Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/8c0nXNDp5KnPNAMu9iFxxnnAnxA.roa
File: 8c0nXNDp5KnPNAMu9iFxxnnAnxA.roa (raw, json)
Hash identifier: T1KJbcQ8j/JTflFQxc6eXM/fx5w+JuL5XQPlTv2PlQ8=
Subject key identifier: F1:CD:27:5C:D0:E9:E4:A9:CF:34:03:2E:F6:21:71:C6:79:C0:9F:10
Certificate issuer: /CN=b754992ba488a872c89cbdf42ca4df895e609c53
Certificate serial: 018571B0BE62CA57C7D19F8020AAEEECDCCF
Authority key identifier: B7:54:99:2B:A4:88:A8:72:C8:9C:BD:F4:2C:A4:DF:89:5E:60:9C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SZK6SIqHLInL30LKTfiV5gnFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/8c0nXNDp5KnPNAMu9iFxxnnAnxA.roa
Signing time: Mon 02 Jan 2023 08:54:46 +0000
ROA not before: Mon 02 Jan 2023 08:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 185.130.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 May 2023 10:38:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:be:62:ca:57:c7:d1:9f:80:20:aa:ee:ec:dc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754992ba488a872c89cbdf42ca4df895e609c53
Validity
Not Before: Jan 2 08:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1cd275cd0e9e4a9cf34032ef62171c679c09f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b0:bf:1a:ab:04:c6:6b:b2:0f:ef:87:c7:97:
18:34:e9:71:fe:d9:e0:30:b3:24:7c:fe:43:18:7a:
e1:b8:c2:5d:b0:0b:be:1c:97:12:03:73:f8:cb:be:
d5:e5:93:c5:eb:21:db:64:b9:92:05:45:d9:20:6b:
1d:9f:f4:ee:57:12:00:49:8a:ad:b5:bf:f0:77:d6:
03:4a:5d:bd:03:a3:45:e9:54:ec:ad:1d:c8:cd:01:
0f:fe:eb:35:04:be:86:63:eb:94:cc:d0:f9:b7:2d:
f8:88:84:e2:14:a0:7e:dc:e7:80:9c:c8:27:d7:62:
61:33:df:0b:7b:38:bb:5a:0c:cb:6a:cf:eb:dd:73:
1a:fe:2d:80:2b:01:7b:15:07:73:66:52:17:a3:c4:
bc:1c:1b:38:c0:2f:fa:be:31:3f:55:cb:4b:ee:77:
43:9b:8a:b3:8c:23:4f:3e:c8:23:a5:7b:8d:54:1f:
ec:2c:1f:af:b8:59:a3:3c:04:dd:2f:e5:26:6c:47:
f8:26:61:3a:9d:4b:8f:d5:92:1e:27:f4:45:82:d5:
f6:d4:98:94:55:86:dd:bd:11:bd:07:40:53:d0:44:
92:bf:d5:67:36:ee:93:ec:df:26:9b:23:1f:17:8d:
e7:db:99:ce:2f:fb:ec:df:d3:70:62:aa:18:56:8c:
e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CD:27:5C:D0:E9:E4:A9:CF:34:03:2E:F6:21:71:C6:79:C0:9F:10
X509v3 Authority Key Identifier:
keyid:B7:54:99:2B:A4:88:A8:72:C8:9C:BD:F4:2C:A4:DF:89:5E:60:9C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SZK6SIqHLInL30LKTfiV5gnFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/8c0nXNDp5KnPNAMu9iFxxnnAnxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/t1SZK6SIqHLInL30LKTfiV5gnFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.29.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:95:2d:ea:62:24:e3:d9:31:b9:9a:14:f1:6f:df:66:2a:97:
95:50:71:d2:15:2a:0e:d8:c3:ea:25:57:88:2b:7b:cc:41:40:
5c:38:9f:4b:d5:c3:f6:94:01:34:30:96:25:bb:16:1c:9e:f0:
f8:92:81:42:ba:4d:3f:37:7c:fc:74:23:65:82:53:8d:ba:f7:
97:e0:a3:41:15:4f:02:7b:f4:89:85:0f:93:0d:04:6d:b2:7b:
a4:09:ef:99:36:95:65:b3:1e:ba:85:4c:e0:eb:95:36:c5:5b:
0e:97:ae:ea:65:3f:29:41:46:e7:4b:f4:9a:9d:c9:6d:7a:40:
8c:6d:55:8a:da:bb:03:d6:e2:a8:60:d5:95:87:8e:d0:72:38:
54:6a:27:af:e3:61:27:18:c9:75:05:71:dd:fb:91:22:e4:d3:
53:c3:34:8b:e0:56:6c:ea:ff:64:ca:b6:4b:3f:bf:38:c5:82:
a4:f0:ff:70:d6:5b:75:71:98:e8:ae:fa:69:d5:15:a8:60:8d:
88:e7:90:7b:7d:c9:e9:fd:15:f3:62:6d:8a:46:52:e3:0f:74:
90:6a:ff:4c:16:cd:ff:3c:7d:6e:6a:f2:57:87:24:10:a1:b1:
8e:ae:17:ed:20:80:4f:97:fa:91:ee:e1:54:8c:35:68:23:33:
87:31:92:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:01 2024 by rpki-client on console-fra.rpki-client.org