Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/La2KMkriayPzp5HZexYF4OQObG8.roa
File: La2KMkriayPzp5HZexYF4OQObG8.roa (raw, json)
Hash identifier: lCrU2iaBjlQU5+VXWsaNE3qn7skmn7+L0inNitx1TjI=
Subject key identifier: 2D:AD:8A:32:4A:E2:6B:23:F3:A7:91:D9:7B:16:05:E0:E4:0E:6C:6F
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018CC8DE1AA88AF768E37FE2B3D573B96C24
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/La2KMkriayPzp5HZexYF4OQObG8.roa
Signing time: Tue 02 Jan 2024 06:30:47 +0000
ROA not before: Tue 02 Jan 2024 06:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210972
IP address blocks: 185.115.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 May 2024 19:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:1a:a8:8a:f7:68:e3:7f:e2:b3:d5:73:b9:6c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 2 06:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dad8a324ae26b23f3a791d97b1605e0e40e6c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:63:f8:2f:d0:df:30:e7:14:23:fd:ef:63:
63:35:73:89:6f:59:0e:46:e6:a1:76:d9:03:67:f2:
5c:b3:9c:d7:50:d2:ca:87:c9:e4:41:2c:5c:56:91:
14:8f:e3:02:ca:c9:16:ed:1b:44:28:25:e6:6a:2b:
46:55:c5:84:95:68:40:f9:0b:0f:a3:eb:30:d3:50:
94:37:f2:a7:42:96:d3:68:2a:d1:09:01:54:ee:4e:
e8:c5:08:af:72:28:db:6a:ba:88:97:e7:64:04:91:
d5:6f:2d:63:33:d5:af:50:8e:64:ef:97:e7:34:8c:
19:96:6c:f4:d4:af:73:fe:f0:ea:bf:23:00:5e:5b:
8b:34:1e:ca:59:e0:f9:47:18:18:18:b1:4c:f6:8b:
71:27:4c:06:c3:e9:c2:ed:19:7b:de:b4:9b:98:d3:
1c:de:28:43:37:ce:91:2f:88:74:f3:cf:6f:d2:ad:
49:0d:9f:f8:ef:08:7f:5c:f9:d7:bd:a7:0e:3b:6b:
5d:48:f5:64:a9:66:01:da:cf:0d:4b:13:f9:2b:87:
6b:dc:d3:7a:e0:5f:7a:30:ce:91:77:26:02:bf:f3:
8e:33:26:0b:fb:a0:ed:7c:1d:24:e0:94:63:09:b6:
61:99:4d:51:58:dc:a5:7a:f0:61:77:cc:e7:11:b8:
45:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AD:8A:32:4A:E2:6B:23:F3:A7:91:D9:7B:16:05:E0:E4:0E:6C:6F
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/La2KMkriayPzp5HZexYF4OQObG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.207.0/24
Signature Algorithm: sha256WithRSAEncryption
30:d1:f8:ae:6c:ae:3a:e9:18:fa:95:e7:be:b7:d8:5d:10:25:
83:f8:69:4a:a3:b7:e0:7b:51:90:b7:b2:ad:d3:31:b3:63:59:
96:c9:f6:72:fb:50:53:9c:5d:79:3f:89:81:d2:77:20:cd:e1:
34:c0:db:4e:73:92:02:1f:47:eb:7c:eb:29:18:a5:a7:6d:d4:
9f:18:62:d1:b8:84:c1:e9:05:f7:09:ba:2f:d3:d7:2c:8a:77:
c5:dc:1c:21:1d:9f:9c:e5:ae:ff:14:f2:ce:3a:11:73:84:9f:
d3:5c:31:fd:20:da:6e:ca:75:2e:0e:fe:05:d0:81:e2:0a:cd:
37:86:c1:76:a6:e0:83:ab:51:82:ec:48:b5:fc:c1:00:90:99:
d9:27:a2:e4:48:78:fc:22:2d:96:3e:79:b5:54:64:e3:07:2e:
d9:64:d8:6c:89:4c:87:db:3c:99:20:85:ac:63:a4:d9:25:ed:
c8:c0:b9:b0:e3:7e:4f:4e:d1:3d:e5:92:95:34:a4:c6:19:86:
57:74:40:89:26:10:9d:0d:a5:d6:23:ca:91:ca:e2:51:58:6f:
82:de:b6:61:8e:6b:c0:b9:11:93:10:d0:70:05:e0:78:95:2a:
ca:c1:63:65:e4:84:2c:8c:39:45:92:60:66:d0:f5:e5:e6:0f:
6b:27:54:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:43 2024 by rpki-client on console-ams.rpki-client.org