Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/EX12TOrESnNAieOgjxG8G3_QNBU.roa
File: EX12TOrESnNAieOgjxG8G3_QNBU.roa (raw, json)
Hash identifier: cUY4+NmsywIjdi1jz3+GftRD17og4f127ToYenglwvU=
Subject key identifier: 11:7D:76:4C:EA:C4:4A:73:40:89:E3:A0:8F:11:BC:1B:7F:D0:34:15
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 01856CB86C7B92D82361D4D6B10A37C4ED94
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/EX12TOrESnNAieOgjxG8G3_QNBU.roa
Signing time: Sun 01 Jan 2023 09:45:03 +0000
ROA not before: Sun 01 Jan 2023 09:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201216
IP address blocks: 185.253.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:6c:7b:92:d8:23:61:d4:d6:b1:0a:37:c4:ed:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Jan 1 09:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=117d764ceac44a734089e3a08f11bc1b7fd03415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:66:ab:97:08:d1:fb:b2:5b:99:c3:28:07:f1:
9d:4e:8f:42:1a:b5:e5:44:96:ff:90:3c:0b:c0:42:
2e:83:bf:ff:3b:66:af:79:10:85:c6:29:6b:39:c7:
70:1e:28:13:88:16:d7:4a:ca:f4:04:76:91:0c:db:
bb:b4:43:40:68:4c:a3:13:51:38:0a:49:22:54:8d:
75:70:2e:a0:94:01:3a:bf:4b:b5:5d:ef:32:98:0b:
2d:60:0c:29:56:6d:75:85:85:97:37:8b:a7:32:8b:
5a:db:b8:bd:c4:32:44:6e:26:3c:3c:94:b4:f4:b2:
eb:09:17:5c:4b:b1:bb:6d:b3:4a:8b:da:23:73:d8:
6f:52:5f:96:09:42:09:fa:fb:3e:53:0c:61:38:66:
1f:cf:5a:da:e4:15:e6:81:72:12:be:68:a6:9e:5c:
57:44:58:c8:6f:89:d3:32:6c:15:22:8b:9a:87:7f:
ef:01:04:9b:a4:fc:87:97:2f:29:ed:eb:ac:b2:ca:
ce:f4:5e:81:fa:4a:8b:03:36:47:95:05:bf:f2:29:
09:6a:2b:04:11:bd:05:a9:7e:26:87:2c:aa:a7:b4:
43:dc:78:30:78:64:98:db:57:3a:8b:43:00:4e:a8:
be:3c:3a:e4:74:4f:51:5e:b9:6e:b1:76:25:87:f8:
6a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7D:76:4C:EA:C4:4A:73:40:89:E3:A0:8F:11:BC:1B:7F:D0:34:15
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/EX12TOrESnNAieOgjxG8G3_QNBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.108.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:99:52:32:8d:62:20:06:aa:10:d2:7e:fc:9c:16:0a:80:14:
cf:eb:79:cf:ad:1b:4d:37:29:78:1e:ec:a4:93:f2:96:11:c1:
e2:d9:b8:7c:12:a6:60:26:57:da:72:7f:56:40:b7:0f:a8:12:
4a:bc:58:4f:98:af:be:34:a4:90:1a:4b:38:d5:92:80:94:a3:
6b:37:8b:cf:0b:93:1b:ad:4e:3f:0c:0b:85:c4:52:cd:a0:51:
bf:f4:e1:f5:c1:04:d3:f2:72:d9:6c:5b:4b:fe:6a:9c:34:b8:
54:03:e0:ff:16:ea:12:77:35:ff:7d:be:2d:fa:1d:d5:cd:a2:
44:a9:2f:96:1f:cf:9f:8f:61:60:d4:69:9e:22:ce:a9:0f:ad:
ae:0b:6f:eb:f6:b0:0a:0d:83:e9:b9:cd:0d:f6:07:ad:1a:1a:
17:46:12:65:2e:29:54:20:a1:41:d1:38:91:59:13:31:d3:4b:
bf:fa:6d:96:4a:17:0d:c6:70:7a:03:47:4e:5c:7f:97:51:3b:
4f:17:10:77:f5:6c:b5:df:fd:fc:b7:9d:83:86:b1:b5:84:5e:
01:da:ba:ad:4d:7a:d7:c8:2d:b5:79:4d:d7:75:1b:47:4a:d7:
1f:36:26:1b:9c:74:95:28:73:1f:a8:57:93:40:0b:b7:8c:2c:
78:e9:19:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:13 2024 by rpki-client on console-ams.rpki-client.org