Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/rgDNhqXttGa6VMkVrgysZEaWmsQ.roa
File: rgDNhqXttGa6VMkVrgysZEaWmsQ.roa (raw, json)
Hash identifier: xWr1QAF0ZvuN85jTUJRZEDYWlW/Vzgb8AXzV4itHK6s=
Subject key identifier: AE:00:CD:86:A5:ED:B4:66:BA:54:C9:15:AE:0C:AC:64:46:96:9A:C4
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 01856FA6FACC7464F3F472B20A28FC2D25BA
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/rgDNhqXttGa6VMkVrgysZEaWmsQ.roa
Signing time: Sun 01 Jan 2023 23:24:52 +0000
ROA not before: Sun 01 Jan 2023 23:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201713
IP address blocks: 185.233.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:fa:cc:74:64:f3:f4:72:b2:0a:28:fc:2d:25:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Jan 1 23:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae00cd86a5edb466ba54c915ae0cac6446969ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:21:d0:72:dc:1b:fe:54:98:2c:cf:18:9e:9d:
49:7d:ab:63:95:5f:08:0c:1c:a4:00:c1:f5:e7:0d:
63:34:0f:f8:da:d9:8f:d5:5c:ba:9b:3c:18:20:66:
fd:ee:d1:ac:61:d3:b8:ac:cd:3b:f3:55:6f:f4:29:
a5:52:d1:34:12:9f:55:76:b0:49:c0:35:51:6a:9c:
e9:7a:f8:35:1e:9a:16:d3:99:b5:0a:f6:dc:a5:5f:
da:46:eb:4d:c1:20:4f:6c:9e:dd:df:00:51:2e:e5:
69:01:8a:39:a6:f5:8f:08:a6:b2:7b:5a:cd:76:68:
dc:75:5d:6f:6c:55:2a:c5:6c:69:9b:a9:d7:e4:85:
ba:f3:18:5e:9b:3d:bc:2e:20:7e:dc:ff:85:4b:32:
80:08:06:99:b4:2d:74:21:2d:2a:b7:6b:46:95:81:
e6:95:8c:d4:5b:cb:e6:bb:81:aa:8d:cd:db:1e:12:
fc:16:f3:9e:c5:ef:dc:62:74:a6:8c:18:ae:9b:cf:
0c:7b:2c:67:67:c2:47:0f:11:d0:0b:a7:b2:98:96:
a3:7e:51:b0:50:ec:f7:85:d3:2b:b4:d8:29:15:b1:
73:a7:80:eb:3b:2f:be:9b:d4:d1:63:2b:83:c0:f9:
9c:71:4b:b3:e6:28:91:c4:5c:35:37:2d:b6:53:6d:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:00:CD:86:A5:ED:B4:66:BA:54:C9:15:AE:0C:AC:64:46:96:9A:C4
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/rgDNhqXttGa6VMkVrgysZEaWmsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.244.0/24
Signature Algorithm: sha256WithRSAEncryption
09:e9:86:33:b2:7f:68:36:66:e0:52:1a:a4:a3:dc:6a:d2:c8:
ad:a3:82:7e:12:07:1d:05:03:15:82:c9:4e:65:84:14:90:ca:
ec:e2:e4:2b:a1:32:ef:d3:46:3a:95:50:ef:93:01:ed:d4:4e:
82:a6:47:94:8e:9f:89:d4:68:29:cd:99:34:50:a9:c1:d5:2a:
e3:75:fa:b4:76:26:f7:00:33:6c:80:b2:a6:77:2c:4e:8e:4e:
0f:05:1e:d2:b1:ce:2c:65:41:15:73:67:3f:92:a2:ca:2f:a6:
8f:82:b7:cd:5d:0d:de:3b:b5:9e:55:e0:7c:e2:6c:1e:b0:d9:
97:8e:4c:40:4f:23:14:d5:c9:28:35:58:18:fd:66:75:14:55:
99:4c:82:d2:c2:c8:3c:03:ba:e7:cb:0e:ab:69:c5:92:2c:8e:
71:f8:dd:cb:4b:93:f0:14:52:db:99:0f:e6:3e:ab:75:bf:c8:
7f:9d:1d:3c:22:73:84:9d:a6:86:b0:05:a7:d7:a5:8d:a6:0d:
1d:2d:2c:88:b5:93:2f:a9:ff:5e:31:8b:e4:1c:8a:c3:25:21:
b8:44:f2:3e:9c:0f:4d:77:66:dd:8a:bf:f3:7a:3f:6e:1b:0b:
79:5e:8a:5f:8f:8d:b6:41:61:b9:03:bc:99:20:bf:81:92:75:
5a:bc:97:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:43 2024 by rpki-client on console-ams.rpki-client.org