Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/i23g1S2x9WCm5euD3PgQYU1c2uE.roa
File: i23g1S2x9WCm5euD3PgQYU1c2uE.roa (raw, json)
Hash identifier: vskt/4ZxWnFGNjV7+7/KIJuvY0BjDpJojiuNr31dZTU=
Subject key identifier: 8B:6D:E0:D5:2D:B1:F5:60:A6:E5:EB:83:DC:F8:10:61:4D:5C:DA:E1
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 018A3D4495D905356EA3F79F5327F92A1780
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/i23g1S2x9WCm5euD3PgQYU1c2uE.roa
Signing time: Mon 28 Aug 2023 17:50:19 +0000
ROA not before: Mon 28 Aug 2023 17:50:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5065
IP address blocks: 185.126.158.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 11:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3d:44:95:d9:05:35:6e:a3:f7:9f:53:27:f9:2a:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Aug 28 17:50:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b6de0d52db1f560a6e5eb83dcf810614d5cdae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:dd:ad:25:09:9a:a2:82:d1:8c:a6:ca:e7:9a:
69:50:64:31:25:97:e3:7d:22:df:80:d3:b8:ab:86:
1d:9c:83:ab:22:d2:1c:8d:d6:42:fc:36:03:b0:8c:
a6:5b:83:75:7c:2b:40:b3:a2:9d:a5:73:f9:13:5a:
61:5e:5f:26:a2:a2:c4:21:ab:5b:50:56:91:66:05:
2d:1c:9f:64:a8:76:d7:d1:38:30:c6:59:fd:ca:97:
50:e0:25:e9:d9:ba:df:40:f0:42:9d:fa:67:77:48:
62:af:d0:3c:94:38:a7:c6:e6:e3:21:a0:18:07:26:
a4:c4:98:66:76:f1:e8:bd:df:cb:41:20:2a:c3:7c:
37:22:21:db:e8:1d:16:40:ce:c0:78:67:9e:36:10:
40:34:0e:60:ed:5f:c0:db:19:52:df:11:ea:8a:b5:
e2:c1:42:8d:5a:24:e0:b7:88:d5:9a:cb:f8:ef:d3:
49:97:1b:75:94:76:19:aa:b1:8c:8a:68:d6:0e:66:
d9:d1:7d:8d:60:8e:67:bb:08:f6:af:4c:4d:d9:8d:
3f:81:a5:e8:70:a3:17:aa:63:f7:6e:12:c8:9e:9d:
aa:6d:44:9e:b3:2e:4e:9a:c8:0e:12:a5:c7:92:28:
80:72:c1:5e:8d:c6:bd:47:44:f4:d8:88:bf:ca:b6:
55:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6D:E0:D5:2D:B1:F5:60:A6:E5:EB:83:DC:F8:10:61:4D:5C:DA:E1
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/i23g1S2x9WCm5euD3PgQYU1c2uE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.158.0/23
Signature Algorithm: sha256WithRSAEncryption
49:0e:4c:15:06:f0:71:c3:7a:27:02:1f:51:c9:ed:92:ea:50:
e8:83:0b:33:06:46:1e:a7:4e:c7:ac:e8:05:f4:cf:3d:1d:05:
5a:4b:6b:1f:b5:49:ba:fb:ab:ee:23:53:01:db:ef:a2:05:4d:
6c:c6:69:f9:1e:ae:cc:f4:8e:30:63:5a:32:8d:fb:c0:eb:85:
d9:58:0d:c1:44:65:e4:9f:c0:8f:00:2b:f3:91:02:ce:e1:36:
13:bb:eb:9d:f6:d9:f8:46:3c:ae:e8:9d:ca:4d:8f:47:e2:0c:
db:5c:11:74:74:2a:bf:cb:21:a5:3f:9f:3b:05:a5:b1:9e:e0:
76:07:30:51:47:a9:9a:bb:25:9f:dd:59:2c:33:d2:43:39:84:
25:64:6d:7f:41:49:6e:7b:3f:aa:90:59:9a:dc:79:df:63:33:
e9:56:c1:74:c7:b5:9d:c9:0d:85:37:a9:fc:37:34:f9:79:cb:
19:f4:cd:27:5b:69:63:a3:36:0e:62:86:24:af:a7:63:be:b3:
5f:9d:25:3a:09:07:ca:fd:34:a7:8a:24:f4:f4:13:fa:ca:88:
e8:0c:b2:db:af:eb:6e:c4:bd:1d:04:b2:5b:18:fc:f3:be:5c:
c9:90:90:35:a7:96:be:d5:34:85:42:49:fa:7c:9a:96:4f:e6:
10:97:45:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:38 2024 by rpki-client on console-ams.rpki-client.org