Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/CiKkZkSlZ9wy_riJxeZr6gTiY2U.roa
File: CiKkZkSlZ9wy_riJxeZr6gTiY2U.roa (raw, json)
Hash identifier: Q8sEXUMLCbmNyroHl0nUzdUsG4XFo9OMbnyTk1iLBDw=
Subject key identifier: 0A:22:A4:66:44:A5:67:DC:32:FE:B8:89:C5:E6:6B:EA:04:E2:63:65
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7C28B5A8B7056706CEE18C802DBCD
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/CiKkZkSlZ9wy_riJxeZr6gTiY2U.roa
Signing time: Mon 02 Jan 2023 08:44:57 +0000
ROA not before: Mon 02 Jan 2023 08:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210027
IP address blocks: 185.180.145.0/24 maxlen: 24
91.236.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Oct 2023 17:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:c2:8b:5a:8b:70:56:70:6c:ee:18:c8:02:db:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a22a46644a567dc32feb889c5e66bea04e26365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ce:88:ad:9b:48:61:fe:84:a4:d0:2b:7e:c6:
ce:4c:92:3b:f8:d3:98:aa:1f:48:a3:ff:0c:bd:4c:
70:53:32:0c:a6:ef:3d:c6:0d:82:37:af:ea:e2:b5:
4a:93:0a:2b:7a:1b:02:71:40:9c:73:98:4c:23:a0:
63:8b:5d:7e:fa:26:f6:d3:50:9f:01:2d:87:d1:f7:
e2:01:27:87:24:6e:9f:21:67:52:20:c5:fb:bd:24:
42:fa:bd:c4:1e:5e:14:f3:27:9b:87:f2:dd:0c:ca:
5f:fa:61:6d:af:31:20:b1:e7:76:b0:dc:56:b5:7d:
51:57:e3:ab:77:a0:18:6d:f9:43:e1:ac:15:4e:0b:
e3:33:90:74:ea:e4:07:90:92:6c:2a:15:93:2c:38:
17:a1:8c:63:f3:90:54:a8:6d:c3:9b:d5:3f:94:b3:
af:c1:92:9b:94:7c:db:12:aa:8d:31:5e:b6:dd:88:
d8:e1:79:a5:12:0a:76:a4:5a:cf:3f:cd:29:1c:36:
08:84:87:60:8c:58:31:72:23:4d:bd:3b:b8:17:7f:
31:1c:2a:2f:79:7f:79:03:1c:a3:73:70:e3:ff:93:
1b:63:49:6b:2e:46:26:19:d5:29:29:8f:37:91:71:
c3:69:d0:56:c2:bf:21:3b:24:20:bc:0e:bf:cd:9a:
54:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:22:A4:66:44:A5:67:DC:32:FE:B8:89:C5:E6:6B:EA:04:E2:63:65
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/CiKkZkSlZ9wy_riJxeZr6gTiY2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.195.0/24
185.180.145.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c5:7d:66:00:dc:a7:94:60:bc:7c:65:1f:3f:66:1f:fd:0a:
b0:bf:8d:41:12:35:d0:9f:e4:38:2c:dd:4a:a1:7b:3a:c8:b0:
27:62:3e:1a:e1:00:44:3a:4e:8f:98:c1:09:6e:82:fd:f3:76:
8b:80:49:36:56:ed:23:a7:58:55:18:eb:3f:e5:c6:b1:7c:62:
f2:96:b8:7f:ba:49:fa:85:c1:2f:83:7e:da:f1:c3:b4:63:59:
51:c9:1f:f5:32:68:5a:fc:b4:ec:e3:b5:e1:e7:f6:b1:0c:37:
6f:54:a1:b8:25:ac:5f:a8:62:71:ec:f1:d1:55:29:12:bf:e6:
60:bc:a6:4f:65:18:fc:28:3d:09:61:45:59:d3:d9:83:d2:56:
b2:89:88:58:e3:f9:c4:ab:6c:22:89:ab:25:a5:42:39:a3:c9:
3d:8e:1d:43:37:f2:5c:a4:f6:d6:6b:c0:ee:6a:ba:c3:7a:88:
12:8d:98:e3:b6:f7:06:19:3b:5d:32:34:b3:d5:e5:53:29:2b:
12:89:7f:ee:f9:fb:cc:57:ff:a7:ca:fc:54:a3:08:ea:d4:77:
b9:90:3e:1e:4b:77:ae:9f:8f:13:a7:88:df:e8:61:c6:b1:c6:
58:25:d6:8f:64:c2:40:c7:fd:33:43:eb:81:ff:e8:ef:76:c1:
d2:ad:91:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:41 2024 by rpki-client on console-fra.rpki-client.org