ab:a7:
e8:bc:55:7b:7c:3f:55:01:e7:b8:18:ca:45:34:11:e4:7a:a0:
35:ec:ca:ee:77:5e:28:d8:0c:1b:7b:e9:ac:e3:bc:89:5d:37:
36:68:16:b6:ee:21:11:9a:02:f4:d9:47:a1:a3:a7:f7:dd:77:
6e:40:72:cf:f6:46:e4:74:f3:a3:2f:e5:87:05:45:88:a5:2e:
34:be:26:4a:34:55:f4:ac:50:2e:d6:91:c4:31:16:24:61:6b:
77:ba:36:84:32:2c:b6:f6:32:97:1f:0a:0b:55:c7:91:85:8c:
df:9c:f0:69:58:d6:62:59:57:71:b8:70:fb:fd:07:37:37:7a:
a2:16:ae:de:5a:ca:77:5d:a8:08:c3:ba:ce:a7:d3:68:74:64:
f5:ea:31:ba:e4:91:95:96:bc:3a:32:9c:c3:7c:9f:da:64:bb:
02:82:5c:e8:68:22:e5:16:85:17:e5:3c:a9:01:51:0a:cc:2a:
46:5a:14:6f:47:62:61:13:12:07:ea:60:4a:bb:92:9d:d8:dc:
13:c1:b3:67:46:7c:a9:07:e5:fc:36:5d:b6:1c:07:86:f7:c0:
0c:7d:47:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:44 2024 by rpki-client on console-ams.rpki-client.org