Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/KXCxa9NuMA9-j51xTGRt3fWqfF4.roa
File: KXCxa9NuMA9-j51xTGRt3fWqfF4.roa (raw, json)
Hash identifier: L+Hff9LqMzKrGqBhbWk+nLgG6axbx0I+krZBzvQRGms=
Subject key identifier: 29:70:B1:6B:D3:6E:30:0F:7E:8F:9D:71:4C:64:6D:DD:F5:AA:7C:5E
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 018779AAADE889B7E5532D6CF19CDF3686C4
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/KXCxa9NuMA9-j51xTGRt3fWqfF4.roa
Signing time: Thu 13 Apr 2023 08:10:41 +0000
ROA not before: Thu 13 Apr 2023 08:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 185.177.231.0/24 maxlen: 24
185.177.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jul 2023 11:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:aa:ad:e8:89:b7:e5:53:2d:6c:f1:9c:df:36:86:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Apr 13 08:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2970b16bd36e300f7e8f9d714c646dddf5aa7c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:12:b6:bb:76:34:91:dd:b3:c8:2d:a1:17:37:
b8:b5:3c:c9:61:52:2d:ff:6f:81:80:e3:69:63:5f:
ce:99:d1:77:52:1b:b6:e0:5c:21:fa:8b:74:e0:11:
cd:df:cb:70:46:3d:27:5b:2a:c4:ca:9b:03:2e:41:
4a:34:12:1e:48:7f:2e:5b:f0:5c:b9:b7:e4:77:88:
97:e1:96:a4:3e:be:f4:5e:4e:8f:c5:89:94:3e:70:
de:a9:99:27:eb:64:f3:a9:d2:85:a7:df:2e:e8:02:
64:df:c2:bc:a8:54:77:4d:a9:6f:37:7c:6e:18:a5:
cd:4b:b7:c9:00:35:b3:6b:bb:68:3b:ec:11:f8:da:
c9:40:66:f6:e0:6b:89:0d:af:f5:69:83:d8:0e:7f:
d1:0c:e2:d0:37:cd:19:56:63:c8:4f:7a:e4:ee:0b:
a4:48:bc:33:f4:05:17:fa:36:4a:81:f8:26:69:01:
f2:17:c4:43:af:b1:eb:75:13:be:18:b2:fa:fa:15:
e9:0f:b3:ea:d9:88:14:ba:11:70:dd:68:b9:47:33:
67:7e:bb:e3:74:61:29:6e:ee:54:b3:94:22:76:82:
0f:54:ba:67:18:c8:2c:6c:77:96:f6:ed:58:a3:86:
ca:39:53:79:9a:fd:f9:d0:73:09:e5:d3:06:44:0d:
18:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:70:B1:6B:D3:6E:30:0F:7E:8F:9D:71:4C:64:6D:DD:F5:AA:7C:5E
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/KXCxa9NuMA9-j51xTGRt3fWqfF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.230.0/23
Signature Algorithm: sha256WithRSAEncryption
71:3f:25:34:89:a2:f9:e3:9c:34:75:84:f7:b1:32:12:50:13:
f8:95:ed:22:86:c2:61:29:70:2e:46:8a:23:bf:1f:d0:70:5d:
3e:04:ec:f7:19:05:c9:61:80:83:29:fb:65:f0:13:17:8c:2c:
29:c4:00:34:5a:58:72:ec:e9:fd:6e:04:e5:08:fa:44:be:9f:
8b:26:d1:9e:6a:a0:71:26:42:72:ed:94:04:99:c7:c7:ab:bf:
d6:06:1b:51:96:5f:66:ba:34:12:96:0f:3f:5e:d7:7e:56:42:
ef:5d:cc:6b:c9:72:d5:23:f5:a3:ba:fd:a7:16:d6:77:05:56:
e8:f2:3d:81:50:22:49:87:58:dc:3f:68:33:3e:92:14:94:d1:
0b:1e:5b:26:e7:1a:5d:08:b5:8f:28:79:0f:42:d4:b0:82:d6:
4c:e5:19:65:49:f2:db:93:c3:5a:ea:d2:d9:a8:a8:f4:2e:c4:
4b:06:6e:85:4b:a6:8a:8b:0d:af:ca:59:4f:6b:99:25:3c:a6:
a1:3f:6f:9f:74:40:fd:24:58:88:cf:e4:c3:6c:a1:35:e5:c7:
60:3c:b6:af:35:d9:08:31:ad:69:b4:ef:88:c9:f9:95:3f:9d:
4d:ec:a2:c0:ad:11:98:ff:49:f8:a9:6a:8d:d8:83:29:dd:6c:
56:d2:df:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:30 2024 by rpki-client on console-ams.rpki-client.org