Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/rdsEuaaa51H0WLvIZt9HjK8k0Uc.roa
File: rdsEuaaa51H0WLvIZt9HjK8k0Uc.roa (raw, json)
Hash identifier: BPXi3bPPXSznjlLy81yNJWOJJOJ7O5JeaeBUASd+LT0=
Subject key identifier: AD:DB:04:B9:A6:9A:E7:51:F4:58:BB:C8:66:DF:47:8C:AF:24:D1:47
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018A655B2A7566F35990EF916002DA9212A4
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/rdsEuaaa51H0WLvIZt9HjK8k0Uc.roa
Signing time: Tue 05 Sep 2023 12:39:48 +0000
ROA not before: Tue 05 Sep 2023 12:39:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206686
IP address blocks: 185.127.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Sep 2023 11:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:65:5b:2a:75:66:f3:59:90:ef:91:60:02:da:92:12:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Sep 5 12:39:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=addb04b9a69ae751f458bbc866df478caf24d147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:28:46:5b:af:b0:6b:10:17:aa:4e:a3:15:44:
7d:9e:64:f0:a8:c0:de:0c:b0:a1:30:ad:0c:ce:a3:
c6:47:8f:bb:29:43:98:4e:fd:59:39:0a:ba:70:dd:
fe:ca:ef:43:d4:bc:7d:06:5e:71:da:41:3b:13:a0:
60:25:99:15:7a:59:af:fa:54:7b:d7:df:fe:b0:23:
7d:44:7b:4f:f5:86:0d:a6:ef:d7:ae:e5:54:17:4b:
fc:fc:ea:14:17:f8:44:5a:0f:c8:dd:51:de:c6:d3:
71:53:ba:f3:fd:83:d2:7d:21:02:4c:55:b2:95:68:
59:ac:0c:93:66:d2:62:8e:30:0e:0f:4d:5e:e6:71:
91:30:7e:8f:17:53:bb:60:c4:7a:51:3b:35:a3:87:
f8:57:06:42:8f:77:72:da:82:a5:50:33:15:b7:72:
92:46:04:bd:b5:d7:16:36:46:53:dd:27:91:fd:2a:
be:48:12:73:80:02:44:11:03:40:ae:d2:f2:0f:e7:
5a:3a:2a:06:a1:70:5e:81:f1:fa:33:aa:f8:15:fc:
d2:09:fc:19:3d:45:52:89:4c:a1:06:6d:b6:b2:34:
e4:6d:10:51:81:c7:0f:7f:8d:9d:81:81:ac:68:d3:
52:40:1c:6c:5f:35:1e:ea:ff:9e:38:2b:98:02:6e:
13:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DB:04:B9:A6:9A:E7:51:F4:58:BB:C8:66:DF:47:8C:AF:24:D1:47
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/rdsEuaaa51H0WLvIZt9HjK8k0Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.143.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b6:50:9b:19:b8:a6:34:cc:cb:87:e3:dd:c0:30:b2:cd:71:
cd:50:0a:bc:9c:97:68:ae:d7:3b:cc:aa:73:5d:e5:df:82:f5:
1d:bf:5f:c0:93:09:55:c6:ec:1a:85:a3:89:28:a5:78:37:6b:
92:03:af:e5:53:c9:5b:ec:14:8b:61:8f:e0:21:3b:c8:74:ab:
b9:ef:27:46:e9:15:fe:a9:03:93:0f:d4:31:22:58:54:e1:51:
5f:0e:6f:5f:c6:65:6c:ac:bc:b0:6c:85:07:50:d9:52:04:4a:
44:96:0b:fe:29:ac:37:78:c8:3d:98:93:04:2e:f3:78:5d:72:
e3:51:d8:10:9a:d4:0b:5d:40:cc:87:f6:04:7a:a2:0c:6b:6d:
32:0a:fa:7b:8b:5b:03:90:dc:56:45:c0:8a:7b:6b:19:13:b4:
30:c9:23:8b:58:71:2a:05:dc:43:33:9c:8e:6f:8f:1e:96:a2:
43:30:5b:49:f2:4f:17:a4:e6:53:e2:49:59:31:11:03:d4:eb:
1a:ae:d8:93:ba:5b:61:f8:2e:86:9b:3c:10:9c:ce:41:40:63:
94:2e:8e:de:e6:d3:42:83:9e:45:47:49:61:9f:5b:7b:3b:44:
bd:a6:96:42:ca:3f:10:d8:01:41:54:82:5e:78:53:27:43:e4:
e4:31:39:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:56 2024 by rpki-client on console-fra.rpki-client.org