Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/p-FDhRLUKi3UUMAgetA9coDSDk4.roa
File: p-FDhRLUKi3UUMAgetA9coDSDk4.roa (raw, json)
Hash identifier: Rr7gqCOqhocsgogBKm0fVALrJbTwSgLdSDZGBEKOAPc=
Subject key identifier: A7:E1:43:85:12:D4:2A:2D:D4:50:C0:20:7A:D0:3D:72:80:D2:0E:4E
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018E1976D2A6C06143C908FF0BECE29C6A56
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/p-FDhRLUKi3UUMAgetA9coDSDk4.roa
Signing time: Thu 07 Mar 2024 15:10:01 +0000
ROA not before: Thu 07 Mar 2024 15:10:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46562
IP address blocks: 185.235.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Mar 2024 02:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:19:76:d2:a6:c0:61:43:c9:08:ff:0b:ec:e2:9c:6a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Mar 7 15:10:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7e1438512d42a2dd450c0207ad03d7280d20e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:45:d1:57:ce:7d:88:61:fa:99:16:59:d2:
fa:e6:3f:18:ae:0b:a4:c8:8a:3f:d6:4b:ce:0f:1c:
18:83:99:64:5d:68:94:73:aa:d8:81:d4:19:fa:70:
31:b9:3d:35:89:58:9f:bb:f9:63:12:24:5b:f1:8b:
bf:1f:5c:f7:09:39:ca:6f:54:06:7b:a5:52:5f:ac:
9e:c8:f5:f2:b9:8f:dd:4b:e4:94:dc:23:2f:7f:85:
fe:9b:89:0e:ea:51:b0:9c:af:f0:9d:e8:8b:78:37:
89:ff:d7:01:c0:a8:e1:26:34:41:63:1d:df:ed:fd:
29:35:dd:68:e7:ab:34:d6:b2:2c:84:38:b9:4f:69:
60:60:5c:e6:74:31:1d:c1:e7:53:43:67:fd:19:9f:
81:9d:c2:b2:26:e7:97:57:ea:b1:73:6c:ea:fb:c2:
2b:17:70:5a:fc:ee:9c:65:7c:1e:9b:3c:b5:91:bf:
9c:6b:fc:fc:9e:b8:1e:4d:fd:41:11:8c:f1:c5:76:
a0:50:91:9f:9d:fe:76:52:75:02:4f:5b:05:4a:b3:
6b:fd:4f:23:f7:3e:2c:e5:81:db:45:2b:f4:80:86:
56:53:db:f7:96:cc:5a:70:9a:69:ad:2b:fc:57:07:
54:c2:9f:66:be:0f:ac:a7:2b:59:4b:1b:a5:c7:56:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E1:43:85:12:D4:2A:2D:D4:50:C0:20:7A:D0:3D:72:80:D2:0E:4E
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/p-FDhRLUKi3UUMAgetA9coDSDk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.167.0/24
Signature Algorithm: sha256WithRSAEncryption
15:0e:9b:f4:b6:36:5b:d2:91:3a:38:83:b6:96:66:31:ac:1b:
a2:17:3e:39:c7:87:46:69:f4:b4:3a:9d:a3:71:39:4a:3a:de:
07:6e:a5:14:69:a9:a0:d5:89:7d:f0:4c:ff:71:09:d5:92:94:
58:bf:7c:83:ad:4a:c8:0c:16:90:0f:12:8f:9b:b7:e5:fd:7a:
08:a6:22:3a:22:60:64:82:52:3f:24:e8:c4:e3:d4:bd:7e:1e:
da:ff:5e:eb:48:54:7f:93:f5:1b:26:65:20:bc:cd:4a:01:a4:
5c:5d:58:98:fc:be:5d:d4:b5:4c:5a:e8:15:55:ce:42:10:4e:
a2:57:67:d0:d3:43:27:dc:02:47:5e:72:ee:5e:bb:34:f5:58:
b0:1d:a6:62:f6:38:19:16:6f:5d:c3:de:93:01:54:05:22:42:
bc:f8:85:cc:b0:9a:a8:1e:69:88:61:e5:c4:96:b5:bd:da:f4:
f6:28:de:a8:e6:6e:2d:cb:23:59:ac:00:f8:fb:d2:57:76:e9:
b6:a7:19:45:10:a1:2f:37:44:64:02:5b:4b:f9:40:8c:fd:29:
a6:f2:37:15:25:9d:99:b1:b9:a4:a9:39:cd:f6:a7:9d:cb:82:
43:35:da:68:ef:1a:80:36:c0:8b:6c:be:f9:d6:40:91:9a:1f:
0d:12:ce:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org