Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/jY4slkS1_68-pWwvrsiEO1UC7DA.roa
File: jY4slkS1_68-pWwvrsiEO1UC7DA.roa (raw, json)
Hash identifier: JoNxlbTyXyEWR9nX3bpQOFq/pP6QQjczb25pDsYpdrU=
Subject key identifier: 8D:8E:2C:96:44:B5:FF:AF:3E:A5:6C:2F:AE:C8:84:3B:55:02:EC:30
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01856EAA2A7E57F773AB859BC457B0EB67DC
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/jY4slkS1_68-pWwvrsiEO1UC7DA.roa
Signing time: Sun 01 Jan 2023 18:48:43 +0000
ROA not before: Sun 01 Jan 2023 18:48:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 185.115.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jul 2023 07:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:aa:2a:7e:57:f7:73:ab:85:9b:c4:57:b0:eb:67:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 1 18:48:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d8e2c9644b5ffaf3ea56c2faec8843b5502ec30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:45:02:95:b6:0d:06:d1:f2:8b:16:5a:bf:
28:7b:e5:ad:16:62:87:e0:a2:d6:13:90:b8:88:c9:
c3:93:7e:bb:cb:0b:6a:33:2d:22:37:5b:4b:0f:fc:
14:39:b8:dc:2f:cd:00:8e:d6:8d:f5:41:89:a4:37:
d9:32:a2:43:85:de:d9:ef:55:7e:8d:84:d1:eb:64:
65:28:94:c9:a0:03:1d:3d:ad:b8:e0:a3:a9:e7:e5:
e5:83:eb:af:81:0a:81:9a:de:74:9c:05:a3:03:9c:
7d:d2:79:a6:db:23:4b:d1:52:cb:15:51:e7:8b:39:
79:a4:ae:08:ab:fd:90:44:9a:92:37:a6:be:63:34:
e2:55:ff:34:c7:fa:66:af:9c:27:23:f4:b9:99:07:
21:45:f1:30:6b:45:e3:9c:ee:d7:e3:fb:61:95:29:
05:8f:dd:99:6b:8b:9d:fb:7e:0e:bd:fd:4c:6c:51:
47:c8:c3:2c:c9:5b:91:46:39:a9:7c:6c:3b:34:a5:
91:29:65:08:b0:08:ad:ae:de:4c:2d:98:e8:05:85:
75:7f:ee:d7:af:05:c2:3c:20:f6:c3:d1:cc:72:93:
03:6a:d4:97:17:f9:0d:c5:83:b4:14:f7:3d:01:ea:
d6:9e:23:8e:8e:b6:b1:58:f5:79:b6:5b:46:67:2c:
8d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8E:2C:96:44:B5:FF:AF:3E:A5:6C:2F:AE:C8:84:3B:55:02:EC:30
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/jY4slkS1_68-pWwvrsiEO1UC7DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.207.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:13:81:00:6c:ef:5c:ed:06:72:6a:10:f4:f7:ed:08:05:3d:
ee:5b:6c:42:66:cb:48:50:07:67:66:8d:1d:76:a7:2e:9b:24:
a4:01:dc:cd:8f:e4:ba:c1:43:d9:99:79:c0:8e:80:9f:17:ba:
63:c8:e9:60:4c:70:b8:5c:66:08:91:a6:90:f1:c4:41:96:66:
71:20:60:97:58:f4:5f:d1:05:95:b8:92:95:a2:a4:4e:bc:9a:
b6:0c:df:73:31:76:6d:16:a7:62:85:de:50:c2:85:e4:ae:e3:
45:0a:c7:8d:2e:c6:e2:35:0f:2c:63:08:a3:81:3c:fc:61:bc:
74:62:d7:b6:55:62:27:65:bc:82:6d:b3:ef:e3:61:8b:94:22:
24:28:46:f3:52:ec:ce:49:cd:f6:63:d9:f9:eb:5a:7f:72:01:
3d:14:6c:5e:b3:ec:5f:af:03:3a:88:92:df:19:d6:1b:f4:1f:
80:d5:91:b7:63:9e:33:71:cc:67:36:c7:91:c1:29:e7:fe:4b:
6f:00:66:5e:a5:11:bf:8b:05:ce:28:53:ee:69:df:ad:98:12:
3e:b1:ae:61:9e:fe:d4:5b:45:f2:a4:26:09:bf:89:b1:46:ab:
7c:7e:b5:f0:07:8a:5f:9a:02:cb:7a:5e:ac:c6:a0:37:8e:71:
30:99:38:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:43 2024 by rpki-client on console-ams.rpki-client.org