Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/S6YM8GSMpGRO3lE5re2TFah9ye4.roa
File: S6YM8GSMpGRO3lE5re2TFah9ye4.roa (raw, json)
Hash identifier: 8yKwkn0yhxmA5HWLmUcuiiz4xMLI+lFIWU+WEoaJq7U=
Subject key identifier: 4B:A6:0C:F0:64:8C:A4:64:4E:DE:51:39:AD:ED:93:15:A8:7D:C9:EE
Certificate issuer: /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial: 018AF3F320AD20D31C33052A139272EEE498
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/S6YM8GSMpGRO3lE5re2TFah9ye4.roa
Signing time: Tue 03 Oct 2023 05:11:51 +0000
ROA not before: Tue 03 Oct 2023 05:11:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51178
IP address blocks: 185.18.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f3:f3:20:ad:20:d3:1c:33:05:2a:13:92:72:ee:e4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Validity
Not Before: Oct 3 05:11:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ba60cf0648ca4644ede5139aded9315a87dc9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:80:ea:1c:fd:ae:1b:d5:52:f9:16:54:8d:13:
d4:fc:b5:56:57:ed:1e:6b:5d:51:ed:f3:33:95:6c:
e2:44:c3:f0:f3:db:e4:f6:08:cb:a2:3f:02:4b:63:
4d:80:13:20:1c:d3:30:62:bd:c2:b8:83:7f:36:fe:
dc:c6:b4:97:81:69:e7:4c:7d:c2:d9:b2:31:c5:a9:
1f:17:2e:5d:5d:54:e8:c1:50:1a:b0:07:b2:29:05:
60:b6:7f:9f:4d:44:9c:1b:98:09:84:5e:dc:a7:15:
fe:ee:f7:0a:10:23:a5:7d:84:20:03:81:6c:44:51:
52:44:2a:b7:ff:aa:ac:cc:04:8f:b7:70:b3:fe:84:
f5:1e:6d:de:bf:cb:a8:e0:c1:22:70:a1:d6:79:2a:
b0:de:ff:be:5f:18:02:df:c2:43:84:bf:69:f8:d9:
ad:1d:e0:7a:8b:6e:74:74:3a:79:d4:92:53:f8:24:
d9:b0:d4:93:7f:1d:0a:17:12:55:77:2f:1a:65:07:
78:b8:d5:15:f3:b7:9d:57:36:71:36:e4:89:d3:93:
6f:ce:42:a2:f7:b6:6b:32:a1:c5:f0:85:56:b9:41:
47:18:8e:ea:a4:d1:f3:a9:cb:04:70:cc:1c:73:5e:
aa:18:d3:4b:34:b1:a6:ca:0b:f2:92:d9:4e:01:e6:
7b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A6:0C:F0:64:8C:A4:64:4E:DE:51:39:AD:ED:93:15:A8:7D:C9:EE
X509v3 Authority Key Identifier:
keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/S6YM8GSMpGRO3lE5re2TFah9ye4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.124.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:92:80:eb:30:c6:8b:80:77:88:6f:a6:7d:18:d3:27:32:5a:
7f:60:22:a9:3d:67:69:94:29:06:fb:37:b8:25:2b:6b:34:58:
81:f9:49:9f:7a:d8:53:0e:ac:a6:74:fb:54:1b:9d:ff:9e:65:
74:b5:18:0a:21:a5:8f:15:4d:63:ec:b2:19:71:d2:63:ea:d1:
99:f7:48:60:20:5c:59:ed:35:62:6e:3f:35:8e:5c:11:c7:c6:
84:69:a4:c2:b4:38:bb:0e:e9:6d:b4:d6:40:9d:ef:ea:fd:47:
3e:23:42:f8:cc:a4:0f:e1:1d:4c:f2:5f:38:5d:57:30:3b:db:
ed:3c:90:6e:0d:cc:9e:56:ea:1d:71:9a:73:c0:b9:d9:0f:ea:
84:a8:74:f1:8d:95:9e:e8:27:f2:3e:f0:d8:d5:68:0a:a0:8c:
6c:1d:ca:bf:6e:fe:c6:0f:79:5b:16:ba:5a:9c:94:7c:c5:eb:
8c:20:d1:50:d5:69:98:43:f6:c1:2e:2b:7d:d9:18:fa:cc:79:
b3:6e:5a:f8:3a:ed:c5:ea:6c:c1:8c:a8:15:19:1f:63:0d:53:
ca:e9:f2:23:e9:ee:f9:b9:03:f6:e0:d4:bf:70:dc:be:ff:27:
f9:16:a7:b8:b7:08:d7:b5:23:4f:f2:52:0b:54:4c:0d:d7:15:
2b:25:17:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:03 2024 by rpki-client on console-fra.rpki-client.org