Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/b4-XrYpicR1bUVgegMVgS92Ocsc.roa
File: b4-XrYpicR1bUVgegMVgS92Ocsc.roa (raw, json)
Hash identifier: bQbQomUV16kO5vKuBa/BGCc1HI17cRBGX8J7B8cKy00=
Subject key identifier: 6F:8F:97:AD:8A:62:71:1D:5B:51:58:1E:80:C5:60:4B:DD:8E:72:C7
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 01856C011F43A93EC0A65233D084DC7D08A7
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/b4-XrYpicR1bUVgegMVgS92Ocsc.roa
Signing time: Sun 01 Jan 2023 06:24:50 +0000
ROA not before: Sun 01 Jan 2023 06:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13259
IP address blocks: 185.221.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:1f:43:a9:3e:c0:a6:52:33:d0:84:dc:7d:08:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jan 1 06:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f8f97ad8a62711d5b51581e80c5604bdd8e72c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:87:ea:f3:54:e0:d9:66:fe:e6:c6:46:f4:
85:95:4e:d1:fc:33:07:f6:e7:d2:e9:c7:8b:df:73:
e1:95:ba:66:80:a4:d5:1e:42:ef:b2:69:a0:b8:95:
4e:07:a3:e4:85:68:44:66:27:cd:e1:c2:65:9b:1a:
1d:a7:8d:79:ab:d3:5c:a8:dc:b4:66:15:0d:4f:bf:
d3:18:b6:d2:fb:73:e2:79:f5:4b:c4:26:e2:59:3e:
9f:fa:dd:71:f5:c2:8a:85:1f:4e:ba:15:53:a0:a7:
50:68:54:99:c4:11:d6:3b:d4:31:2b:30:09:6e:c3:
01:62:dc:5c:fb:ad:26:9e:ce:94:9e:ff:0c:a0:44:
8a:5a:07:42:66:85:8a:90:8d:67:19:fc:72:9f:78:
40:cb:66:20:4b:85:8e:8c:b0:f7:fa:76:4f:88:d7:
9c:7b:cf:57:9a:c5:9b:db:82:65:90:e5:66:01:3d:
77:ec:e6:2f:24:bb:96:36:87:7e:cc:ce:30:44:ed:
61:db:b1:b9:cc:d3:39:6f:be:cb:29:97:4d:84:08:
4a:f2:61:f1:97:cd:50:bc:44:b7:78:99:7e:a9:73:
c7:d7:f7:66:4c:17:7d:70:4d:66:33:2d:2b:5c:c2:
80:88:00:cf:40:6e:42:9a:ba:a4:6f:62:82:be:81:
67:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8F:97:AD:8A:62:71:1D:5B:51:58:1E:80:C5:60:4B:DD:8E:72:C7
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/b4-XrYpicR1bUVgegMVgS92Ocsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.197.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:f8:1b:fa:0e:11:20:ae:5c:97:5a:3a:2a:0c:a1:3d:b0:d9:
dd:74:99:a2:39:43:ea:63:31:99:2c:55:2b:97:26:e9:e3:67:
79:4a:8a:2a:a8:54:93:25:4c:63:29:7a:29:aa:9d:24:bf:4b:
95:b8:c6:e1:c8:02:68:d0:a8:8d:6a:28:51:58:9b:05:92:00:
a7:a7:07:1f:c2:71:a2:99:ae:75:c8:0a:ae:32:60:ae:3c:9c:
e7:d5:47:b2:84:cc:8c:a7:00:57:cc:73:4b:6c:d6:3f:11:10:
ad:ed:b6:ef:60:c8:68:4e:32:8e:ad:ba:48:66:45:c2:8e:13:
2b:69:d4:ca:df:1f:e4:da:9a:b9:51:05:1b:58:99:d0:6b:8c:
13:b9:2d:21:a3:03:63:0d:67:ed:0b:5f:3a:8d:cc:c5:9a:95:
e6:93:06:2b:89:e1:b0:cd:ca:eb:47:c9:38:aa:02:7e:03:d5:
2c:f8:15:59:c9:2f:8d:b5:bf:e2:3f:42:74:e2:ce:ed:42:a9:
e7:b7:a0:7c:28:54:75:bb:d4:64:91:e1:a2:4e:3e:4c:54:65:
8f:42:51:af:d7:86:e5:40:be:68:68:45:8a:fe:6c:76:91:1e:
59:ab:20:d2:b3:57:d4:0f:04:a5:18:a7:6e:ee:29:8d:d0:bc:
8c:fa:ca:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:18 2024 by rpki-client on console-ams.rpki-client.org