Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/TJ9oBdVYOyO_5pJfdlSfE7SoGMo.roa
File: TJ9oBdVYOyO_5pJfdlSfE7SoGMo.roa (raw, json)
Hash identifier: A5sGeP/LHfSlAgjLTTtfc3n3VAU+K4wH/0d3v25ZTN8=
Subject key identifier: 4C:9F:68:05:D5:58:3B:23:BF:E6:92:5F:76:54:9F:13:B4:A8:18:CA
Certificate issuer: /CN=cd0c032892f695af4c13fb0aca8043d17b1b97bf
Certificate serial: 018823A364974D3F0DE1739DB85EBFE27FC3
Authority key identifier: CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/TJ9oBdVYOyO_5pJfdlSfE7SoGMo.roa
Signing time: Tue 16 May 2023 08:18:10 +0000
ROA not before: Tue 16 May 2023 08:18:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48828
IP address blocks: 185.137.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 May 2023 19:43:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:23:a3:64:97:4d:3f:0d:e1:73:9d:b8:5e:bf:e2:7f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0c032892f695af4c13fb0aca8043d17b1b97bf
Validity
Not Before: May 16 08:18:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c9f6805d5583b23bfe6925f76549f13b4a818ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:60:8c:67:3b:0c:26:30:cb:d4:8e:ac:41:8f:
be:6a:7e:ee:8d:a3:5f:d7:58:df:02:47:6f:60:87:
6c:3a:99:1a:8a:3a:3e:e5:5c:a5:96:b1:b4:0a:99:
cc:76:11:c0:3d:cb:23:0d:25:f4:2c:8b:c0:99:17:
11:ca:03:c4:6f:a8:4b:11:af:15:9a:b1:d2:c0:c3:
02:a1:6b:ad:46:07:c2:3c:82:f3:63:eb:13:66:3c:
64:38:36:70:cf:3e:05:cb:57:96:7a:c2:ab:c4:20:
f0:f1:12:2b:23:ce:94:82:25:9e:fe:cb:b1:49:47:
d2:94:27:1c:8b:22:13:57:5b:32:1f:8e:26:d8:7f:
53:80:ee:bf:63:26:32:35:c5:0c:98:a2:e5:01:0b:
c4:c7:9c:2e:e0:b3:9c:2f:21:cc:24:e4:5f:c8:ba:
40:83:56:c5:86:cc:08:69:cb:2c:47:d0:b3:a0:3d:
fc:fc:77:e9:a5:73:eb:59:0c:0a:bf:9b:1a:28:80:
50:38:32:76:e5:8c:e1:77:f0:38:b5:99:17:6c:b8:
4b:b1:26:4e:4c:07:1c:e0:7c:62:6c:f4:f5:d4:7c:
a4:33:71:36:21:64:96:76:4d:36:83:27:fa:da:9e:
74:21:ae:d1:b2:56:a5:85:d3:5c:47:66:4c:9f:82:
ff:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9F:68:05:D5:58:3B:23:BF:E6:92:5F:76:54:9F:13:B4:A8:18:CA
X509v3 Authority Key Identifier:
keyid:CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/TJ9oBdVYOyO_5pJfdlSfE7SoGMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.98.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:59:27:1d:3f:1e:c7:f2:9f:09:69:3e:43:f4:51:73:66:61:
c8:9b:eb:92:fa:7b:54:a2:18:44:80:74:e8:9f:73:a1:cc:c1:
33:18:67:32:9c:81:1a:48:4c:5c:33:ee:f2:02:95:3e:ca:14:
49:5a:6a:0e:51:c0:24:5c:58:7a:bc:54:38:5f:2f:5f:d0:e6:
64:88:5f:ce:bc:1e:89:a5:1d:11:ee:e5:86:bb:be:c8:9a:8e:
fd:d3:ac:6b:5b:dc:da:ff:4d:ac:ad:24:57:13:0e:77:4f:55:
22:1c:7a:55:8b:00:e9:6d:0f:3e:6b:97:0b:dc:7b:e7:3f:6b:
b1:4a:d9:34:c2:c0:23:11:e9:64:ae:a0:91:c9:c7:32:7d:78:
4d:9d:ef:3f:2d:a7:18:8f:ab:36:51:5a:29:09:7c:da:1c:60:
cb:f5:78:4c:28:ac:72:12:1e:a5:3d:96:0c:65:98:3e:e4:68:
e1:a8:29:fb:8f:76:47:17:5a:da:14:fc:40:6b:84:8b:06:f9:
66:eb:eb:45:7c:c2:cd:5e:f9:66:df:0a:c7:72:8a:70:3c:31:
95:1c:40:41:48:65:f8:3c:34:9c:62:53:8f:e0:ba:55:de:32:
7d:50:fb:cf:4e:34:6e:50:32:20:cf:4b:7d:a4:b1:2b:5b:c3:
3f:db:07:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:13 2024 by rpki-client on console-fra.rpki-client.org