Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/AXdPiIErmWBnbgI2EiQ6h0QIfu0.roa
File: AXdPiIErmWBnbgI2EiQ6h0QIfu0.roa (raw, json)
Hash identifier: aWqmkZHRhfLfTvE2D0gBJrJHonCwVkuc3WGj5FVdpgc=
Subject key identifier: 01:77:4F:88:81:2B:99:60:67:6E:02:36:12:24:3A:87:44:08:7E:ED
Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Certificate serial: 01856DCACA5AF452EA47E615C7F5A6CC849C
Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/AXdPiIErmWBnbgI2EiQ6h0QIfu0.roa
Signing time: Sun 01 Jan 2023 14:44:44 +0000
ROA not before: Sun 01 Jan 2023 14:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58010
IP address blocks: 185.139.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:ca:5a:f4:52:ea:47:e6:15:c7:f5:a6:cc:84:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Validity
Not Before: Jan 1 14:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01774f88812b9960676e023612243a8744087eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:e1:89:55:c9:bf:fd:6d:48:79:bb:ac:ee:
9e:76:bb:a0:0f:b2:51:ea:91:e4:4e:89:f3:56:44:
88:8f:d6:bf:1a:6f:d7:15:62:f3:a9:1a:ac:95:fb:
55:cc:52:e0:04:c5:a0:dc:c0:25:f6:2e:41:5d:7e:
f6:05:e3:17:63:71:62:e5:1e:22:1f:7c:3b:8c:79:
f7:bd:31:c3:b4:1a:71:5e:ff:70:b6:78:c3:58:0b:
03:d1:51:e4:48:66:58:89:65:c6:aa:00:1a:83:ab:
ed:0e:cf:11:4e:e7:77:aa:19:44:f8:4f:09:7a:e3:
a8:b3:0e:0f:e6:0d:a3:6e:8c:01:a4:31:36:ee:af:
6d:9a:aa:cc:fa:18:cb:5b:b2:77:f2:98:e8:ef:02:
c7:eb:5a:6d:18:03:8c:4c:87:fc:7c:17:f8:e7:8f:
b8:2a:0a:7b:7b:c5:6a:f0:3d:ad:30:11:bf:c8:17:
cf:d5:eb:49:cc:88:61:67:3c:f8:c9:00:27:24:1f:
f3:83:98:87:fd:3a:ac:f0:cb:9d:af:0f:f3:34:cf:
75:21:0c:6f:d4:c6:ff:81:6a:f9:05:cb:93:10:86:
0c:31:d7:87:b9:9e:53:38:90:49:9a:3f:34:ba:7c:
6d:02:88:02:34:cc:12:89:09:bd:f6:1c:af:67:d5:
28:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:77:4F:88:81:2B:99:60:67:6E:02:36:12:24:3A:87:44:08:7E:ED
X509v3 Authority Key Identifier:
keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/AXdPiIErmWBnbgI2EiQ6h0QIfu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.158.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f1:f1:e1:f5:29:0a:1b:c6:c1:1e:57:50:38:01:10:6a:ce:
87:f3:d2:c5:ff:b0:03:55:89:ea:15:e1:20:8a:e9:07:2b:39:
66:d7:e4:10:99:52:7d:78:65:09:bc:f8:82:76:36:7b:6e:08:
0b:ca:83:d7:ce:8c:8e:be:e7:92:24:22:27:8f:fd:45:d0:13:
55:a2:08:39:db:6b:37:7e:95:ab:c2:03:d8:1f:d2:bf:e7:2b:
1a:4b:29:ef:f2:1c:de:d4:51:35:a1:80:7b:61:a6:55:36:ef:
b6:ee:6c:5e:30:d5:55:04:53:d4:dd:ff:34:0a:76:1a:8f:e1:
94:b2:75:02:94:a1:a4:4e:3e:2f:68:c1:c1:51:fb:9c:16:e3:
3f:19:fe:af:11:d1:7c:7c:04:a9:a5:6b:55:9c:81:ba:3d:c4:
a3:57:26:a7:a8:43:c6:6a:77:31:0d:2f:26:bf:14:24:b5:82:
4b:a9:37:31:51:0d:3f:5c:1c:06:a5:8f:af:90:71:7d:7d:40:
97:66:df:f8:db:d3:1e:2c:79:e6:21:9c:dd:c8:f8:74:5a:50:
bf:86:55:c4:47:f7:06:a4:0c:68:81:cb:7d:3a:f1:cd:be:e3:
53:78:a8:67:f1:7f:67:53:63:6a:03:8b:fb:45:49:32:54:db:
2c:9c:aa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:13 2024 by rpki-client on console-ams.rpki-client.org