Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/rsPSns41TUneL60Qdeu1qWsTLBw.roa
File: rsPSns41TUneL60Qdeu1qWsTLBw.roa (raw, json)
Hash identifier: N02EELki2+YfgkVbVl+XXiHzPW1QoqsATtDeGqYFpLo=
Subject key identifier: AE:C3:D2:9E:CE:35:4D:49:DE:2F:AD:10:75:EB:B5:A9:6B:13:2C:1C
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 018C8DCF3CFB0C769AAD99B275A2B7C53208
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/rsPSns41TUneL60Qdeu1qWsTLBw.roa
Signing time: Thu 21 Dec 2023 19:16:58 +0000
ROA not before: Thu 21 Dec 2023 19:16:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201838
IP address blocks: 185.240.24.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8d:cf:3c:fb:0c:76:9a:ad:99:b2:75:a2:b7:c5:32:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Dec 21 19:16:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aec3d29ece354d49de2fad1075ebb5a96b132c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:20:26:56:60:1b:36:4f:ba:d1:f5:de:9e:
6e:ca:e2:68:e2:a9:10:77:e6:cc:fd:7e:1f:58:41:
cb:bb:2a:bf:b6:e4:48:4e:6a:21:a6:2a:f7:89:a6:
aa:9f:7e:f7:28:7c:28:cf:71:98:9a:5b:ff:03:4a:
c1:4a:e9:62:c2:fe:be:a9:ee:ec:21:cf:2a:17:11:
10:2e:94:b7:67:b1:e6:d1:87:1e:b6:90:df:08:af:
70:2b:56:5c:4e:52:df:e3:10:5a:70:53:5a:48:36:
fe:e3:c9:79:1b:b9:26:e8:2b:bf:00:73:b3:f5:c6:
24:a1:71:10:a9:42:9c:f9:b0:4e:a8:1f:fb:d6:14:
35:f3:b5:01:93:c5:09:e8:e6:12:a4:30:44:47:31:
42:47:07:2e:03:3a:28:14:9d:aa:c4:97:92:ac:cd:
b6:2e:d8:66:af:0f:21:06:74:d5:19:34:bf:51:2e:
02:c6:6e:24:0f:0b:ee:d9:94:03:b3:c5:02:b2:19:
c0:6e:43:0a:4b:86:7a:ef:3e:f3:8d:50:e9:96:66:
4b:4e:f5:47:4e:d3:b6:00:da:2a:a4:a8:55:ac:e7:
58:ac:52:2b:8e:75:84:a0:48:d2:6b:f5:4d:64:e1:
d1:b6:74:1c:9b:83:9e:2e:0d:f9:c3:e0:56:da:e5:
f9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C3:D2:9E:CE:35:4D:49:DE:2F:AD:10:75:EB:B5:A9:6B:13:2C:1C
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/rsPSns41TUneL60Qdeu1qWsTLBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.24.0/22
Signature Algorithm: sha256WithRSAEncryption
38:c5:39:f9:80:12:36:ec:b5:b3:ba:db:8e:9c:55:04:3d:bf:
6e:f9:f5:20:6d:e8:18:ac:ee:41:fa:b3:e8:2c:54:a9:09:09:
ca:0d:85:35:76:84:2e:82:ed:81:13:cf:bf:7b:10:82:ad:08:
d2:01:8e:87:4e:3d:78:b9:e7:55:3a:55:ad:68:23:2e:32:0f:
88:fe:7e:ae:05:a4:4a:f9:7b:9c:9e:fb:5e:5b:71:f2:24:bc:
15:2f:0d:ef:be:46:4a:25:92:65:02:f4:f4:b4:59:90:9a:00:
db:98:a0:92:92:a4:3e:ec:fc:85:28:34:f5:26:51:24:8d:b0:
03:88:2f:16:94:86:4c:a1:c1:58:0d:8d:92:10:c8:e9:1e:05:
5e:c9:48:04:8f:e4:a5:a1:6a:04:57:ed:c9:c2:fc:46:60:e0:
1e:4a:22:11:a7:5a:0c:57:c7:7c:ea:3e:48:3a:45:3e:d5:04:
ab:05:69:f1:5a:31:a4:c5:82:29:e4:86:fa:9c:65:93:33:1b:
c7:e8:b7:07:00:3f:b5:b5:47:29:31:14:da:92:e1:a8:62:8a:
21:59:ce:87:90:62:bb:55:bb:0f:5c:1d:22:cc:5e:e0:b4:b8:
0a:a0:f6:7d:a2:3b:11:77:b1:9f:95:66:0f:4f:05:73:a8:b1:
10:73:7c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:46 2024 by rpki-client on console-ams.rpki-client.org