Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/jbybZDZhT6i-DTIXX_BTfV6S6PU.roa
File: jbybZDZhT6i-DTIXX_BTfV6S6PU.roa (raw, json)
Hash identifier: K+5LScLGbt9eT/ahvYoitvEIapAbTqAdIA6fUvrg1Lw=
Subject key identifier: 8D:BC:9B:64:36:61:4F:A8:BE:0D:32:17:5F:F0:53:7D:5E:92:E8:F5
Certificate issuer: /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial: 0185729EB849EE8F8F4C2671B9B088992867
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/jbybZDZhT6i-DTIXX_BTfV6S6PU.roa
Signing time: Mon 02 Jan 2023 13:14:42 +0000
ROA not before: Mon 02 Jan 2023 13:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204300
IP address blocks: 185.21.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:b8:49:ee:8f:8f:4c:26:71:b9:b0:88:99:28:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
Validity
Not Before: Jan 2 13:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dbc9b6436614fa8be0d32175ff0537d5e92e8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:cf:21:38:56:29:d8:a3:5e:00:3b:ad:d2:
53:12:7d:88:46:04:e9:d0:bd:0b:ef:2c:09:6d:e1:
2a:00:9a:d7:58:32:48:06:52:bd:08:52:16:74:be:
7a:4b:d9:f9:23:7c:d8:4c:88:ba:50:31:8e:f4:c5:
f2:3d:ed:75:cc:7a:ef:c6:59:10:d9:d7:35:13:d5:
36:93:5a:a3:7f:3b:64:3a:96:d4:ef:97:b4:a6:8b:
ac:10:1a:3b:e9:ff:d5:17:32:4b:fe:71:d2:75:4c:
ea:12:0b:f9:1c:47:01:86:a2:11:d3:34:e5:62:d3:
67:a3:8b:b7:50:04:ff:34:89:be:d0:44:62:a2:63:
c2:6d:78:86:dc:6a:31:7e:b0:c5:fa:64:98:b8:3e:
7b:62:e0:ea:2f:84:35:b7:8f:c4:0a:47:22:c5:4a:
fb:7f:93:fa:e8:37:6a:fa:f5:6a:77:79:c8:4e:be:
9b:40:84:4e:3e:c3:9d:7e:0d:e6:88:f7:8a:5f:e5:
cf:eb:c2:dd:60:5f:b9:02:f6:55:07:60:61:81:5c:
8a:fd:75:07:69:51:c9:93:3d:db:9e:8e:a3:6e:f8:
cd:aa:63:97:2b:7b:2f:d7:b1:4d:18:a3:61:7d:87:
80:02:60:23:26:c5:80:12:1e:eb:d4:bd:61:ab:e6:
ad:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BC:9B:64:36:61:4F:A8:BE:0D:32:17:5F:F0:53:7D:5E:92:E8:F5
X509v3 Authority Key Identifier:
keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/jbybZDZhT6i-DTIXX_BTfV6S6PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.128.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:25:ac:6b:b1:19:e8:a4:e7:5b:d3:c8:73:2c:d3:87:6b:ee:
0a:34:21:05:6b:c5:16:1e:08:06:ec:87:54:94:a7:db:af:8d:
11:4c:b2:13:4d:9c:44:88:2b:c5:7b:51:7b:5b:41:46:60:5b:
bd:66:ef:51:c4:53:b3:40:93:97:3a:ff:87:b4:19:d1:f7:10:
7e:1c:ed:68:7b:35:99:8e:da:2c:e8:e1:07:29:7f:47:61:a0:
9a:ec:be:32:6e:2e:0f:ba:61:72:74:e5:e8:f1:b8:c2:4d:cf:
2e:12:6f:1d:88:7a:40:eb:b6:8f:78:db:97:01:cb:4c:c7:a4:
65:37:ed:2d:a2:57:35:02:8d:6f:f3:05:64:ad:e8:7c:bd:81:
6e:5b:cb:f5:9b:3a:95:88:34:89:d0:fb:3a:ca:91:9f:2e:4e:
43:e5:1b:ab:c1:87:2f:7e:60:75:41:be:88:28:22:f2:85:0e:
d5:8b:38:0a:1e:73:a3:d4:50:a9:de:e8:ef:de:50:00:46:db:
07:76:4b:55:d2:01:a8:c1:89:9b:55:44:cf:9d:46:f9:7b:7f:
09:94:45:1f:65:d7:25:a7:6f:a7:e9:41:8b:5c:0f:81:5c:1c:
ab:b6:19:40:43:2a:2f:7f:55:89:9f:7e:b7:cc:88:08:4d:73:
9c:37:82:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:19 2024 by rpki-client on console-fra.rpki-client.org