Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/4hoW-LY-BT34KjIgf-T9Ng94Fn4.roa
File: 4hoW-LY-BT34KjIgf-T9Ng94Fn4.roa (raw, json)
Hash identifier: C5+qiWKBn4CeHDl0ZpCFazXc0IFYebtBqIKRZlLifjw=
Subject key identifier: E2:1A:16:F8:B6:3E:05:3D:F8:2A:32:20:7F:E4:FD:36:0F:78:16:7E
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 018F19CF1707E49A26AE40C16C85809205AD
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/4hoW-LY-BT34KjIgf-T9Ng94Fn4.roa
Signing time: Fri 26 Apr 2024 09:49:13 +0000
ROA not before: Fri 26 Apr 2024 09:49:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 185.148.68.0/24 maxlen: 24
185.148.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 05:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:cf:17:07:e4:9a:26:ae:40:c1:6c:85:80:92:05:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Apr 26 09:49:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e21a16f8b63e053df82a32207fe4fd360f78167e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:f8:e2:55:17:cb:78:67:d5:4f:65:68:bf:
86:18:ed:c9:21:f7:42:1c:2b:4d:c0:9f:e1:35:a0:
d9:ed:40:20:c3:23:e1:b6:8b:74:c9:99:c3:de:fd:
1a:87:49:5b:fd:62:01:3a:bf:e5:da:ab:ac:85:da:
d7:91:0a:81:a7:d2:f1:26:5a:a1:35:af:2c:cb:63:
a8:ce:bd:0b:69:89:d9:50:00:f8:dc:64:01:cd:95:
d6:45:cb:71:14:d8:6a:0d:e6:52:13:e0:e6:14:f8:
42:dd:02:d7:5e:8b:db:7e:9c:9f:44:42:f9:cf:bc:
e7:41:a5:3b:f8:fb:0c:01:b1:b8:7a:de:c4:fb:16:
0c:12:eb:2b:85:f4:85:2f:9f:8d:92:71:b4:64:ab:
5c:54:ad:d1:f8:2e:a5:e0:52:8e:60:b7:99:7f:bc:
bc:10:64:e8:55:07:da:1c:c1:ae:ce:77:31:92:7a:
92:42:b9:36:48:8f:5d:2c:7b:6d:e0:e6:2e:b7:56:
a4:e6:1f:c9:54:fe:1d:66:20:30:57:80:c8:cc:df:
1f:6f:90:11:92:c1:fe:36:6a:f9:60:b1:45:70:aa:
25:c8:15:16:08:3e:d4:8d:cc:b2:f6:bc:6d:05:df:
2b:da:98:12:9a:16:b9:0b:b8:32:55:22:4c:a6:b2:
a8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1A:16:F8:B6:3E:05:3D:F8:2A:32:20:7F:E4:FD:36:0F:78:16:7E
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/4hoW-LY-BT34KjIgf-T9Ng94Fn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.68.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:16:34:66:a6:6a:3b:14:44:1f:73:ea:5d:3a:ab:e9:32:23:
cd:42:59:2c:52:d2:fa:84:e4:8d:e4:ac:bf:1b:65:69:71:9f:
b0:e8:85:a7:94:9b:91:49:28:ee:6c:6e:94:c1:ac:50:a0:54:
be:67:81:23:bf:e1:06:f0:02:0e:1a:49:70:64:f0:31:d3:b0:
d8:08:0f:60:a2:1e:e9:b7:03:bf:6e:31:56:a3:3c:da:86:e1:
73:fd:f4:64:e4:08:5f:5b:31:b9:07:7d:3c:bd:04:31:4b:60:
e6:8a:18:b7:57:01:18:9d:92:be:4d:56:6b:cb:75:f5:0f:3f:
d4:c3:ac:b1:14:44:25:95:b4:9b:04:1f:f0:3c:3a:cf:78:cd:
ef:59:24:e7:c3:f8:62:ee:59:df:8e:d3:9a:fd:f6:27:a8:44:
ab:38:ed:c3:e7:15:bc:41:b8:19:6f:94:12:54:62:75:91:a4:
f4:3b:2d:f8:54:d5:a4:52:1b:e3:7a:4f:5c:9a:be:61:82:11:
d3:b5:5f:a4:5d:eb:82:cb:a6:3b:ac:1b:67:03:09:68:97:f5:
42:ea:21:3a:62:5c:33:8d:5b:0e:62:97:f3:6c:4a:c0:0d:f6:
93:70:c2:a8:27:f9:3b:a9:1e:a1:07:9e:fe:b7:a0:b9:52:a6:
45:0a:11:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:37 2024 by rpki-client on console-fra.rpki-client.org