Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/3f26UptdtgT5GNDmbmHqBu3ueE0.roa
File: 3f26UptdtgT5GNDmbmHqBu3ueE0.roa (raw, json)
Hash identifier: xBwfloiNvBIj4QeJca749UWgkUiDkmeY0lE8fZMutjc=
Subject key identifier: DD:FD:BA:52:9B:5D:B6:04:F9:18:D0:E6:6E:61:EA:06:ED:EE:78:4D
Certificate issuer: /CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Certificate serial: 0187BE6E7055A73790105FA2E1D77633F1A7
Authority key identifier: 8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/3f26UptdtgT5GNDmbmHqBu3ueE0.roa
Signing time: Wed 26 Apr 2023 16:38:41 +0000
ROA not before: Wed 26 Apr 2023 16:38:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209399
IP address blocks: 185.11.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:be:6e:70:55:a7:37:90:10:5f:a2:e1:d7:76:33:f1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Validity
Not Before: Apr 26 16:38:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddfdba529b5db604f918d0e66e61ea06edee784d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:04:dc:dc:18:b3:40:f0:b5:3d:a2:04:1d:96:
7a:f4:f7:be:08:ae:ba:2d:ef:34:32:12:58:19:53:
fb:43:86:7b:a2:8f:41:24:b8:54:0f:07:ad:20:e9:
43:d0:23:36:14:77:ae:63:53:0b:a8:c4:f0:a0:b2:
6a:7e:16:75:36:d5:b8:de:ae:f6:dc:64:3a:68:c2:
96:1c:fc:b4:96:e9:e1:d3:de:64:88:c4:1f:19:0c:
5a:65:9f:38:94:37:95:58:9f:c3:fc:fe:28:25:7a:
32:cf:e7:51:4c:29:1a:9a:79:e1:9f:7f:0c:78:3d:
66:da:33:29:0d:5a:b5:2d:ce:05:cf:4a:ae:9e:b3:
dd:24:82:1d:21:e9:b2:bb:c6:c3:c1:c5:3b:e7:f5:
fa:11:56:f1:28:8f:7a:74:8a:5f:91:6d:3d:df:d4:
72:c2:dd:5a:e1:c6:96:bb:e8:58:ec:95:94:47:44:
a0:7a:fa:a6:40:50:ee:58:11:dd:ea:04:42:8f:b0:
ba:66:7a:f6:46:5d:c6:0d:a3:a5:2b:70:b6:27:0b:
c1:81:15:d7:bd:a6:e5:87:64:20:f1:41:05:a2:f1:
99:30:ec:42:ce:35:60:4a:83:05:ea:97:da:ee:8c:
2f:40:da:91:01:15:f2:c4:98:f0:49:d1:84:6a:7a:
a0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FD:BA:52:9B:5D:B6:04:F9:18:D0:E6:6E:61:EA:06:ED:EE:78:4D
X509v3 Authority Key Identifier:
keyid:8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/3f26UptdtgT5GNDmbmHqBu3ueE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.62.0/24
Signature Algorithm: sha256WithRSAEncryption
25:8f:a3:d2:50:c2:b7:17:89:7f:99:4a:06:ac:20:b7:74:a2:
25:19:93:9c:3c:e8:fa:1a:93:8b:b5:b6:60:7b:d4:c1:e9:39:
55:be:54:e3:45:6d:b6:40:b3:cc:16:c8:6b:8a:f5:b9:bb:3d:
8c:4a:f0:d6:11:eb:70:60:b9:c3:1d:de:d8:c4:ca:1d:03:28:
13:52:6e:c2:65:80:76:15:10:ce:e4:1d:c0:54:4c:62:1e:67:
2f:97:1c:8e:3f:01:c6:df:b7:a6:99:03:64:55:16:e9:86:3d:
97:57:b6:81:92:ca:9e:91:29:53:dd:ca:9a:09:c0:ec:57:e0:
35:e1:80:c9:10:14:7f:8c:52:66:e7:20:91:f7:f1:9a:82:c7:
b0:96:80:43:00:83:6f:cf:a5:31:70:18:b7:dc:02:46:f2:48:
7c:fc:67:de:5a:0e:55:e4:09:94:ee:ae:39:c2:b9:1e:53:bf:
b2:bc:d8:5e:68:0d:aa:dd:f1:2e:3f:b2:4f:b8:87:d1:18:70:
71:57:5a:5f:3e:ac:2f:17:a2:15:24:2f:70:fa:3e:b9:70:85:
4a:d7:ac:ba:f2:e0:8d:a6:70:81:c1:cb:34:59:ed:f8:7d:49:
e0:54:38:3a:29:3d:b7:66:35:ba:6e:de:48:dc:ba:a8:09:21:
32:36:aa:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:35 2024 by rpki-client on console-ams.rpki-client.org