Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/AcWWGcBkvpsGsoKUWSoaaA_Ho84.roa
File: AcWWGcBkvpsGsoKUWSoaaA_Ho84.roa (raw, json)
Hash identifier: D+AXWvBo7QDBQPmE6uFQSvoC+msw5rWj5I1/pmx52zo=
Subject key identifier: 01:C5:96:19:C0:64:BE:9B:06:B2:82:94:59:2A:1A:68:0F:C7:A3:CE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 018CD1709FD4D1575BBAD32D48B57B89E884
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/AcWWGcBkvpsGsoKUWSoaaA_Ho84.roa
Signing time: Wed 03 Jan 2024 22:27:48 +0000
ROA not before: Wed 03 Jan 2024 22:27:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44547
IP address blocks: 185.136.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 18:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d1:70:9f:d4:d1:57:5b:ba:d3:2d:48:b5:7b:89:e8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Jan 3 22:27:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01c59619c064be9b06b28294592a1a680fc7a3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f0:a2:41:20:37:ee:1f:ad:11:4a:34:c9:c2:
fa:d4:de:0b:4b:29:a5:c7:a7:aa:a6:7b:d9:ff:be:
51:0c:a1:05:8d:35:79:8c:57:b8:3c:bd:70:43:d7:
83:1f:8c:0c:d2:c2:06:03:75:fe:e2:f1:af:04:ee:
9f:33:a6:1c:88:26:81:2e:59:80:18:b0:85:c9:ff:
46:78:0c:27:33:29:12:b2:46:54:c2:f6:21:fb:93:
26:c4:49:7a:f4:24:b4:2d:06:7c:53:56:7d:87:9d:
e4:8c:62:fb:4e:92:85:72:69:c4:c2:19:b8:df:11:
86:99:35:aa:17:cc:85:9a:e5:a3:73:9f:d4:50:f8:
f7:f7:63:3e:f6:8c:e3:b2:5b:e9:a7:0e:5a:de:55:
33:f8:e1:92:f1:46:c1:73:da:e4:c3:57:8a:b5:35:
6a:f6:1b:0a:22:b1:15:52:70:3b:03:f5:79:aa:22:
aa:0e:bb:66:55:83:60:50:7a:d1:00:37:d3:c1:a4:
bf:46:7d:58:2d:c9:1b:cc:4e:a4:ec:69:e8:2e:28:
f4:fc:cd:bf:9e:44:75:f9:e5:16:be:b9:56:dd:16:
7b:9d:24:e1:1f:6e:c4:cf:3d:53:ba:33:9c:0b:de:
66:bd:9d:4b:52:88:71:15:0a:f5:c7:e4:6e:e1:b3:
3e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C5:96:19:C0:64:BE:9B:06:B2:82:94:59:2A:1A:68:0F:C7:A3:CE
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/AcWWGcBkvpsGsoKUWSoaaA_Ho84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.206.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:17:96:2f:25:4e:12:b7:57:94:d8:ab:1c:e1:89:1f:9b:b4:
97:72:7a:15:05:8b:8c:2f:55:11:9f:ad:7c:76:11:63:c6:ff:
0e:b4:cd:37:a6:bd:c5:5e:b4:e9:ad:15:d6:78:0e:20:aa:c0:
a6:a2:e5:8b:1f:2d:4b:12:9f:6c:49:9c:b8:57:e0:77:52:82:
e9:b9:a0:47:7c:46:9b:d1:a7:d6:e5:32:2c:82:c3:a2:3f:21:
70:44:14:e0:91:17:98:87:f5:20:d3:78:23:e1:81:a2:e5:aa:
10:cc:c4:61:96:98:b0:09:ed:9b:ef:0e:fd:23:60:27:d3:9f:
e6:7b:83:2c:38:08:ea:33:f2:07:84:a6:1c:97:94:59:9f:02:
31:62:35:54:d9:8b:9a:2d:4b:2d:33:47:88:0b:0b:6a:d6:ea:
96:35:75:4e:c1:b7:1f:e7:d3:15:54:d4:7c:f7:cf:a3:0b:6c:
1f:83:72:04:38:3c:58:ae:cd:b6:35:5a:af:13:e5:6b:c9:cb:
e7:91:50:54:ed:cb:6f:0b:0a:82:92:00:e4:da:d1:b2:33:50:
58:22:d0:d0:09:6d:e1:b3:64:d9:00:90:ef:e0:c1:04:a8:e9:
85:bc:51:cc:34:a9:52:29:a1:ed:1c:80:4b:5b:05:cf:b5:87:
4b:6d:cc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 21:54:47 2024 by rpki-client on console-ams.rpki-client.org