Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/4rC-Hb2lZ3tXw_zfthrx1rdooug.roa
File: 4rC-Hb2lZ3tXw_zfthrx1rdooug.roa (raw, json)
Hash identifier: vl0nyily0g6ZFTESrI2/p3MXP6Dk58Rx7PI+A+jP7jc=
Subject key identifier: E2:B0:BE:1D:BD:A5:67:7B:57:C3:FC:DF:B6:1A:F1:D6:B7:68:A2:E8
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 018C397DCC96E3A96E94103747C95EA02484
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/4rC-Hb2lZ3tXw_zfthrx1rdooug.roa
Signing time: Tue 05 Dec 2023 10:19:54 +0000
ROA not before: Tue 05 Dec 2023 10:19:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 185.121.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:7d:cc:96:e3:a9:6e:94:10:37:47:c9:5e:a0:24:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Dec 5 10:19:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2b0be1dbda5677b57c3fcdfb61af1d6b768a2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:78:ed:0e:ca:85:6e:e6:1f:fd:a1:87:82:b3:
dc:1f:e0:a7:c5:df:f1:e3:cd:d0:66:0b:dd:18:59:
e0:ee:86:31:60:2f:7f:94:00:d3:fb:81:7c:45:51:
66:48:5d:0d:52:e3:91:9d:ab:3d:19:cb:3d:c8:e1:
03:ad:66:d1:62:52:88:68:bf:ef:70:50:af:ae:12:
61:46:02:58:22:d7:f5:da:9a:1e:5c:24:f2:d2:f1:
bd:d9:30:3d:1e:1b:31:79:ba:b0:c1:04:85:ac:62:
78:ff:62:5a:8b:23:2e:d9:ab:66:c4:5e:a4:19:be:
a9:d3:1c:23:f0:25:9e:7d:f1:a1:7c:51:d9:05:1a:
12:d9:97:9c:4d:07:1b:fd:fa:74:af:16:66:54:71:
a2:9c:d0:a7:25:21:65:fb:b6:ab:f7:2f:68:50:d7:
7d:fb:d6:5e:17:9f:c9:64:cd:22:a0:93:6a:6b:00:
b5:f9:f0:eb:61:2e:46:e8:5d:79:f5:93:56:f5:25:
60:1d:8a:c4:04:45:ab:0c:dd:23:13:e7:3a:dc:b9:
fa:1e:5f:a1:77:87:cc:2f:c2:41:e6:a1:1a:55:64:
76:9e:1d:4f:7a:b2:c1:8a:d1:ea:d8:25:19:de:61:
e4:f6:ac:ed:b8:b0:c3:ac:3c:3c:c7:4b:e1:50:e1:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B0:BE:1D:BD:A5:67:7B:57:C3:FC:DF:B6:1A:F1:D6:B7:68:A2:E8
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/4rC-Hb2lZ3tXw_zfthrx1rdooug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.225.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ea:91:fa:58:01:74:45:63:8e:ea:1e:03:58:50:fa:78:ed:
21:7b:23:51:95:f6:f8:f0:06:c1:92:06:49:ab:82:6d:6c:8c:
8a:9d:5c:ba:12:d2:2d:bd:0e:07:29:c7:99:9f:b9:f3:49:99:
68:f8:39:f1:a8:c1:4f:97:6a:c3:ba:1e:e0:38:bb:4c:82:30:
da:99:2b:e1:e4:e5:2a:7d:8e:6d:38:cf:27:d4:5a:33:9e:c8:
6b:c4:b1:b6:7b:07:5e:23:d6:42:ba:39:2b:ae:03:59:85:a0:
18:7f:c8:01:e2:49:77:69:32:bc:cc:9e:e5:ab:e9:a0:54:21:
91:91:9a:b5:cc:61:49:2b:25:36:2c:c8:12:ce:e8:35:9f:3b:
1d:a8:b4:34:62:a1:4a:de:83:14:4b:e2:10:44:ee:e5:a0:d1:
12:9c:42:f5:93:86:b6:b5:9f:a1:a4:46:48:68:4e:6e:db:27:
c9:0a:6f:da:eb:10:55:b3:18:f8:fc:e1:96:9c:97:9f:99:4e:
b3:11:03:38:94:98:c3:29:f1:0d:d9:2b:82:74:3e:af:92:63:
ca:5c:22:02:55:75:5c:4e:ad:cb:b8:fd:fb:86:33:07:85:c8:
c6:75:06:db:f4:38:ef:c5:d7:3a:a8:10:c4:fb:ac:21:0f:ea:
83:ac:81:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:58 2024 by rpki-client on console-ams.rpki-client.org