Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/BdA_9rG5aUMSx0nQ1hrh7-ucqjQ.roa
File: BdA_9rG5aUMSx0nQ1hrh7-ucqjQ.roa (raw, json)
Hash identifier: uu+7aEw7zYba3SfMCyj+0nuUC/NgKW8zKbDSlboCpHY=
Subject key identifier: 05:D0:3F:F6:B1:B9:69:43:12:C7:49:D0:D6:1A:E1:EF:EB:9C:AA:34
Certificate issuer: /CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Certificate serial: 018921210598B2EEA771E00EF0E0DD0A7D92
Authority key identifier: 9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/BdA_9rG5aUMSx0nQ1hrh7-ucqjQ.roa
Signing time: Tue 04 Jul 2023 13:39:19 +0000
ROA not before: Tue 04 Jul 2023 13:39:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206406
IP address blocks: 185.187.95.0/24 maxlen: 24
185.187.92.0/24 maxlen: 24
185.187.94.0/24 maxlen: 24
185.187.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:21:05:98:b2:ee:a7:71:e0:0e:f0:e0:dd:0a:7d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Validity
Not Before: Jul 4 13:39:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05d03ff6b1b9694312c749d0d61ae1efeb9caa34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:73:e4:b1:9f:b4:23:a4:a1:1b:92:b9:6a:c6:
1f:f6:99:e5:b6:68:df:0d:0c:f7:da:50:c2:a7:a5:
e1:ed:24:cc:e5:b5:c6:5f:a5:2f:96:48:07:dd:d0:
1b:40:d0:80:22:8e:44:64:34:28:43:d6:d5:0c:30:
0c:ae:4c:7f:9b:30:b8:cc:17:1a:16:30:3c:b1:c5:
6e:e5:08:e1:e7:55:78:08:15:8b:e7:4f:97:12:6f:
88:0c:b8:6a:4d:bf:e2:4d:16:65:8b:a2:bc:a5:1f:
84:0c:7c:2d:4b:7d:23:cc:de:f8:c5:f5:8a:18:bd:
76:60:4a:49:28:16:60:2e:5a:a2:ec:ad:63:55:39:
a6:12:67:2c:82:e9:99:e6:2b:35:80:f9:b8:d6:4e:
a9:30:6d:dd:70:66:9b:52:76:23:08:e3:56:78:2f:
33:98:2f:ce:c9:5f:6c:63:c6:8b:67:d8:91:50:21:
67:04:fa:61:0b:8e:b3:fc:1f:28:24:2f:e4:fa:ed:
ae:48:9f:56:93:a0:fe:6d:2b:9a:9b:de:9b:2d:7b:
92:77:46:8e:67:16:f2:61:32:8d:28:d8:c9:5f:b0:
e0:cf:e7:d6:8c:c0:1c:79:de:8d:8e:b8:fe:7f:00:
20:7f:64:0d:c9:8d:3c:50:85:f8:12:26:c4:b1:c6:
9a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D0:3F:F6:B1:B9:69:43:12:C7:49:D0:D6:1A:E1:EF:EB:9C:AA:34
X509v3 Authority Key Identifier:
keyid:9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/BdA_9rG5aUMSx0nQ1hrh7-ucqjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.92.0/22
Signature Algorithm: sha256WithRSAEncryption
76:65:0c:a1:fb:e6:ec:f8:1e:4a:09:7b:97:11:fb:61:27:8d:
e9:77:ba:b0:83:7c:42:dd:98:00:eb:d2:19:29:22:2d:57:56:
51:d6:72:50:b3:2c:ab:3b:e2:10:fc:73:3a:93:b4:28:2f:8a:
36:49:35:27:86:29:35:9b:5b:d1:af:ea:6e:16:37:11:ac:71:
e2:3c:bb:db:2b:69:a4:ea:dd:9b:9a:33:80:0f:5c:fc:9e:1e:
49:6f:6c:63:9a:ac:bc:29:b0:ce:4a:5f:d4:d6:76:fc:a5:e8:
e0:65:c1:cd:87:4d:1a:fb:47:d7:f1:97:17:5c:fe:e9:7a:5a:
d0:c8:ed:20:e6:0f:27:41:7f:32:b3:06:b6:18:0e:3f:d4:05:
6f:47:66:a8:b2:de:fa:5d:98:77:41:5f:32:0f:72:e6:4e:23:
23:91:38:55:b8:0d:f0:33:f9:cb:34:5b:8a:a9:d3:f4:51:72:
a7:b2:26:7a:77:37:ae:20:cd:c5:54:5c:23:12:5b:6d:c8:e4:
0a:ab:c9:6d:dc:e2:46:d6:d4:1b:84:3a:07:65:45:64:89:74:
d9:c7:c1:db:3a:ad:66:2d:0d:7f:91:fb:f6:25:73:22:bf:fa:
02:2a:c3:6c:ee:52:04:2f:49:65:34:46:12:54:a3:ea:04:ce:
0c:8e:4c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:06 2024 by rpki-client on console-ams.rpki-client.org