Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/utHD9OQ1FrFGm6b5VnTAjXew070.roa
File: utHD9OQ1FrFGm6b5VnTAjXew070.roa (raw, json)
Hash identifier: mlDgjYFKSRpVBgjgJGO+bwtu/So7C8+3ljbPQum14Mo=
Subject key identifier: BA:D1:C3:F4:E4:35:16:B1:46:9B:A6:F9:56:74:C0:8D:77:B0:D3:BD
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018571DE764484082E90735CEA7E6668E424
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/utHD9OQ1FrFGm6b5VnTAjXew070.roa
Signing time: Mon 02 Jan 2023 09:44:42 +0000
ROA not before: Mon 02 Jan 2023 09:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29066
IP address blocks: 185.233.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jan 2023 08:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:76:44:84:08:2e:90:73:5c:ea:7e:66:68:e4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 09:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bad1c3f4e43516b1469ba6f95674c08d77b0d3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:28:a7:df:b7:72:67:74:2e:51:4a:9e:0f:be:
4d:fa:f7:73:05:aa:dc:f3:1a:11:5e:16:f9:bb:56:
71:34:d8:7a:9c:a7:dd:c3:c1:52:7d:e3:4e:69:82:
77:07:0c:33:c5:60:e6:8f:ed:8e:1b:f3:d1:5e:5b:
d9:c8:ad:b5:c3:94:d3:38:b1:fb:65:30:34:b6:6a:
86:e2:05:65:16:93:18:ef:5f:4b:2d:b8:78:e8:92:
df:86:45:c1:a0:26:33:a7:47:4a:c1:38:e6:d1:f3:
67:56:69:64:a4:81:ed:54:3f:af:ba:d5:33:4e:e9:
3a:87:82:81:a9:c6:54:ee:30:e4:e6:8e:4c:89:17:
af:57:15:2d:fa:6d:63:a1:9d:3b:d4:e3:ea:b9:da:
70:bf:b6:22:44:da:aa:9c:e4:40:0d:ed:9d:cf:12:
f6:4a:68:70:8a:8c:68:91:2b:eb:e1:eb:ae:94:c2:
fa:56:44:e3:bf:c0:8b:ae:96:9b:8b:94:63:6f:2f:
83:00:ed:dd:b7:e0:89:86:c1:67:44:d4:43:44:62:
a5:50:fa:82:a6:07:73:66:be:33:ed:3f:25:81:d1:
99:28:7e:79:99:81:25:19:5f:86:9b:45:fc:d0:85:
57:ea:66:7d:79:92:28:27:ca:0d:28:26:3d:93:7a:
aa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D1:C3:F4:E4:35:16:B1:46:9B:A6:F9:56:74:C0:8D:77:B0:D3:BD
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/utHD9OQ1FrFGm6b5VnTAjXew070.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.18.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:de:a4:3d:fc:f9:dc:20:cb:12:0a:24:63:3d:f3:f6:69:28:
f5:91:bf:3d:03:a3:b3:3f:35:dd:f4:a4:55:9d:19:32:9b:70:
4e:24:01:21:5b:92:16:0c:0e:0b:44:95:54:58:e7:9d:4b:43:
b3:04:dc:4e:79:a0:11:83:53:d8:4d:cf:69:3e:04:fb:12:da:
7e:6e:1c:09:83:54:02:35:a6:b1:58:81:6d:bb:47:61:13:7f:
97:bb:4e:6e:7b:1c:c9:7d:27:aa:45:f8:c5:ed:fa:18:19:df:
0b:6e:92:85:72:84:9c:e2:3e:4f:8b:f9:13:1f:54:1d:ea:08:
06:39:2f:18:8c:3c:a3:0f:1a:63:d2:e6:2d:de:77:45:23:71:
2b:8d:74:76:bf:b2:56:40:8b:9f:68:2b:30:79:22:a7:37:62:
d1:c3:5e:32:8e:94:16:1b:4b:42:28:bf:8e:ef:06:5f:b5:26:
e8:b7:ba:ef:12:8a:28:bc:ef:34:1e:73:db:9d:80:0e:30:b1:
d5:63:38:72:b8:dc:0c:63:d1:da:e2:ed:19:f1:39:c8:17:50:
1a:e4:4f:84:6e:9b:82:cf:47:df:b7:8f:7b:00:ca:7b:c2:da:
14:7b:ed:11:ba:b8:02:c7:99:d2:07:c6:ba:2f:a1:7c:12:72:
70:a8:8d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org