Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/jNFO4X1w4o5SRybKMQXi8jx7G2M.roa
File: jNFO4X1w4o5SRybKMQXi8jx7G2M.roa (raw, json)
Hash identifier: H/QY3tnn7V+H6+PhpNQk+QPq1cNOwTyJ9xGWWGjcKkg=
Subject key identifier: 8C:D1:4E:E1:7D:70:E2:8E:52:47:26:CA:31:05:E2:F2:3C:7B:1B:63
Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Certificate serial: 01856F4290FE43D2CB575BC4E2F382ED6918
Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/jNFO4X1w4o5SRybKMQXi8jx7G2M.roa
Signing time: Sun 01 Jan 2023 21:35:11 +0000
ROA not before: Sun 01 Jan 2023 21:35:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56423
IP address blocks: 185.15.6.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:90:fe:43:d2:cb:57:5b:c4:e2:f3:82:ed:69:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Validity
Not Before: Jan 1 21:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cd14ee17d70e28e524726ca3105e2f23c7b1b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:80:5b:27:42:57:36:85:0a:b4:7a:36:3a:d5:
86:bf:39:bd:da:4c:c4:e3:bb:30:cc:02:5a:0d:27:
d4:93:27:25:08:dc:18:69:fa:23:f5:8f:6d:93:3a:
bd:d3:b2:04:e4:03:cf:fb:48:c3:30:0a:52:3d:d4:
eb:15:f9:b2:0c:c3:99:88:41:f5:db:74:20:d6:66:
4a:0f:e6:89:1f:88:55:4e:be:33:c3:83:e2:d2:97:
10:6c:6d:1f:9f:d3:16:bf:e2:74:50:5e:93:9d:d3:
c9:34:82:98:4b:9c:3e:9e:b2:1e:00:61:75:f3:f8:
5f:6b:80:40:d0:55:12:c8:10:4e:92:88:5d:24:40:
b7:3a:eb:04:00:33:52:6d:69:df:c1:2c:d4:7d:4b:
c4:2c:f4:e9:89:f0:89:f7:66:d0:a5:a6:65:f9:3f:
c0:72:96:3f:95:81:53:1c:7a:62:b8:6c:36:8b:cd:
20:57:5e:b1:2b:8b:1e:64:75:1d:df:38:07:76:57:
07:b0:85:fc:02:f7:de:d1:c0:02:2c:79:79:e3:33:
09:c8:36:bc:22:b3:ca:33:e9:a2:26:68:dc:ac:b2:
e4:41:60:1b:d4:77:a2:f2:ef:b9:4f:c6:ea:52:d4:
93:59:a5:e3:20:28:87:06:1b:32:2f:fa:bc:22:2c:
e0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D1:4E:E1:7D:70:E2:8E:52:47:26:CA:31:05:E2:F2:3C:7B:1B:63
X509v3 Authority Key Identifier:
keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/jNFO4X1w4o5SRybKMQXi8jx7G2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.6.0/23
Signature Algorithm: sha256WithRSAEncryption
29:6a:5d:fd:86:2e:16:56:24:3a:ea:ca:b5:e6:8a:1d:13:f5:
20:89:3c:32:f4:47:59:0f:fa:2a:21:78:e3:4f:cf:51:6a:a0:
00:c4:5e:f1:77:ac:63:fc:49:c5:e4:d2:a9:5d:0a:7e:ac:3b:
d8:09:71:c6:29:3a:24:67:14:5c:96:5a:bf:05:5a:7a:83:68:
d6:91:f0:76:2a:bb:64:c4:52:10:1e:31:bf:5c:91:c8:ef:9e:
54:bd:d3:d4:fe:22:ec:08:dc:28:85:d3:0a:db:f8:b9:01:b7:
ba:d2:4d:c3:dc:ab:c4:ec:16:de:10:c6:02:7c:ca:36:07:d5:
a5:fc:82:97:48:7c:3c:e4:54:0f:e6:34:56:81:63:55:db:35:
28:fd:f2:b9:9f:b9:fb:13:ba:8c:72:d9:4e:d1:10:67:c0:71:
1f:ec:d2:df:40:ef:c1:ed:ed:67:59:e5:75:27:7f:a8:62:d4:
bd:14:bd:c2:49:e4:6b:b7:d3:d5:08:90:8f:2d:43:e8:9b:3c:
e0:75:54:73:ad:2b:8b:0d:65:32:86:73:19:a4:30:b7:83:59:
72:21:13:a0:ca:ea:22:54:fb:50:63:98:87:6c:f7:79:a4:a8:
05:77:8d:9c:94:de:46:f3:8c:5f:c0:2a:42:e0:ab:11:17:95:
42:ac:61:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:58 2024 by rpki-client on console-ams.rpki-client.org