Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/1zQc9SLiqyfcK7F4n7HNkmTZa6A.roa
File: 1zQc9SLiqyfcK7F4n7HNkmTZa6A.roa (raw, json)
Hash identifier: ZKrNm4XC1ohJNFRMZ63wqvnS6lJsegraoe5Fq5dqY0g=
Subject key identifier: D7:34:1C:F5:22:E2:AB:27:DC:2B:B1:78:9F:B1:CD:92:64:D9:6B:A0
Certificate issuer: /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Certificate serial: 01856B8A22A4F2459DA0527575277DC24F89
Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/1zQc9SLiqyfcK7F4n7HNkmTZa6A.roa
Signing time: Sun 01 Jan 2023 04:14:52 +0000
ROA not before: Sun 01 Jan 2023 04:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203038
IP address blocks: 185.243.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:22:a4:f2:45:9d:a0:52:75:75:27:7d:c2:4f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Validity
Not Before: Jan 1 04:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7341cf522e2ab27dc2bb1789fb1cd9264d96ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:12:76:08:5e:68:15:fa:f6:7b:65:25:fc:4b:
1f:fc:7d:88:a9:6f:03:34:8f:d3:0b:0f:7a:36:07:
b6:08:1f:b9:1f:a3:ae:66:f7:89:64:c2:39:64:9f:
3c:2e:f0:9a:4e:c8:24:24:07:db:1a:62:d8:50:04:
51:a1:b9:0d:49:3d:79:d5:5f:20:75:fd:c5:9c:fd:
b3:63:0d:65:99:7d:22:4d:77:49:55:42:49:a7:4a:
ab:de:ec:2c:c7:b2:5a:99:2b:11:34:fa:5c:56:26:
74:17:09:65:15:f5:f2:de:53:a9:7e:6f:24:6e:19:
a6:2c:9f:a0:9f:c5:f0:82:ef:27:b5:34:c5:47:e8:
b7:36:f6:03:80:31:38:d4:2d:58:cd:19:e2:26:ae:
7e:ae:04:7a:be:95:50:7e:21:8e:12:36:6b:12:80:
2b:19:5c:9a:71:89:e2:1d:bc:9a:ca:d5:cf:33:91:
1f:f5:ef:61:18:75:94:d3:12:b8:d3:b9:ef:12:e4:
3f:b7:b9:4d:0e:69:5d:7a:9b:bd:c2:b1:59:9e:e1:
87:20:1f:00:e5:60:fe:e0:b1:b9:a2:72:4d:29:0d:
ae:fd:74:66:87:a8:86:a1:9b:5f:2f:1e:ed:84:f4:
6e:62:18:7d:c7:41:ab:6a:03:53:86:ef:b0:90:4d:
e9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:34:1C:F5:22:E2:AB:27:DC:2B:B1:78:9F:B1:CD:92:64:D9:6B:A0
X509v3 Authority Key Identifier:
keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/1zQc9SLiqyfcK7F4n7HNkmTZa6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.23.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:7e:cb:25:ff:61:d7:d7:2a:2a:24:b7:1e:82:ea:d5:47:a9:
17:51:47:1a:db:47:76:b5:b7:bd:f1:fa:ac:73:40:22:ad:b6:
b6:92:45:18:8f:79:bc:ce:11:d8:0c:90:7a:7d:9f:ea:f0:88:
17:14:12:96:13:4d:a8:6a:ae:fc:29:ac:d1:34:69:62:19:da:
85:e9:79:05:5b:f2:30:6c:6c:4d:f5:0a:7b:30:22:39:6d:a2:
d5:00:bd:a6:e8:82:3d:35:73:89:fd:a5:65:4d:92:c8:20:43:
7e:7d:4b:0f:61:eb:10:78:21:93:af:75:f4:af:df:fa:08:06:
aa:35:ed:a6:b7:eb:44:c9:87:67:27:3d:19:3f:af:6e:5e:a8:
47:7c:06:6f:c0:a3:b7:2b:07:94:e7:ae:59:76:70:b4:75:c5:
da:ff:ab:31:cf:74:32:a4:d9:b8:be:11:fc:9d:a8:40:00:91:
11:95:e7:02:5c:10:4e:65:5f:90:0f:67:99:03:8c:f2:24:0f:
64:77:b8:4b:c1:c5:b7:bc:fd:25:fd:08:44:91:bc:32:8c:b3:
3e:54:71:39:92:7a:6f:fc:6a:81:ae:ce:a6:6e:c9:ee:00:99:
ed:20:40:8d:15:6a:34:ba:d8:aa:40:db:91:2b:e5:80:07:cb:
dc:97:68:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:50 2024 by rpki-client on console-ams.rpki-client.org