Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/CEYPuEQOTkc_hjGJoLc7glVAL0E.roa
File: CEYPuEQOTkc_hjGJoLc7glVAL0E.roa (raw, json)
Hash identifier: rEdNshanoSCWQHxEcVhLH/Quxks6FhwDyKCCXoSEAJs=
Subject key identifier: 08:46:0F:B8:44:0E:4E:47:3F:86:31:89:A0:B7:3B:82:55:40:2F:41
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 019306E835126D1509C620188A4A06ABD667
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/CEYPuEQOTkc_hjGJoLc7glVAL0E.roa
Signing time: Thu 07 Nov 2024 13:55:01 +0000
ROA not before: Thu 07 Nov 2024 13:55:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 185.126.158.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 17:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:06:e8:35:12:6d:15:09:c6:20:18:8a:4a:06:ab:d6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Nov 7 13:55:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08460fb8440e4e473f863189a0b73b8255402f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ca:a4:97:f8:b9:7f:de:92:20:ad:a1:10:0d:
34:07:7b:0c:6d:76:b4:2e:de:7f:ec:44:bf:d5:29:
77:cb:5d:9e:d3:e2:02:23:91:d3:14:a2:76:21:8b:
81:57:ad:04:cc:eb:8e:98:b9:1c:c3:d2:07:67:b4:
f4:d3:d9:21:37:9a:f3:b7:80:1d:3f:d6:f2:a0:f3:
ff:1c:9e:6e:b6:43:e8:b4:f3:79:a8:ff:c7:e5:cb:
a7:bc:dd:27:0c:6c:36:9a:0a:d0:c6:82:a9:dc:07:
f1:d7:f1:58:9f:bb:d0:8f:ef:5b:cd:94:c3:75:2d:
b3:10:58:77:cf:ab:e1:ac:8c:cb:74:6f:d5:11:16:
94:6b:d1:25:14:a0:cd:3e:0c:c1:bf:38:d7:01:81:
bf:8c:68:64:4b:e2:5e:16:23:06:7e:44:a9:f3:93:
af:69:4d:35:c8:9a:68:84:40:18:3a:16:cf:07:bd:
ce:19:f6:cd:72:c6:cb:04:1e:56:9b:31:a3:27:98:
72:fd:60:8e:72:23:53:07:07:df:35:a4:32:f5:ab:
71:93:d7:a2:32:dd:d7:48:f3:c1:52:71:98:b3:97:
8f:d0:94:fe:7a:e9:b1:7a:b7:08:08:87:79:59:f5:
ac:39:96:b3:39:76:c6:50:43:74:9d:9f:19:7f:b1:
6f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:46:0F:B8:44:0E:4E:47:3F:86:31:89:A0:B7:3B:82:55:40:2F:41
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/CEYPuEQOTkc_hjGJoLc7glVAL0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.158.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:ca:f8:c5:3b:fd:8a:31:15:e8:68:9e:19:97:3c:53:24:81:
2a:97:8f:5d:6a:8c:f5:2d:94:63:b5:40:46:86:eb:88:15:03:
8e:61:51:17:be:ea:55:bb:56:3d:72:08:ec:19:b9:44:36:d8:
92:52:d6:da:81:61:6c:da:f9:1f:3a:52:54:48:be:c4:7b:97:
2f:af:9d:7b:9f:9b:8c:0b:05:26:b3:f0:4c:5d:aa:fc:33:d0:
3e:0e:ae:19:8d:73:e8:18:0c:2f:f2:1f:9e:67:1d:3c:a6:6f:
54:1e:22:1d:4a:99:e8:88:e6:b4:d7:be:25:95:84:25:5e:9f:
85:4f:31:05:fa:cb:ab:64:9c:dd:7c:c7:52:38:6d:26:f3:67:
bd:50:d2:be:b7:2c:69:08:2a:a3:ba:94:c2:4e:96:8c:33:e2:
c9:d8:29:3d:e2:b8:8a:a6:c3:7a:6d:3a:52:f2:9f:e8:21:fc:
65:b8:a0:c6:ab:eb:10:31:ba:95:58:02:ec:43:82:9f:7d:92:
78:27:60:e8:8d:8f:86:00:8e:b0:a5:9c:2a:c1:c7:81:9e:23:
16:78:9b:ba:12:c1:b1:a9:e8:c1:11:df:37:c6:9f:b9:bd:22:
35:47:3a:61:50:6f:68:43:62:3f:5d:d7:31:e2:1d:25:7c:fb:
ba:29:8a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 19:59:58 2024 by rpki-client on console-ams.rpki-client.org