Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/HKjr2S5s0AjFI4XzoArAjQq-1ms.roa
File: HKjr2S5s0AjFI4XzoArAjQq-1ms.roa (raw, json)
Hash identifier: KczBtKsMjyyvOA8wz6MAfO1pfzCw2OTqOsZi6BH6Gto=
Subject key identifier: 1C:A8:EB:D9:2E:6C:D0:08:C5:23:85:F3:A0:0A:C0:8D:0A:BE:D6:6B
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 01856C25EDB96612B38C9D0F21D9410E9FF0
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/HKjr2S5s0AjFI4XzoArAjQq-1ms.roa
Signing time: Sun 01 Jan 2023 07:05:02 +0000
ROA not before: Sun 01 Jan 2023 07:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210122
IP address blocks: 185.39.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:ed:b9:66:12:b3:8c:9d:0f:21:d9:41:0e:9f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Jan 1 07:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ca8ebd92e6cd008c52385f3a00ac08d0abed66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fc:d2:c5:fe:32:13:a2:07:88:a8:d6:90:86:
ff:3b:e2:1e:96:b6:33:79:fd:e2:cd:86:77:54:4e:
59:af:ea:99:df:12:ac:8b:58:3b:00:f3:c8:d9:7f:
8f:54:01:bd:bb:2c:26:da:67:e6:1f:7f:6c:32:31:
65:cc:66:7b:5c:51:7c:c4:50:ba:35:66:4a:c4:02:
68:77:af:45:cd:8d:bd:90:5c:5c:f0:9c:12:79:bf:
db:10:5f:51:5a:d6:73:d3:5d:0b:3c:38:98:e4:c0:
aa:00:17:3a:1c:3a:cb:7f:6c:04:2e:8f:e8:8e:87:
df:9e:6d:f5:0d:4d:44:ba:e5:80:a5:80:e1:69:9f:
79:b9:50:60:16:01:bb:72:98:2b:6a:44:e7:5d:59:
be:fa:47:64:ce:97:5d:3d:9f:28:34:ec:9b:65:6c:
f4:8b:ff:8d:21:b0:43:de:8e:3e:70:80:7e:ba:fd:
2e:06:02:88:f4:2f:ca:c3:46:b0:d6:11:aa:19:93:
f0:ec:44:a0:75:0c:18:1f:22:b3:85:a8:33:e6:db:
1c:23:bd:6c:b2:be:ce:d5:9c:87:96:55:28:d2:46:
31:c4:98:a2:3e:b5:db:ac:9c:d1:a9:e3:89:61:bb:
8d:9b:e2:0d:b7:9e:02:d6:7b:d5:ed:10:ad:bc:78:
7b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A8:EB:D9:2E:6C:D0:08:C5:23:85:F3:A0:0A:C0:8D:0A:BE:D6:6B
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/HKjr2S5s0AjFI4XzoArAjQq-1ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.50.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:5e:e2:8a:90:0d:ab:b5:ca:65:d6:ed:ab:6b:f2:5d:6c:43:
c6:b2:60:c4:56:3d:e3:55:cf:77:29:d9:6e:74:3b:b5:7a:b6:
3c:64:ba:af:d1:22:90:19:b0:1c:cb:67:8f:89:6d:38:6a:b3:
2c:d9:77:31:ad:a0:1f:64:b9:63:e2:d1:89:17:3f:c2:ea:d3:
16:02:7a:f6:e0:ca:ba:20:f9:1b:2d:8a:9a:e6:75:92:98:9a:
3f:9f:3a:4d:0b:f8:d0:8b:f6:61:51:d1:95:d9:c8:ad:fd:30:
ed:8d:f3:33:80:31:83:27:ce:eb:df:ae:9e:3e:0f:69:f2:f7:
1a:87:ab:02:5a:c9:e7:aa:fd:2a:ac:8e:b3:a4:13:3b:2c:b3:
0b:6d:6d:56:66:8d:a3:c7:54:42:32:67:23:93:64:fc:e3:83:
20:e8:54:45:e7:83:3f:c8:89:ef:0a:26:1f:9c:5e:15:10:a4:
75:aa:c9:7e:9a:9c:b2:ff:ac:9b:f0:c4:92:9e:9b:5a:55:4b:
b9:b8:db:d6:d5:03:1f:17:40:65:8f:e7:7c:e0:12:7f:21:dd:
41:a1:57:63:7b:db:93:9d:c0:90:d0:a6:c5:ce:7c:66:75:7a:
32:d4:d5:8f:3e:56:6f:87:61:09:65:e0:5c:49:e1:8f:d3:b6:
7a:fb:29:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:07 2024 by rpki-client on console-ams.rpki-client.org