Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/CgmxPWcKenj_CY5K8LEKHa16M2E.roa
File: CgmxPWcKenj_CY5K8LEKHa16M2E.roa (raw, json)
Hash identifier: dngBbmwTGSEUssc4IKZfWqsShT+QOj88VSpNvYeYVcU=
Subject key identifier: 0A:09:B1:3D:67:0A:7A:78:FF:09:8E:4A:F0:B1:0A:1D:AD:7A:33:61
Certificate issuer: /CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Certificate serial: 01856DA642DF76AAFB18F55A32FCDB3AE6BB
Authority key identifier: F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/CgmxPWcKenj_CY5K8LEKHa16M2E.roa
Signing time: Sun 01 Jan 2023 14:04:50 +0000
ROA not before: Sun 01 Jan 2023 14:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39307
IP address blocks: 185.210.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:a6:42:df:76:aa:fb:18:f5:5a:32:fc:db:3a:e6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Validity
Not Before: Jan 1 14:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a09b13d670a7a78ff098e4af0b10a1dad7a3361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c9:cd:6f:9a:a3:f8:3b:fe:be:6a:5e:64:0b:
7a:38:82:74:0b:a8:51:fc:fb:e7:ad:ce:63:25:5a:
f5:80:31:1b:8d:0d:e7:5c:a2:27:69:bc:e6:ce:3c:
ed:1b:90:cb:b4:6c:4e:5b:19:ca:4c:08:4e:00:8b:
be:34:e0:59:12:42:09:93:44:be:b0:9f:6a:44:a8:
f9:c0:9a:03:de:58:41:4e:53:dc:da:3f:69:77:ac:
fa:de:37:d9:25:39:7e:c8:0c:73:2b:1f:04:49:b1:
07:41:08:2a:e5:32:3e:8f:27:ed:3e:d4:0b:7f:83:
7d:af:d3:63:47:7f:2c:b9:86:e4:8c:8c:83:ce:01:
e8:f2:9e:15:72:16:fe:ad:4f:49:cf:87:1b:35:8a:
d0:0d:1a:28:b8:45:06:60:46:31:a7:0a:be:d8:3f:
77:c7:c9:93:d0:5a:e4:21:62:b3:df:63:7f:7f:d6:
98:08:c3:3c:dc:14:93:37:b9:1d:54:bc:43:89:ea:
52:13:db:14:59:30:2e:c3:39:f1:99:80:f6:96:64:
01:c0:21:4a:a4:89:97:d2:eb:ad:b8:50:ad:d8:fb:
e4:51:4c:56:4e:80:c3:16:31:a1:5b:7c:a1:14:11:
b5:57:98:22:26:74:80:43:77:9a:e5:74:c7:4d:76:
13:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:09:B1:3D:67:0A:7A:78:FF:09:8E:4A:F0:B1:0A:1D:AD:7A:33:61
X509v3 Authority Key Identifier:
keyid:F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/CgmxPWcKenj_CY5K8LEKHa16M2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.160.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:0e:7e:7e:6d:43:a4:2f:d1:23:f5:a8:aa:60:49:9f:1a:33:
cd:ff:92:d6:88:17:23:bf:ee:49:1d:e2:e7:c0:52:ae:68:33:
c3:66:e7:ab:52:3c:71:f7:8a:e7:a3:80:9c:af:75:57:e7:94:
c5:37:06:f3:7d:47:93:11:c3:c7:fe:fc:ae:e3:09:c0:b1:78:
30:ef:d6:1a:d7:9b:99:00:66:69:c0:97:c6:08:7d:43:5b:eb:
ea:eb:c0:0c:f0:07:88:c1:ea:64:53:f9:fd:66:54:9a:78:73:
0d:84:44:bc:48:29:58:8c:57:26:46:43:a9:24:dc:b3:5e:7f:
9c:28:ac:54:78:b4:dd:69:6d:ed:7c:23:b9:a3:92:23:7f:6f:
a1:84:1a:eb:ce:8b:90:19:a1:7e:14:6d:89:45:b8:47:2c:1b:
ba:79:ec:18:e1:ad:d8:0f:d1:dd:32:b8:8a:5c:bf:24:23:13:
b4:28:37:f9:66:12:4d:23:d2:ad:50:b8:a7:a8:c6:d6:1b:79:
ec:d3:67:bc:9f:fe:7b:9d:83:9c:86:0f:03:7a:aa:18:6b:80:
ab:e4:73:b9:d5:cf:d4:2f:04:79:18:f8:5d:57:4c:73:27:d2:
ef:b6:38:ef:5c:9b:7d:69:24:fb:6e:89:2e:66:f0:4b:bd:1f:
57:27:41:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:12 2024 by rpki-client on console-ams.rpki-client.org