Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/jkop6BkvVcixojHdzcRTOxGmD6c.roa
File: jkop6BkvVcixojHdzcRTOxGmD6c.roa (raw, json)
Hash identifier: 3ZzJXaLOUvW87bXcqdinnCFu5ZduTd1Es9X/jsNjTs0=
Subject key identifier: 8E:4A:29:E8:19:2F:55:C8:B1:A2:31:DD:CD:C4:53:3B:11:A6:0F:A7
Certificate issuer: /CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Certificate serial: 01856B00C1C5E92B6DCB24AD8EAAB589610D
Authority key identifier: 6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/jkop6BkvVcixojHdzcRTOxGmD6c.roa
Signing time: Sun 01 Jan 2023 01:44:49 +0000
ROA not before: Sun 01 Jan 2023 01:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206602
IP address blocks: 185.245.144.0/24 maxlen: 24
185.245.145.0/24 maxlen: 24
185.245.144.0/22 maxlen: 22
185.245.146.0/24 maxlen: 24
185.245.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Oct 2023 14:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:00:c1:c5:e9:2b:6d:cb:24:ad:8e:aa:b5:89:61:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Validity
Not Before: Jan 1 01:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e4a29e8192f55c8b1a231ddcdc4533b11a60fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cb:07:98:75:0b:b3:66:78:e8:46:54:41:c3:
af:7f:74:63:6d:5b:9e:17:75:b8:da:e0:37:b1:dd:
43:ac:3a:43:99:99:60:67:95:64:1c:bd:f7:10:ea:
4d:07:99:29:0e:b7:09:11:32:7d:97:f7:e1:70:65:
ad:6a:9c:4d:e9:71:3a:39:a1:b0:fd:72:44:c5:ea:
93:1b:76:6d:88:1a:ce:74:a9:d0:b6:7d:95:0b:3c:
58:fa:ed:b6:94:2e:fd:28:88:4f:43:42:e6:cd:d0:
5f:2a:9a:2a:38:97:63:a8:93:85:63:7e:19:c6:15:
c7:01:1c:69:22:dc:b2:44:41:74:ce:b1:eb:08:3f:
10:3c:77:9c:26:97:93:ed:30:0a:4b:fb:2c:72:29:
66:b4:03:c5:36:18:54:a8:6b:20:6e:80:26:81:79:
9b:a2:67:75:60:f3:01:c3:aa:c3:11:1f:af:52:5b:
39:1c:20:62:f3:bd:80:b0:e5:57:0c:3d:42:51:de:
39:f9:35:b3:2e:a3:6d:bb:ae:be:9a:de:91:1c:aa:
81:d8:c3:17:0a:bc:be:df:ad:ef:19:69:b5:2e:4a:
0f:e8:67:06:a0:03:4b:f6:e9:5e:03:9d:f9:fe:44:
0c:ea:1e:20:cc:e2:58:3f:b3:79:95:b1:35:29:80:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4A:29:E8:19:2F:55:C8:B1:A2:31:DD:CD:C4:53:3B:11:A6:0F:A7
X509v3 Authority Key Identifier:
keyid:6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/jkop6BkvVcixojHdzcRTOxGmD6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.144.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:60:f1:8f:66:1f:1d:ba:36:0b:b4:ac:81:30:41:4c:39:b7:
0f:11:e9:e2:3a:c2:f0:71:c5:bc:e9:67:d7:6f:67:b7:16:fb:
b7:47:83:8f:67:e0:5c:cb:ef:7e:83:e7:17:c4:bd:fb:88:ce:
5f:2f:e6:60:9d:b6:13:74:d1:59:95:b9:21:67:96:de:dd:58:
3c:c6:1d:77:bb:17:c2:5e:5f:11:5a:ac:51:40:b8:8d:ee:51:
ec:cc:d4:eb:25:63:a8:8f:2c:bd:e0:37:62:1e:68:10:d7:59:
e9:37:ec:e3:1c:32:04:33:22:27:5f:f9:77:5a:c2:eb:17:19:
54:e0:89:02:e8:a2:3a:cb:ff:4d:82:7c:d9:37:7f:75:12:db:
be:58:9b:30:cb:f0:b5:3e:b8:29:51:cf:f2:38:c5:ca:af:1b:
c8:87:1a:78:bb:10:c2:1f:07:26:ad:fb:d2:67:1c:bc:73:77:
75:9f:7b:e5:d2:d2:28:06:9d:3f:3d:b9:25:6b:a8:e4:59:68:
61:27:0d:f5:da:8b:6b:84:92:e1:c2:71:c0:4a:86:a8:41:c0:
0b:55:a8:06:5c:19:dd:39:b0:6a:d6:6c:ec:8b:92:84:50:99:
12:fe:c4:6e:1a:81:13:05:b7:57:6b:89:09:dd:09:ce:02:d7:
bf:e5:4f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:12 2024 by rpki-client on console-fra.rpki-client.org