Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/agXAOO25ScUEvBq6a2TcUbuhKhs.roa
File: agXAOO25ScUEvBq6a2TcUbuhKhs.roa (raw, json)
Hash identifier: y9y7zoFsetYL5ADn/spAVjdOFzQyIsdFM0iGhlxh5cg=
Subject key identifier: 6A:05:C0:38:ED:B9:49:C5:04:BC:1A:BA:6B:64:DC:51:BB:A1:2A:1B
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 0189D8C507A25CF71A1B1A0B05B0CCDB8E23
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/agXAOO25ScUEvBq6a2TcUbuhKhs.roa
Signing time: Wed 09 Aug 2023 05:28:58 +0000
ROA not before: Wed 09 Aug 2023 05:28:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12859
IP address blocks: 185.188.141.0/24 maxlen: 24
185.121.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Aug 2023 12:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d8:c5:07:a2:5c:f7:1a:1b:1a:0b:05:b0:cc:db:8e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Aug 9 05:28:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a05c038edb949c504bc1aba6b64dc51bba12a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:6e:de:46:ba:54:6f:10:26:88:04:c1:78:
de:ed:b5:d0:e8:36:3e:42:a8:5a:59:03:75:8d:43:
c7:46:9e:07:08:25:5d:c2:82:37:98:97:32:09:ca:
fc:71:87:bd:81:45:f3:8f:b0:cd:48:73:bc:bb:cd:
90:18:15:d2:14:4d:db:26:db:50:19:16:6f:bf:ea:
9d:1f:d3:6d:50:c0:d5:ae:f1:9e:20:98:f1:91:79:
48:e1:ca:68:8a:dd:c9:16:21:30:96:3c:d6:aa:d8:
bb:a7:ec:25:21:1a:53:b5:ef:69:1d:4e:10:76:cb:
af:4b:1d:9b:c1:cb:ce:7c:cc:dd:bd:2f:a8:a8:9d:
f0:f4:7a:08:af:f3:c0:c6:3d:56:cb:40:17:b1:00:
79:3b:91:ce:61:d7:b6:2a:10:bb:f3:d1:d9:ee:ac:
fe:9b:a8:19:9b:f5:5c:19:66:9e:67:ca:a8:3b:23:
8f:6a:eb:14:45:44:45:96:b3:3c:a5:3c:75:d3:15:
dd:fe:9e:1f:3e:76:fa:2c:f7:58:9f:f7:7c:2b:b1:
35:b2:b5:0a:2e:a6:99:ed:a5:e3:99:d4:61:68:09:
54:5f:54:d8:56:32:e3:72:cb:c9:97:62:43:c5:11:
89:44:ac:b4:91:57:d5:4e:a7:f7:d5:92:c2:ae:2c:
61:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:05:C0:38:ED:B9:49:C5:04:BC:1A:BA:6B:64:DC:51:BB:A1:2A:1B
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/agXAOO25ScUEvBq6a2TcUbuhKhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.224.0/24
185.188.141.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:3b:f7:e3:4b:b5:88:18:ce:38:e6:c4:59:7f:d7:c3:25:de:
1c:87:2f:81:25:0e:1b:4f:20:59:96:84:d5:d3:fe:ae:81:9b:
7c:79:95:52:67:44:ad:c4:2e:9f:13:92:58:2e:02:fd:74:17:
78:47:41:92:4e:56:09:3d:91:20:57:7d:2b:74:75:a5:35:9b:
1d:fa:01:92:b1:08:22:7b:42:6f:22:4e:fe:bd:f9:0c:df:2a:
57:f6:10:f3:81:63:94:f1:a0:69:ed:e2:11:87:6a:dd:58:be:
97:35:49:60:d6:9a:c8:4f:a0:b0:26:b7:20:fb:68:5c:72:61:
43:2a:dd:a2:de:ae:d6:80:16:39:52:3c:35:01:a5:4b:4c:b4:
f7:1f:6a:00:7f:25:37:a4:64:dc:cd:82:92:3e:68:4e:87:68:
5f:8d:db:85:69:fb:bc:89:f6:8a:50:b4:c2:c0:30:a9:d5:0d:
67:2b:89:62:0c:21:22:45:2e:57:6b:88:0e:28:ca:1d:03:ca:
02:a8:c7:e2:75:d9:27:b7:3c:24:7d:0d:ee:cd:2d:7f:59:8a:
56:50:78:9d:42:7b:08:52:1d:13:37:f0:a6:d3:eb:f2:f6:cb:
fe:86:33:6a:a1:68:d6:50:83:e7:f0:55:06:41:32:11:ff:a7:
5b:1b:a0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:54 2024 by rpki-client on console-fra.rpki-client.org