Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/ziLxWOKs3867GYitoXRRjGBd9Hc.roa
File: ziLxWOKs3867GYitoXRRjGBd9Hc.roa (raw, json)
Hash identifier: wblvXpWG2QxVAbyZBiYjM/WioAvNE0n0ujMDr7hFtEM=
Subject key identifier: CE:22:F1:58:E2:AC:DF:CE:BB:19:88:AD:A1:74:51:8C:60:5D:F4:77
Certificate issuer: /CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8
Certificate serial: 018BB436E106F80511625563A4F01D354565
Authority key identifier: 27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/ziLxWOKs3867GYitoXRRjGBd9Hc.roa
Signing time: Thu 09 Nov 2023 13:12:57 +0000
ROA not before: Thu 09 Nov 2023 13:12:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60497
IP address blocks: 185.30.173.0/24 maxlen: 24
185.30.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Nov 2023 23:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b4:36:e1:06:f8:05:11:62:55:63:a4:f0:1d:35:45:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8
Validity
Not Before: Nov 9 13:12:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce22f158e2acdfcebb1988ada174518c605df477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dc:22:d1:aa:3e:0a:14:94:d8:b3:7d:b4:39:
29:ad:b8:3e:d5:a1:d9:2e:91:7f:90:0c:24:8e:e8:
42:f0:c9:29:18:4f:ae:18:bd:38:84:61:b3:8c:c6:
87:42:5a:98:be:89:a2:29:5c:41:b3:43:2b:9f:d9:
23:9b:58:1a:1b:6d:75:9a:79:e4:d1:0e:61:15:16:
1b:b9:50:90:f1:88:66:fb:d9:ea:d0:46:4e:ea:4b:
43:d8:cd:47:2a:dc:e5:57:63:c4:68:f5:74:99:2b:
d8:b9:dd:f8:4a:3e:a5:f7:62:08:ac:b8:5b:1b:14:
9a:b3:17:ca:73:12:db:b1:03:50:04:7b:50:d2:f8:
ca:dd:3b:b0:d0:90:57:c9:da:64:75:5c:15:8a:2c:
86:21:1f:a8:5e:5c:e2:c5:f5:fa:c3:a8:e5:ec:6d:
73:74:34:e1:20:25:16:76:cc:b6:ec:9f:33:64:e8:
c2:1c:74:cd:dc:cc:88:17:6c:d3:12:33:d0:a8:d1:
04:c2:35:bc:1c:f2:57:5d:b6:45:5b:80:45:5e:af:
8f:ec:f8:54:4d:d6:6c:76:45:92:e9:7a:f7:cc:b1:
ab:64:0e:47:a6:4b:f0:8a:de:43:be:79:2b:08:79:
fc:cd:12:5a:48:07:cb:d1:8f:a9:d9:4b:4e:33:09:
55:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:22:F1:58:E2:AC:DF:CE:BB:19:88:AD:A1:74:51:8C:60:5D:F4:77
X509v3 Authority Key Identifier:
keyid:27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/ziLxWOKs3867GYitoXRRjGBd9Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.173.0-185.30.174.255
Signature Algorithm: sha256WithRSAEncryption
16:af:b8:7c:00:dc:ee:6a:d8:09:7f:4c:9c:bc:fc:02:46:a1:
00:cf:63:ca:02:af:21:df:15:8b:84:2f:9a:22:6c:cc:8f:e5:
6e:2a:d5:89:ef:00:d9:7a:c8:d6:7b:a7:16:99:92:ad:9b:93:
c8:d2:28:63:74:21:ef:19:08:c8:21:9e:69:01:19:ab:54:1c:
ea:67:e7:85:56:65:ef:ab:ac:45:4d:e1:75:01:0a:9f:22:46:
25:c9:3f:98:a8:7e:82:0f:c8:0d:eb:b1:dd:70:09:89:9c:80:
00:97:b6:3a:80:47:22:9f:a9:3b:86:fa:48:d2:79:a1:c9:46:
8c:91:ac:71:8f:83:48:43:f3:a5:2e:df:fd:df:e4:17:6c:62:
c7:0b:d6:89:63:18:f5:3d:a3:24:ed:b2:68:a8:2d:d0:24:08:
51:b7:c0:b6:48:c6:3d:9e:1d:28:aa:73:3a:f1:85:53:f5:3e:
01:4f:0d:1e:12:05:3c:57:a6:a3:55:c3:2c:fd:a8:6b:8e:0e:
01:f5:5c:15:be:e7:4d:60:27:bb:b5:1b:37:dc:a2:0c:e9:34:
18:ea:6f:8f:d2:01:7e:33:db:a6:a6:a6:04:36:d1:e7:ca:74:
8e:0b:a5:e3:e1:6f:ad:a3:12:06:93:1c:f4:ea:b7:d9:41:01:
51:64:c2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:28 2024 by rpki-client on console-ams.rpki-client.org