Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/xWvXSgYndsVWHqs8tCSMSYEQXxE.roa
File: xWvXSgYndsVWHqs8tCSMSYEQXxE.roa (raw, json)
Hash identifier: r+CEjH7iGUkoA6tCuYqqjUZLekFq+Wgi72K0xdUyswk=
Subject key identifier: C5:6B:D7:4A:06:27:76:C5:56:1E:AB:3C:B4:24:8C:49:81:10:5F:11
Certificate issuer: /CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Certificate serial: 018BCCB81246927DB897C7568FD5996FCE4D
Authority key identifier: AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/xWvXSgYndsVWHqs8tCSMSYEQXxE.roa
Signing time: Tue 14 Nov 2023 07:24:57 +0000
ROA not before: Tue 14 Nov 2023 07:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204499
IP address blocks: 185.251.76.0/22 maxlen: 24
185.219.112.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cc:b8:12:46:92:7d:b8:97:c7:56:8f:d5:99:6f:ce:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Validity
Not Before: Nov 14 07:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c56bd74a062776c5561eab3cb4248c4981105f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:f1:2b:26:a1:df:28:1f:2b:dc:a8:f9:41:
6c:b2:2b:50:43:76:1d:e5:85:20:8c:1a:df:5b:28:
01:4c:9f:f5:02:c4:ac:7c:94:25:4f:2f:ef:96:d2:
d9:19:ca:e2:69:47:76:d8:f5:8e:5a:89:09:d4:9f:
b9:88:b3:f3:c2:28:24:0b:96:93:fa:3a:b0:66:66:
ff:14:6c:b7:20:0f:92:58:f3:a2:f0:ba:85:25:03:
69:12:66:b2:d5:03:38:ef:94:de:ad:d7:0d:f3:c5:
25:dd:72:71:5f:ca:09:8f:df:ef:c5:fb:f0:73:86:
0b:0f:41:54:c2:bb:6f:70:10:94:47:62:14:3a:64:
09:ca:4b:3b:97:65:0f:14:62:50:d6:2f:57:b4:4c:
55:42:c4:2f:62:21:ba:e6:d0:82:88:80:27:bf:98:
b1:37:2a:98:b9:d0:7f:e4:88:5f:6c:e6:db:49:7c:
36:70:96:8f:13:5c:66:d7:7b:4a:17:8b:5d:e4:b2:
94:0c:2f:eb:90:dc:b4:39:13:83:0f:38:f0:e1:92:
ee:de:4e:2c:df:91:b6:3f:59:ce:45:b0:26:85:cc:
44:bd:20:5a:c8:4b:96:14:79:f2:52:4c:07:da:ac:
b5:f2:75:a5:f9:2f:bd:c0:c5:80:ad:b5:6b:9a:d5:
73:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6B:D7:4A:06:27:76:C5:56:1E:AB:3C:B4:24:8C:49:81:10:5F:11
X509v3 Authority Key Identifier:
keyid:AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/xWvXSgYndsVWHqs8tCSMSYEQXxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.112.0/22
185.251.76.0/22
Signature Algorithm: sha256WithRSAEncryption
29:9b:06:ef:78:3c:3f:87:07:74:e0:57:46:06:e6:6e:2f:d4:
c0:7b:61:89:b1:8a:85:a7:74:c8:c6:9c:28:3e:37:08:82:f4:
53:5d:73:4f:74:49:3f:69:25:af:7f:6f:b9:ca:dd:bd:b2:c7:
4c:7c:c7:d3:7a:0d:d7:c0:65:dd:a7:56:0c:20:10:be:b0:06:
8d:ce:08:f1:c0:79:6c:05:bc:ed:10:70:92:06:ca:3d:1c:9d:
c7:ed:df:b4:7e:e3:9d:be:ff:1c:0c:e7:bf:29:3d:2e:fb:93:
29:75:27:23:6b:6f:8c:90:c0:0b:70:e8:cb:cd:cb:a9:df:44:
60:cf:13:c1:aa:41:82:a2:97:b4:a0:ce:94:72:a6:79:a5:c0:
77:f7:55:2f:84:30:b6:2d:9e:1a:68:f5:9d:5b:0c:ad:a6:04:
51:69:f9:ba:a4:fd:96:22:e6:22:d6:27:c5:7b:85:44:a1:8e:
30:22:d6:04:27:f9:ca:a7:52:2e:85:66:b0:69:11:c0:6a:3e:
f9:83:0c:53:43:71:4a:26:e7:d6:dc:0a:cf:a1:b4:b3:80:ea:
db:e9:73:bf:da:eb:e1:4a:0d:3d:8a:04:c7:a8:f3:82:57:2d:
0a:bb:87:ed:0f:bd:c9:5f:a8:7f:f8:39:de:67:18:3e:54:24:
55:2b:4b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:17 2024 by rpki-client on console-ams.rpki-client.org