Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/J6x_tllphm6qjFV_AoOA91NF5lI.roa
File: J6x_tllphm6qjFV_AoOA91NF5lI.roa (raw, json)
Hash identifier: Vem+S1jDatNirwog3LvjwDLM+ikioTBk1mxBPp8uHyo=
Subject key identifier: 27:AC:7F:B6:59:69:86:6E:AA:8C:55:7F:02:83:80:F7:53:45:E6:52
Certificate issuer: /CN=46ebddae6a7acee83a322a0e743a6759d85365f2
Certificate serial: 018CC26D444E3C2B218268775B16861AA13E
Authority key identifier: 46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/J6x_tllphm6qjFV_AoOA91NF5lI.roa
Signing time: Mon 01 Jan 2024 00:29:49 +0000
ROA not before: Mon 01 Jan 2024 00:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25540
IP address blocks: 185.171.22.0/24 maxlen: 24
185.171.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jun 2024 20:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:44:4e:3c:2b:21:82:68:77:5b:16:86:1a:a1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ebddae6a7acee83a322a0e743a6759d85365f2
Validity
Not Before: Jan 1 00:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27ac7fb65969866eaa8c557f028380f75345e652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cc:18:ac:ad:ee:92:35:3f:bf:41:78:42:73:
31:7a:db:33:30:65:ce:a3:b7:df:1a:b3:f3:1a:40:
9b:04:07:86:75:cd:99:ad:2e:58:59:f2:15:9d:5c:
5b:32:2f:c2:35:d0:d7:80:b0:dc:8b:25:87:fe:13:
5b:f8:cd:5f:6a:12:bb:10:2a:e1:3d:5e:8a:a2:c8:
91:ba:ec:66:c8:5a:9c:fb:83:0a:3f:ce:6c:8c:82:
22:7b:46:52:3d:c1:93:52:44:86:83:33:ae:4c:76:
9e:92:22:3a:21:e6:ab:6c:8d:f0:d5:df:18:bc:1e:
57:53:bf:42:83:59:0c:c8:1d:fa:81:3e:13:ca:21:
98:33:93:db:34:48:6e:88:78:f8:88:9c:45:a0:46:
b7:a7:21:28:41:e4:48:d7:39:16:6f:bd:b6:ec:ee:
38:cd:c1:6c:97:65:37:0b:45:d4:ac:48:90:a2:4f:
a8:03:fb:be:1a:d1:33:6b:a5:ca:ba:fa:bb:77:2a:
32:36:9e:a4:fb:39:a1:bc:93:77:02:98:c9:d3:d0:
21:b0:ca:0c:9a:98:7f:52:aa:f6:ff:a0:f4:66:07:
f7:11:8c:48:c0:62:9b:30:8a:32:8b:96:27:18:bc:
55:87:fe:64:2c:b3:fb:85:03:30:4c:42:6f:73:b9:
ad:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AC:7F:B6:59:69:86:6E:AA:8C:55:7F:02:83:80:F7:53:45:E6:52
X509v3 Authority Key Identifier:
keyid:46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/J6x_tllphm6qjFV_AoOA91NF5lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.22.0/23
Signature Algorithm: sha256WithRSAEncryption
50:93:58:6d:43:80:4e:f0:b5:cd:52:4d:3c:93:b1:eb:c4:08:
be:87:0a:ac:5b:d6:45:c3:a8:c0:59:65:55:8d:12:a8:7b:ef:
ec:c1:f9:23:4a:e8:dc:11:94:d4:3e:03:67:5f:7c:9b:f6:cd:
06:bf:3c:77:07:0e:08:97:06:a1:45:c8:db:d9:e5:a8:b0:11:
2c:db:a8:4d:44:83:d1:53:1f:13:69:5c:1f:5a:f3:49:e8:d3:
97:fa:1b:25:c5:9b:fa:3e:83:46:c1:ba:13:17:32:52:23:de:
4e:f2:c7:98:0b:49:10:fe:03:08:63:1e:c4:5e:c3:ab:1a:62:
cd:f1:f2:4d:29:63:7e:1f:7c:f6:ed:64:58:32:cf:0d:c1:75:
49:d5:51:b1:af:fa:c8:56:7a:71:a6:94:68:75:25:57:f9:08:
8e:78:50:41:38:85:36:58:a8:44:09:1e:00:ec:1e:b9:09:ee:
97:33:92:f4:dc:82:3e:68:96:2f:ce:7b:df:71:84:6f:27:82:
16:56:15:11:3a:50:cd:8d:57:34:51:d5:22:ae:be:a0:0c:d0:
60:9d:5b:11:04:76:3a:3d:d3:0f:8c:23:c9:aa:b2:70:8f:0b:
ba:bb:79:b0:a9:b6:c0:35:7e:9a:04:ed:ae:fb:92:a2:f9:82:
3c:84:2e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 00:04:04 2024 by rpki-client on console-ams.rpki-client.org