Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/CyO7kgy9-cpjsUQIQl9WRPbs-Po.roa
File: CyO7kgy9-cpjsUQIQl9WRPbs-Po.roa (raw, json)
Hash identifier: BsoVSV3erHLxav38ZcX434BBuh79TANlc/a/QSKXWAU=
Subject key identifier: 0B:23:BB:92:0C:BD:F9:CA:63:B1:44:08:42:5F:56:44:F6:EC:F8:FA
Certificate issuer: /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial: 0187367E86928E9AB874ABBE81DF255E7E8B
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/CyO7kgy9-cpjsUQIQl9WRPbs-Po.roa
Signing time: Fri 31 Mar 2023 07:07:54 +0000
ROA not before: Fri 31 Mar 2023 07:07:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.250.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:36:7e:86:92:8e:9a:b8:74:ab:be:81:df:25:5e:7e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Validity
Not Before: Mar 31 07:07:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b23bb920cbdf9ca63b14408425f5644f6ecf8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:03:a2:0a:cf:7f:ba:e4:45:d3:14:c5:3c:b1:
4d:5d:8f:3d:79:b5:5f:c5:fe:3a:e7:e0:98:60:14:
b2:d7:50:bb:20:ad:65:ea:c8:2a:0e:5d:be:6f:1f:
e0:9c:23:ed:cc:8c:73:68:42:80:70:5f:df:d1:e5:
83:4d:6f:58:fc:e7:38:84:10:52:8f:61:04:64:fd:
0b:33:82:01:e1:6c:25:71:15:18:fa:b9:5a:8a:ad:
c3:e3:81:49:d7:25:b6:c3:0d:af:53:be:3e:b0:0d:
9d:a7:c4:25:65:fb:6e:73:40:2d:f0:a2:bc:2c:67:
42:61:4b:90:dd:6b:06:18:b2:e8:f1:a4:4a:7e:a1:
ad:4f:52:b0:71:31:6a:cc:c4:a7:29:82:cb:48:b7:
df:cc:12:4a:a0:46:4d:9d:88:1c:d7:9b:dc:9b:2b:
a3:ef:27:d8:4b:29:6e:40:a9:a4:9a:b2:2e:da:c3:
5d:71:dd:b2:9e:8c:5e:47:95:14:36:0e:1a:36:2e:
41:f7:32:22:46:0e:36:cd:8f:e2:cf:b8:ac:e4:ad:
6d:ff:7d:06:6c:58:e3:d7:c2:33:a1:e6:c9:bd:2f:
56:05:52:f7:34:e6:bc:66:d9:c6:9e:7a:ba:62:51:
88:dd:7e:25:c0:62:e6:57:35:dd:88:ad:f1:28:17:
d6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:23:BB:92:0C:BD:F9:CA:63:B1:44:08:42:5F:56:44:F6:EC:F8:FA
X509v3 Authority Key Identifier:
keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/CyO7kgy9-cpjsUQIQl9WRPbs-Po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.241.0/24
Signature Algorithm: sha256WithRSAEncryption
26:9a:7b:85:7f:03:8e:44:0f:92:bd:8a:43:aa:e7:25:6e:09:
2d:c2:bd:a9:53:75:08:e8:75:74:cf:c5:41:1a:a3:ae:9c:fb:
24:87:90:81:2f:ab:2b:6e:46:e6:29:70:72:2b:21:07:bd:75:
a9:8e:e5:e7:7d:48:8a:4d:47:13:6e:47:5d:43:41:85:b0:84:
b3:9f:fd:72:4e:43:04:d8:ea:72:ca:fc:26:64:43:c0:47:01:
df:a3:8a:5a:e1:c7:37:21:70:7f:2a:98:1e:9b:8a:6c:4a:d8:
57:3e:2a:45:b2:41:6f:48:76:e9:04:b8:75:9b:0c:18:fd:a3:
bb:83:bd:9f:ec:9f:90:4a:48:2a:0e:a8:b5:8d:01:06:26:86:
ad:18:8a:a5:13:e3:34:6c:59:db:80:32:c6:f5:1c:b2:a6:a0:
d8:b5:b2:c6:cf:15:fb:f0:05:c5:9c:36:ef:bd:29:b7:8a:f7:
43:74:47:4c:12:32:08:7a:0d:a4:72:bd:67:9f:52:47:fb:cb:
1c:70:19:54:2a:27:27:98:20:3d:76:3c:b4:b5:fe:33:a9:06:
7f:93:a9:81:33:92:8d:b2:4e:ff:0d:08:15:28:43:c6:1d:26:
a1:65:90:7f:14:7d:31:55:2b:3f:9f:23:d4:b5:6d:50:19:6b:
e6:d0:de:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:47 2024 by rpki-client on console-ams.rpki-client.org