Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/aiB9tqHoGYQHnJOqXXA-49TXsoI.roa
File: aiB9tqHoGYQHnJOqXXA-49TXsoI.roa (raw, json)
Hash identifier: tnsdcRYziOwU3WcAtFFQhJBVx75L5KGDPLjfCKRrLRs=
Subject key identifier: 6A:20:7D:B6:A1:E8:19:84:07:9C:93:AA:5D:70:3E:E3:D4:D7:B2:82
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 018FBDDBB26469669BBD8EBC3028E045ED79
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/aiB9tqHoGYQHnJOqXXA-49TXsoI.roa
Signing time: Tue 28 May 2024 06:20:42 +0000
ROA not before: Tue 28 May 2024 06:20:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.148.68.0/24 maxlen: 24
185.148.69.0/24 maxlen: 24
185.148.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jun 2024 05:51:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bd:db:b2:64:69:66:9b:bd:8e:bc:30:28:e0:45:ed:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: May 28 06:20:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a207db6a1e81984079c93aa5d703ee3d4d7b282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:29:dc:60:7d:18:04:68:cc:99:18:1a:35:bd:
5b:f5:af:4b:90:dd:c3:88:54:02:f3:22:2c:c6:f9:
07:0a:c7:c6:7a:46:8b:57:cd:f4:36:f9:30:03:9c:
e1:f5:d9:4c:04:f6:65:5e:64:b6:c6:c7:1f:10:14:
13:01:a6:20:7f:5f:03:28:9e:b8:d0:1a:96:27:76:
27:10:de:58:ad:56:8f:1d:90:d1:80:9f:cf:15:a7:
94:66:d3:8f:02:30:83:0e:eb:e2:a4:f8:25:3c:df:
66:76:a4:72:34:cc:7e:76:75:c3:fb:c0:c4:91:f2:
8d:6f:82:eb:fa:dc:fb:3b:66:93:fd:9a:5a:96:f8:
64:d3:ef:69:78:17:3d:3a:04:53:8b:9b:f4:26:ee:
44:cd:e2:3e:ea:2d:1f:59:ab:a0:d0:26:90:cf:16:
c1:35:19:42:c4:ee:da:58:44:27:c6:8c:b8:81:0c:
5c:a5:22:3e:11:7a:2f:3f:49:12:86:80:7a:6b:46:
a1:86:e6:d0:92:b5:53:8f:a5:14:41:90:3d:8e:4c:
ab:0b:d1:12:ac:eb:67:e2:9c:c0:1e:b7:13:dc:8f:
44:61:e5:ee:7c:3c:b4:fa:52:76:6b:8e:31:d2:75:
9d:c4:cd:aa:b9:f0:4b:be:d2:80:58:e4:0e:9e:06:
89:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:20:7D:B6:A1:E8:19:84:07:9C:93:AA:5D:70:3E:E3:D4:D7:B2:82
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/aiB9tqHoGYQHnJOqXXA-49TXsoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.68.0-185.148.70.255
Signature Algorithm: sha256WithRSAEncryption
65:24:cf:2c:9d:d1:1e:83:a4:fa:40:74:46:59:37:28:f1:93:
31:88:70:04:0a:cd:ea:6d:fa:5e:cc:46:6c:72:dd:04:f3:67:
97:e7:60:53:5d:9d:f3:78:ae:70:7a:73:db:0b:be:a8:87:cc:
a3:55:d7:60:45:90:37:b2:d1:b1:6d:45:6b:18:4f:fb:bd:50:
92:17:5a:81:95:35:66:45:c5:ab:38:ba:e0:98:2f:97:cf:45:
63:1d:6f:b3:b4:68:15:43:e1:11:ff:4b:f7:06:7b:a6:09:fe:
53:5e:10:93:c2:3b:92:94:87:03:e9:ad:94:a4:3c:14:93:cf:
5b:25:1c:72:a3:ec:85:bc:c2:b8:f6:fc:db:6a:ed:4b:cf:79:
f8:a5:2f:d3:de:e1:c9:e0:50:59:af:6b:b6:dc:cc:b6:6a:a5:
c5:37:56:de:ee:f1:9c:8c:a2:fc:2f:3b:b3:5e:a7:40:84:62:
c8:90:6d:54:8c:c8:db:83:ba:c5:aa:2e:3e:95:3c:c8:86:76:
4a:d3:f5:d6:5d:42:92:aa:43:b3:25:29:48:44:ff:2d:86:10:
4e:0d:d1:a1:93:43:5c:ee:da:d7:a7:e9:9e:8e:df:dd:99:ec:
47:34:d0:b6:91:b0:0f:76:5d:a0:10:2f:ee:fc:c1:5b:ea:b6:
44:1f:cc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:29 2024 by rpki-client on console-ams.rpki-client.org