Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/9bQpYm9K_xFKROgHv7p6pLu4Dvo.roa
File: 9bQpYm9K_xFKROgHv7p6pLu4Dvo.roa (raw, json)
Hash identifier: 15KrNc9u1QVfv2VbvZrt53yQerWv1FMD9XmgJSZ/cXg=
Subject key identifier: F5:B4:29:62:6F:4A:FF:11:4A:44:E8:07:BF:BA:7A:A4:BB:B8:0E:FA
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 01856CCADE5CCB5BCE001BFEF41F7E221430
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/9bQpYm9K_xFKROgHv7p6pLu4Dvo.roa
Signing time: Sun 01 Jan 2023 10:05:12 +0000
ROA not before: Sun 01 Jan 2023 10:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198047
IP address blocks: 185.11.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:de:5c:cb:5b:ce:00:1b:fe:f4:1f:7e:22:14:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Jan 1 10:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5b429626f4aff114a44e807bfba7aa4bbb80efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cd:05:de:73:d8:e9:0b:b0:dd:af:a8:e6:c6:
4d:ed:48:dc:85:83:5d:7e:75:0f:18:8e:c1:5f:1c:
c9:d3:5d:d4:04:9d:ac:78:32:82:6f:c9:d5:19:e7:
b1:be:ca:ec:de:06:99:f1:5d:4b:39:6f:c9:79:89:
e2:be:88:a0:4c:48:83:d0:6a:79:a4:87:86:24:36:
d2:5f:dc:1a:ef:3f:b5:6f:9a:86:56:db:b4:62:bf:
a6:52:f0:cc:19:9d:5a:64:d6:d3:3b:31:73:42:8d:
9a:6d:b4:30:4a:4b:48:94:0a:53:7a:26:e0:78:35:
29:55:fd:92:bf:7b:13:e6:bc:e1:f2:f3:c9:88:b6:
11:85:30:52:88:f3:da:3a:07:d1:fc:8c:2a:cc:87:
ee:f7:64:9c:34:c8:f0:79:54:b0:e9:4d:75:a5:a3:
d5:a9:f0:6c:ea:2b:b4:8f:7e:29:f8:68:7f:c1:fb:
58:f6:9a:6f:2d:f6:2e:2d:4d:4c:f0:7e:da:56:2c:
ab:26:0a:54:a1:f0:41:da:5b:43:96:d0:87:4e:ee:
5a:45:e5:fe:65:dd:79:41:6d:8b:ec:26:cc:e7:ee:
d6:4b:9a:a5:ba:8e:ab:f6:37:69:85:8e:59:32:12:
ca:47:52:cb:bf:0a:b6:54:0c:c1:78:a5:b3:3c:6d:
d9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B4:29:62:6F:4A:FF:11:4A:44:E8:07:BF:BA:7A:A4:BB:B8:0E:FA
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/9bQpYm9K_xFKROgHv7p6pLu4Dvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.240.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:b5:be:1f:93:85:1d:22:f2:19:33:ef:72:5e:0f:3e:f8:4d:
7a:11:17:3f:0c:b9:3c:4d:19:58:97:40:25:cb:3b:07:c8:97:
95:c3:83:07:84:bd:f0:2c:9d:0b:5d:8c:ac:2a:97:c4:0d:96:
5e:33:d9:ab:0d:04:94:fb:4d:be:40:7a:f9:70:ed:2c:9a:4e:
7f:1c:59:09:ca:49:ae:96:62:15:3d:2e:4a:50:46:da:99:12:
74:49:51:44:1c:74:52:e1:2d:65:d6:24:7f:98:ef:d9:a6:a1:
74:54:13:d9:4d:72:a6:a8:8b:fe:be:75:2f:3c:05:6e:72:82:
63:58:5a:bd:c8:72:92:31:7b:8b:ed:1a:0b:a8:e7:1d:3f:a6:
c3:78:95:d7:33:4e:ea:7c:82:d6:8a:c5:5f:6c:66:6c:e4:7b:
e3:33:05:f7:b4:4a:ae:ea:52:71:b6:af:5f:1d:45:c9:4e:a9:
81:a9:d8:9e:9d:65:ec:bc:bb:ab:24:66:5c:95:e2:ea:db:58:
a3:59:87:ff:7b:de:38:57:23:6c:25:49:22:3f:bc:41:f6:5d:
d8:6c:bb:ca:75:fc:45:03:c7:0f:e5:87:40:35:bd:26:35:5f:
2b:09:53:b6:e9:cb:37:b2:1a:f8:7a:6e:9b:eb:17:7b:fd:ee:
0e:a3:7f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:38 2024 by rpki-client on console-ams.rpki-client.org