Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/h5EvZ3ODseTQhXQtddOtwPhebaY.roa
File: h5EvZ3ODseTQhXQtddOtwPhebaY.roa (raw, json)
Hash identifier: GBN6nOeqQxCt0Z+2sY5Q/AvIP/dswJty6/oXp98+mg4=
Subject key identifier: 87:91:2F:67:73:83:B1:E4:D0:85:74:2D:75:D3:AD:C0:F8:5E:6D:A6
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018E751DB6633E3A8F4E3BC9EC24E842EAAC
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/h5EvZ3ODseTQhXQtddOtwPhebaY.roa
Signing time: Mon 25 Mar 2024 10:17:45 +0000
ROA not before: Mon 25 Mar 2024 10:17:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49217
IP address blocks: 185.235.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 09:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:75:1d:b6:63:3e:3a:8f:4e:3b:c9:ec:24:e8:42:ea:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Mar 25 10:17:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87912f677383b1e4d085742d75d3adc0f85e6da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:25:85:24:33:fc:72:70:42:fd:83:0c:2d:35:
31:b7:5a:1c:46:78:91:d0:c2:fd:78:f1:1e:a1:e0:
08:20:69:fe:3f:0a:af:62:df:7d:c0:9b:6f:4c:77:
6c:5b:b7:ff:96:13:1c:6e:7b:9d:39:0e:a8:f6:bb:
b5:f3:11:3c:23:6f:a1:f2:71:d0:d9:3e:d4:be:84:
0f:2c:c7:c9:ef:9c:89:87:25:c2:df:eb:24:8c:5e:
96:3c:9e:20:14:73:e8:fa:c0:49:ee:5c:6a:a9:6b:
d8:e5:9b:25:0c:f3:91:91:8c:6c:c7:ee:24:f6:52:
27:ea:2b:72:05:76:47:1b:e3:d2:c9:83:8b:0a:36:
8e:4a:13:7f:5d:7c:a7:2a:bd:37:3c:57:21:c3:6a:
12:9e:62:5e:05:f9:79:38:25:07:f1:db:dc:62:ae:
b8:5e:88:34:4d:c5:97:28:f2:dd:dd:74:8a:31:93:
ec:1b:aa:ea:e9:f1:58:ce:ce:b6:26:30:34:79:d8:
d0:f2:be:99:ca:1e:ae:f9:a9:1e:70:04:2e:a2:11:
6a:36:3a:90:2b:22:33:a6:37:28:47:4a:51:6d:f1:
4c:5f:39:dd:a1:c7:ea:32:c7:73:e5:1e:68:95:b3:
bc:5b:eb:88:24:cb:c1:c5:f6:15:3f:a9:ee:db:99:
b6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:91:2F:67:73:83:B1:E4:D0:85:74:2D:75:D3:AD:C0:F8:5E:6D:A6
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/h5EvZ3ODseTQhXQtddOtwPhebaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.167.0/24
Signature Algorithm: sha256WithRSAEncryption
75:03:de:0f:11:6e:24:79:d8:a8:10:91:83:e3:f2:14:60:88:
f4:3d:92:8e:e3:7c:ad:3e:3f:5f:bb:db:a6:0d:59:cd:84:69:
8c:a6:24:63:78:e4:48:2e:27:42:88:41:2a:b3:0b:d8:c0:ec:
50:bf:c5:86:14:90:f0:a1:6a:59:07:8a:78:fe:3e:d0:2c:95:
24:bc:77:ec:c0:29:62:b9:ef:f4:d2:bb:bd:7f:4a:71:f8:c1:
a3:b9:dd:71:b5:f4:12:c6:00:b0:19:c7:3c:a8:06:24:8b:fd:
05:88:7a:cd:61:b9:34:c9:93:33:ff:85:f9:ed:bb:4c:4a:53:
7d:93:a1:51:93:65:2f:35:45:38:79:fc:81:11:d0:c1:a1:4f:
2c:08:12:bb:5a:a6:1c:87:8e:15:c2:47:db:9d:ef:0e:b5:26:
cf:9f:33:53:41:9a:9b:f7:64:c7:e6:f5:15:35:0b:45:51:36:
81:e1:60:60:f6:57:78:09:8f:f5:43:2b:fe:11:35:7a:89:ba:
d2:39:a6:48:cc:12:17:00:cc:81:a9:f0:7a:a5:0f:1d:a0:2c:
05:98:22:da:6d:86:14:8b:a2:7e:11:55:04:8d:05:dc:70:d3:
8b:c0:eb:06:88:fb:eb:ec:0d:c5:2f:ee:b6:b3:2a:d9:39:b5:
20:24:21:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 12:16:21 2024 by rpki-client on console-ams.rpki-client.org