Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/4JKbmWbKhYHLCXv98eYY_iVeSxU.roa
File: 4JKbmWbKhYHLCXv98eYY_iVeSxU.roa (raw, json)
Hash identifier: E6joH5uZJkSVuuGjMShG8L3TxCOBiZZ9wN2h9uIlTJQ=
Subject key identifier: E0:92:9B:99:66:CA:85:81:CB:09:7B:FD:F1:E6:18:FE:25:5E:4B:15
Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial: 01856F5499D9ACBD0E4C048E0CB2385D4231
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/4JKbmWbKhYHLCXv98eYY_iVeSxU.roa
Signing time: Sun 01 Jan 2023 21:54:53 +0000
ROA not before: Sun 01 Jan 2023 21:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47692
IP address blocks: 185.12.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:99:d9:ac:bd:0e:4c:04:8e:0c:b2:38:5d:42:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Validity
Not Before: Jan 1 21:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0929b9966ca8581cb097bfdf1e618fe255e4b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:f3:1e:28:95:64:19:19:a5:0e:30:c9:02:
f4:65:c9:9b:fd:73:64:d6:69:9e:a7:99:d2:d0:f4:
57:f9:40:af:52:6e:80:63:98:54:c7:a0:87:87:02:
ff:b5:89:e5:a1:8d:b3:3f:2f:4d:b0:14:58:14:23:
de:10:46:92:3d:76:d1:73:4e:fc:20:69:37:76:8e:
2a:d7:2c:fc:81:e0:ff:ba:df:e6:79:93:a1:62:9d:
db:c4:1c:4c:59:87:42:4d:cd:30:39:5b:e3:3b:85:
26:9e:52:e1:3c:83:b1:c2:a6:b1:b8:a3:3d:8f:a0:
24:53:ee:c8:43:49:b9:4a:0b:39:e8:27:1b:f3:f0:
92:3a:15:b8:1c:4c:9b:ee:16:eb:03:1d:44:70:08:
a7:7d:b2:b0:82:06:89:d2:d5:fd:d3:59:7c:2a:a2:
72:0a:8b:7c:05:11:f3:55:d1:87:e9:84:94:c2:48:
f2:83:16:2f:08:94:cd:a8:56:29:6f:c4:29:b2:6c:
fd:a7:d9:8f:3c:a6:ac:d1:17:a3:bf:7d:ba:b1:d6:
c9:3c:c3:fe:b3:07:4b:6e:1e:10:8d:26:af:c1:a7:
29:f1:f1:ed:ca:3f:47:31:a7:64:50:aa:9c:6f:3f:
57:5d:ec:59:99:07:c0:2c:55:11:4e:3d:a5:dc:c4:
6e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:92:9B:99:66:CA:85:81:CB:09:7B:FD:F1:E6:18:FE:25:5E:4B:15
X509v3 Authority Key Identifier:
keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/4JKbmWbKhYHLCXv98eYY_iVeSxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.183.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a7:59:02:54:6d:2e:51:e6:aa:ef:e5:a9:64:fd:38:50:f7:
df:72:76:29:71:5b:b1:36:89:0e:b6:ad:f6:fe:a9:3d:fc:09:
15:9c:e0:68:21:46:e5:c3:f7:52:1c:0b:a2:be:ae:b0:4e:74:
f1:ae:af:7e:bf:5b:55:3b:5e:cb:06:0e:b3:7c:64:18:28:16:
8d:aa:9b:ca:a4:b0:e3:c7:43:b6:8a:48:6e:1b:fb:91:78:e7:
b2:62:65:8f:32:30:5c:0c:1b:77:76:a0:94:6b:95:dc:df:a5:
c0:e5:88:fa:fc:d9:4a:d6:1d:b5:dc:c1:3f:7e:c9:9d:78:0f:
96:c8:5b:dc:52:ed:a4:ef:a5:19:93:5b:75:11:ef:3d:76:db:
e2:57:80:92:23:35:44:53:0f:59:d7:c9:a8:26:26:c0:db:a6:
27:68:d4:69:37:66:06:89:4e:75:21:3c:83:23:84:70:b5:0f:
0b:d0:1b:3e:4a:10:7d:20:d5:96:fb:da:5a:98:e6:32:51:8c:
d9:27:5f:c2:17:12:04:87:1b:82:f6:b3:ec:8c:02:ee:f4:5e:
68:34:6b:f4:db:da:c2:82:60:de:f7:87:2d:9a:30:09:7d:0f:
ec:f3:75:2b:70:0b:55:9f:fa:e9:3c:36:bf:54:3b:1a:a6:06:
98:ba:90:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:36 2024 by rpki-client on console-fra.rpki-client.org