Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/iQk6AFRBx84hEQ6Cli_c2zhKKac.roa
File: iQk6AFRBx84hEQ6Cli_c2zhKKac.roa (raw, json)
Hash identifier: gAGXox1l0h+IlAjTtdFRGr7lw47rXZWmLxWKh8b3/H4=
Subject key identifier: 89:09:3A:00:54:41:C7:CE:21:11:0E:82:96:2F:DC:DB:38:4A:29:A7
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 0189E53E64C248361895A1CC7360C1271E09
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/iQk6AFRBx84hEQ6Cli_c2zhKKac.roa
Signing time: Fri 11 Aug 2023 15:36:58 +0000
ROA not before: Fri 11 Aug 2023 15:36:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 185.177.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e5:3e:64:c2:48:36:18:95:a1:cc:73:60:c1:27:1e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Aug 11 15:36:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89093a005441c7ce21110e82962fdcdb384a29a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e5:cf:54:6a:6f:76:52:4a:0d:d0:d6:48:17:
f2:b0:d6:13:07:90:45:7d:a0:b9:38:82:17:6d:92:
fc:62:39:e9:80:c7:da:e4:fc:f1:82:61:15:59:d9:
84:e1:4a:d1:1e:98:c4:bd:03:66:4b:b4:70:5c:c7:
67:72:6f:9e:be:14:85:6b:bf:3d:b7:57:72:f9:e3:
34:ae:9d:e3:c8:59:93:6c:17:ae:1b:a0:a0:b6:b2:
09:c8:a6:f7:99:66:b7:6a:52:ef:3e:8b:8c:6f:99:
aa:f3:59:ab:2a:c2:44:65:74:e5:42:89:57:0a:82:
07:27:be:29:9a:65:56:a9:8a:20:9f:6d:fb:65:2c:
de:5f:a3:8b:50:61:8f:23:51:d3:4e:74:82:14:d1:
07:61:e0:02:2b:55:fd:bf:c8:e7:fb:a0:4d:b7:48:
21:d2:37:63:96:50:51:60:bb:c3:5b:5d:ca:a1:ad:
74:c3:cf:20:45:cb:4a:92:22:18:31:e4:b9:c9:ae:
c2:bf:e7:9e:66:ad:d8:83:b1:64:28:7e:4a:60:54:
ac:93:fb:76:ec:f2:22:1e:c9:fb:06:95:dc:77:f7:
98:7f:01:d9:31:a5:21:b5:40:6a:bf:68:4c:22:61:
68:de:4c:26:c4:eb:fa:89:23:f0:24:83:0c:35:8f:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:09:3A:00:54:41:C7:CE:21:11:0E:82:96:2F:DC:DB:38:4A:29:A7
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/iQk6AFRBx84hEQ6Cli_c2zhKKac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.230.0/24
Signature Algorithm: sha256WithRSAEncryption
65:84:66:0e:28:34:de:7d:04:e6:15:f0:16:e3:49:25:14:f7:
2a:f9:f3:2a:0b:ad:d5:5d:64:e1:5f:88:a9:3f:ad:5d:a3:78:
e9:f2:2a:96:b7:2b:27:b5:8c:d6:8d:d9:4b:bf:16:86:24:48:
61:c7:ae:05:74:50:50:9e:80:82:a8:0b:61:d2:a6:9b:75:68:
b7:72:19:2e:fa:75:8a:de:f9:93:4b:bc:f6:c9:ac:4c:41:b8:
d2:0e:e9:ce:a4:8f:61:e4:29:fa:f1:98:fb:80:9a:9e:66:f1:
9f:0a:a7:87:81:91:7a:7c:e5:cb:65:4f:7a:80:4a:5e:4e:7a:
6d:3f:8b:27:30:df:9a:ad:3c:97:75:8c:e1:50:b8:dc:33:19:
00:c1:20:67:02:11:f1:17:9d:3a:4a:97:a3:14:34:bf:81:12:
18:c0:6b:ea:f7:ca:70:48:c0:c9:59:34:49:c9:d3:ed:e5:7c:
71:54:10:d8:9c:29:21:b2:f2:7c:2d:a6:f9:8d:d6:a7:d3:11:
47:94:cd:22:5d:34:53:ef:66:81:81:d9:e9:8c:6e:65:9f:90:
e5:16:0a:a4:2f:6f:79:a0:8c:c9:6a:7b:af:d0:40:77:a1:ec:
0e:69:d4:ea:d3:5c:17:3d:ff:48:b2:79:fe:6e:7e:63:30:9e:
ab:07:2a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:37 2024 by rpki-client on console-fra.rpki-client.org