Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/24fP7FEfQUR3z13591HqHTIGVPk.roa
File: 24fP7FEfQUR3z13591HqHTIGVPk.roa (raw, json)
Hash identifier: 9VvNCkm/c4K/huA+ik8LNJXB+M7sCPNGuOFF+DkT+oU=
Subject key identifier: DB:87:CF:EC:51:1F:41:44:77:CF:5D:F9:F7:51:EA:1D:32:06:54:F9
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018AAD202B7D3DEEB9FED91275806697976A
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/24fP7FEfQUR3z13591HqHTIGVPk.roa
Signing time: Tue 19 Sep 2023 11:08:01 +0000
ROA not before: Tue 19 Sep 2023 11:08:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206686
IP address blocks: 185.127.143.0/24 maxlen: 24
185.127.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Sep 2023 10:09:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:20:2b:7d:3d:ee:b9:fe:d9:12:75:80:66:97:97:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Sep 19 11:08:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db87cfec511f414477cf5df9f751ea1d320654f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:93:64:ff:1e:ba:35:70:34:35:18:94:fa:ac:
7b:80:df:cd:6f:5d:cd:6f:9a:64:80:bd:94:2e:c7:
96:f5:2d:27:66:a8:91:a2:06:31:48:7f:ec:71:bb:
61:f7:4f:60:49:87:1f:60:a0:55:08:70:cd:fb:9c:
7e:cd:79:23:22:d9:a4:d9:8f:78:f7:f7:2d:e5:75:
3d:68:ab:da:1e:8d:82:ba:e8:9b:f9:7c:9b:6d:b0:
c9:b1:1f:b4:e8:ef:a0:4d:74:fb:fe:db:c6:40:c7:
13:db:16:0e:72:ca:33:fb:b3:e1:13:38:69:a4:a6:
4f:7a:46:60:2f:06:52:67:8c:22:a6:8d:ba:ca:7b:
52:b7:21:ad:18:7e:b9:09:61:1e:fe:b6:19:c0:52:
89:a9:36:97:77:03:7e:94:3a:f0:48:e4:bc:e5:b8:
c2:d1:c7:74:47:3d:ca:8c:6a:d0:38:90:76:1f:49:
c5:a3:77:75:a0:a4:c1:f9:c0:03:02:0a:f4:93:77:
da:c8:19:37:e7:11:e9:91:e4:dc:a6:1e:3f:ad:17:
a0:d6:da:1a:e8:38:f4:c9:ce:41:53:08:05:64:53:
4e:76:7b:0d:ea:76:a7:fe:54:13:3a:6f:32:b7:ca:
3b:17:58:fd:8a:cf:d7:a4:d5:89:2d:74:21:52:e0:
0e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:87:CF:EC:51:1F:41:44:77:CF:5D:F9:F7:51:EA:1D:32:06:54:F9
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/24fP7FEfQUR3z13591HqHTIGVPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.142.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:7e:57:29:c5:f1:df:26:7d:63:34:02:a3:ab:e4:1d:43:52:
3e:02:e2:d2:95:e4:23:c8:15:08:c8:70:ff:94:6c:49:1f:f3:
60:66:74:84:94:ba:9a:f9:d0:09:a1:36:b4:cb:40:28:b6:f7:
b9:4a:20:ad:49:44:3f:f7:b7:c7:f7:8a:fd:4a:31:22:60:4e:
d6:24:bb:d7:b4:fa:29:c1:7d:9b:73:41:44:d8:13:7d:aa:88:
91:72:81:28:a3:91:fd:6c:b5:36:24:13:70:41:b7:c6:46:5f:
cd:b1:8f:2c:f9:36:4c:1f:45:86:34:73:49:5c:3e:dc:b5:d1:
e8:78:6a:29:a7:d4:34:92:13:57:95:c7:13:78:66:58:f9:a0:
5a:6c:4e:84:9d:2a:fd:9d:bc:37:5e:7d:3d:5d:b9:22:11:0f:
50:e3:4b:11:d8:4a:9f:ee:d1:6c:72:85:63:9f:f8:d3:53:48:
53:92:52:94:9b:3f:19:1e:68:b1:c6:23:64:e3:8d:62:c0:9b:
fe:eb:81:e4:f3:4d:07:de:e9:6f:b4:dd:48:3c:3d:5c:de:fb:
ad:fd:57:a7:0a:c6:c2:f3:b5:fa:70:3d:a6:77:cf:12:31:3c:
d7:4d:21:2d:eb:c2:98:0a:19:4a:f2:78:87:05:53:40:3c:5a:
95:a3:74:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:56 2024 by rpki-client on console-fra.rpki-client.org