Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/0fGLutj6vEoS-boWAdMNVgRvWAg.roa
File: 0fGLutj6vEoS-boWAdMNVgRvWAg.roa (raw, json)
Hash identifier: YlRNrUNZdiDGvhtNIo9wY/Od3IVskAnhuXP4f0tG09U=
Subject key identifier: D1:F1:8B:BA:D8:FA:BC:4A:12:F9:BA:16:01:D3:0D:56:04:6F:58:08
Certificate issuer: /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial: 018572B41F502DB8966AEC50799EED31F2A9
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/0fGLutj6vEoS-boWAdMNVgRvWAg.roa
Signing time: Mon 02 Jan 2023 13:38:05 +0000
ROA not before: Mon 02 Jan 2023 13:38:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.215.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:1f:50:2d:b8:96:6a:ec:50:79:9e:ed:31:f2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Validity
Not Before: Jan 2 13:38:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1f18bbad8fabc4a12f9ba1601d30d56046f5808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2b:61:b7:19:b3:3b:e5:a2:1f:d9:2d:60:3c:
e7:94:4f:ff:31:c2:32:4f:f2:ae:90:a5:53:f8:29:
3d:b1:ce:ba:b5:c7:95:42:0f:6c:32:fe:95:b6:96:
60:87:76:02:4a:d6:08:ae:50:8f:0b:a1:ed:68:27:
93:f4:f3:a5:f1:d9:51:37:93:66:8c:03:df:0e:57:
ea:f1:40:84:38:93:af:28:a4:fa:61:74:30:f7:b1:
20:82:fd:d4:d3:fb:d0:bc:83:61:0b:91:89:34:34:
53:24:b7:01:05:ea:1a:73:ea:4f:c1:81:f5:a0:ce:
98:e6:92:49:a8:8d:38:ae:cf:52:9a:f2:87:6d:64:
d7:6a:5d:2b:85:ce:eb:68:b6:98:ac:9c:47:10:ad:
09:0e:6b:02:23:5a:1b:6b:31:f1:7b:7c:c2:3b:d8:
46:a8:15:d3:bc:83:c4:5e:56:35:b0:03:83:76:48:
d1:34:79:42:28:cf:03:e7:d6:30:be:b5:aa:96:cc:
28:4e:10:99:e3:75:04:96:45:97:63:8e:76:fa:d7:
45:bf:40:b9:b9:56:db:84:e1:4c:33:8d:bf:16:1b:
37:d6:c7:16:5f:0d:52:15:c5:e7:d3:dc:fc:73:a9:
ad:b1:cf:72:6a:db:47:f7:c5:24:df:aa:6d:73:15:
3c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F1:8B:BA:D8:FA:BC:4A:12:F9:BA:16:01:D3:0D:56:04:6F:58:08
X509v3 Authority Key Identifier:
keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/0fGLutj6vEoS-boWAdMNVgRvWAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.115.0/24
Signature Algorithm: sha256WithRSAEncryption
27:8c:df:df:67:d6:d3:9e:b6:b9:6b:6f:be:10:5d:a8:73:04:
31:e5:5c:8b:8b:51:80:f4:7b:89:62:d7:a8:0b:2c:9c:d8:97:
7e:d4:95:05:29:2c:49:57:77:74:cf:51:95:95:ff:14:93:4a:
53:62:13:30:08:4c:c2:9f:4e:b6:40:12:ad:2d:aa:46:02:bb:
d6:ad:f3:75:61:e5:52:ac:01:2b:e5:86:75:d9:e0:0d:e2:20:
f4:b8:30:23:dd:95:aa:41:52:2f:0e:25:60:65:5e:17:96:8c:
6d:c5:b2:b9:37:1f:7a:64:92:a4:35:4f:ba:1f:95:0c:2c:c6:
58:01:a8:70:31:7c:d3:d6:37:c1:bd:a9:99:29:48:cf:17:7b:
55:d7:f4:39:32:32:a4:91:e0:cb:29:12:e0:54:bb:3f:a8:04:
0e:aa:4b:37:b4:62:c4:e6:00:c6:1a:5b:ef:da:3d:d1:2d:2b:
5f:ab:d7:c9:45:d7:81:a9:1f:2e:43:11:21:a1:3f:b5:55:06:
f0:46:ed:df:a0:b1:82:36:d5:ab:ae:db:b7:f5:f8:82:44:bd:
99:03:02:08:b5:53:8f:e4:55:33:ed:44:ad:c6:fe:6b:49:43:
c1:30:a0:94:ad:ea:14:49:05:f7:cb:9a:dd:4f:1d:30:b5:5f:
81:ab:30:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:59 2024 by rpki-client on console-ams.rpki-client.org