Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/rkY1FsvNonfQxv2t5isLayhMQyY.roa
File: rkY1FsvNonfQxv2t5isLayhMQyY.roa (raw, json)
Hash identifier: SsdiJ9p1LT3/GuDBoR8+Bo33GHIS4hj+If4o7aFBzWg=
Subject key identifier: AE:46:35:16:CB:CD:A2:77:D0:C6:FD:AD:E6:2B:0B:6B:28:4C:43:26
Certificate issuer: /CN=7e058377510a3a9245ce72cbe88e0efa19719204
Certificate serial: 01857139C2EE6168983BA7E44A55D3AE3C8E
Authority key identifier: 7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/rkY1FsvNonfQxv2t5isLayhMQyY.roa
Signing time: Mon 02 Jan 2023 06:44:48 +0000
ROA not before: Mon 02 Jan 2023 06:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42468
IP address blocks: 185.83.211.0/24 maxlen: 24
185.83.208.0/24 maxlen: 24
185.83.209.0/24 maxlen: 24
185.83.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:c2:ee:61:68:98:3b:a7:e4:4a:55:d3:ae:3c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e058377510a3a9245ce72cbe88e0efa19719204
Validity
Not Before: Jan 2 06:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae463516cbcda277d0c6fdade62b0b6b284c4326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:16:fd:4d:12:4a:60:8e:ef:0c:d7:44:cc:1b:
6c:3f:8b:e3:85:7a:2d:70:ab:ee:f2:2e:3b:38:53:
5a:0f:37:fe:bc:b7:5f:e0:ee:64:ab:ab:ec:cd:b8:
b4:51:a0:91:65:cd:f0:8b:c8:26:52:6e:89:ee:00:
39:3e:ea:68:c3:86:36:45:2e:12:a4:2e:73:23:45:
2d:06:b8:6e:10:02:43:ce:10:cc:4c:1e:3a:47:eb:
51:e8:27:b3:7f:0f:29:5f:e5:e7:3e:d4:be:09:60:
85:a1:34:09:d2:cc:00:e6:f0:ea:90:14:f7:c6:d9:
e5:40:94:7e:64:c7:c5:17:31:97:24:05:b4:ac:f0:
68:01:dc:6d:dc:b5:d1:4a:47:49:96:41:8d:fd:b5:
d2:8e:1b:da:b1:9e:f5:8e:0c:c4:2f:49:96:d1:bd:
2c:91:ed:6a:e3:4c:ab:c4:cc:f4:88:35:6f:f1:b7:
01:3e:d2:59:1f:0c:d2:b7:43:0b:6c:9f:8e:a8:fc:
e7:4e:13:69:cc:17:0d:3e:48:3c:a2:8e:40:7a:6d:
3d:bd:7a:4a:24:a1:82:aa:bb:82:07:f9:ad:ad:8a:
aa:1e:d0:8f:69:70:da:63:fa:55:ac:82:16:8c:e6:
79:9d:06:63:bc:22:a1:3e:a7:34:41:a9:7c:c7:fe:
56:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:46:35:16:CB:CD:A2:77:D0:C6:FD:AD:E6:2B:0B:6B:28:4C:43:26
X509v3 Authority Key Identifier:
keyid:7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/rkY1FsvNonfQxv2t5isLayhMQyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.208.0/22
Signature Algorithm: sha256WithRSAEncryption
45:3d:69:bc:0b:b8:0d:36:21:0b:d2:6e:f0:de:de:06:b6:65:
88:97:db:dc:33:2b:c4:39:b7:ff:34:62:70:1b:3f:db:8c:25:
c2:88:c8:ba:e5:f1:e7:db:69:c7:a2:b7:e6:a5:6b:c7:62:aa:
8c:3b:79:96:f7:f2:3a:bc:4e:4d:ca:df:9a:de:71:74:df:76:
d5:27:f0:0d:ef:19:a8:62:51:f5:56:43:43:c6:62:53:f2:ae:
c1:dc:04:02:88:c2:58:90:77:07:c9:7c:3d:c0:a2:0d:0b:26:
8a:84:b1:51:53:3b:eb:2e:31:56:6c:94:80:13:b6:f1:89:6f:
83:7a:ab:68:a7:dc:79:6d:1f:68:ba:d9:7b:76:16:17:3c:93:
2c:bd:26:0a:7a:5c:8a:70:67:65:1f:31:45:e8:47:08:66:3b:
28:39:17:c0:7f:7e:bc:f3:2c:4c:13:63:14:6d:e5:71:c1:ab:
a8:28:5c:bd:34:cf:b7:b3:6d:22:ad:76:64:fa:a0:2b:1c:1e:
5a:dc:70:2c:48:a4:a3:ca:5c:ae:63:47:d5:aa:9a:f0:4a:3d:
16:a8:89:2e:35:88:5d:c0:e1:2d:f9:23:37:16:30:4d:56:80:
2e:46:9e:1f:54:4b:53:ea:7f:d2:4f:c5:8c:bc:6d:af:d6:ba:
b0:f4:2e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:27 2024 by rpki-client on console-fra.rpki-client.org