Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/Ea8fZzBxj9S3aV-B_jr-6KzgugU.roa
File: Ea8fZzBxj9S3aV-B_jr-6KzgugU.roa (raw, json)
Hash identifier: 8K8fCXgqOFm4OeaEjSXcp4SruxcjlLRLj7FGWd2YpJ4=
Subject key identifier: 11:AF:1F:67:30:71:8F:D4:B7:69:5F:81:FE:3A:FE:E8:AC:E0:BA:05
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01931B062E4199A0DD422C3796474928D18D
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/Ea8fZzBxj9S3aV-B_jr-6KzgugU.roa
Signing time: Mon 11 Nov 2024 11:40:10 +0000
ROA not before: Mon 11 Nov 2024 11:40:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35372
IP address blocks: 185.239.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 05:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1b:06:2e:41:99:a0:dd:42:2c:37:96:47:49:28:d1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Nov 11 11:40:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11af1f6730718fd4b7695f81fe3afee8ace0ba05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cf:1b:7c:9a:95:a4:6a:91:aa:ef:aa:cd:50:
9e:17:76:76:79:be:72:5d:f4:88:86:fa:14:81:d6:
d0:a6:8e:60:8b:c9:66:50:f7:ca:f3:c0:e1:80:c4:
b7:13:29:01:b0:79:f7:f3:b3:92:19:cf:0f:e9:15:
b9:31:90:ba:7a:91:e9:e1:fe:d8:26:76:da:18:84:
11:43:6b:59:d7:e9:ca:ed:e0:d6:1d:10:6b:59:d3:
9f:df:75:a3:5e:1b:a4:9f:a1:b7:1a:42:b7:6c:47:
77:a2:55:08:a8:a6:58:d5:63:48:0f:c0:f1:3f:b6:
ad:84:37:71:40:e4:3d:7a:4d:98:99:3c:48:0c:13:
7d:e6:09:a8:46:c4:6b:80:e0:64:c9:12:d1:15:b8:
c7:78:f8:72:69:96:ee:43:46:b6:6c:8a:c6:04:da:
a1:14:d6:92:c3:26:36:b2:f0:c2:7c:b7:0d:3a:d9:
99:86:f3:48:94:6d:e9:9b:21:d4:8a:0c:17:a7:37:
97:e5:89:ad:b8:58:a0:30:d7:9c:98:53:a7:63:70:
86:71:ae:d8:fe:4a:be:ba:5c:6e:49:53:9f:1c:34:
38:90:80:d4:6e:d2:2d:7b:f4:78:ee:15:e6:7a:2d:
80:8d:61:62:e0:ea:f7:b3:db:f3:fa:49:75:bb:32:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AF:1F:67:30:71:8F:D4:B7:69:5F:81:FE:3A:FE:E8:AC:E0:BA:05
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/Ea8fZzBxj9S3aV-B_jr-6KzgugU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.1.0/24
Signature Algorithm: sha256WithRSAEncryption
80:3e:9b:31:0a:7f:b3:1b:7e:db:7e:1a:50:a2:84:3d:82:48:
bb:9e:3f:24:0d:d5:c2:86:ce:36:86:af:de:f3:2e:09:8f:b1:
db:bf:55:70:35:52:97:ad:a3:2f:94:79:fb:af:c8:4d:a0:31:
7a:ac:54:d7:b5:a3:9e:b8:4b:fd:a5:42:3b:2c:d7:91:b4:03:
8a:68:40:06:05:a4:b9:ca:ef:40:f1:af:1b:bb:5e:9a:9f:22:
5a:cf:d4:36:18:e2:19:a1:e0:a8:4c:a2:03:14:be:2f:04:7a:
02:ab:bd:a7:b3:e2:2d:73:08:f3:7e:11:06:0a:77:5b:b6:ee:
65:15:ba:c2:61:6f:c7:44:56:81:ed:24:64:6c:c4:12:a0:be:
3c:b4:4b:ef:2a:24:dc:31:d4:34:e7:b3:f2:c5:b5:82:f1:4c:
60:e4:dd:41:bd:c4:ee:24:60:2e:17:ef:c7:8c:f2:22:55:45:
67:45:41:8f:b8:b2:3d:04:5f:d2:8e:c7:81:3e:b5:f1:4a:14:
f1:4f:db:9b:b0:23:8b:a3:53:82:fe:44:42:41:f6:4f:15:5a:
fe:55:26:d3:91:34:4b:18:22:8e:bd:88:8f:88:03:a4:3a:4e:
b9:e4:37:00:96:41:32:5f:45:20:80:bc:09:4d:ee:cf:06:1b:
85:72:19:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 07:09:48 2024 by rpki-client on console-fra.rpki-client.org