Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/62jAeMPKkZAkYZxaoCfCa7UIS7g.roa
File: 62jAeMPKkZAkYZxaoCfCa7UIS7g.roa (raw, json)
Hash identifier: fEFefy0tn0HMkNeMY67ejEO6n+DVkrLXvCb1Qt43Ero=
Subject key identifier: EB:68:C0:78:C3:CA:91:90:24:61:9C:5A:A0:27:C2:6B:B5:08:4B:B8
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018E9F2B6659B8691824B0443BC66627308F
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/62jAeMPKkZAkYZxaoCfCa7UIS7g.roa
Signing time: Tue 02 Apr 2024 14:16:45 +0000
ROA not before: Tue 02 Apr 2024 14:16:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48433
IP address blocks: 185.201.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 19:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9f:2b:66:59:b8:69:18:24:b0:44:3b:c6:66:27:30:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 2 14:16:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb68c078c3ca919024619c5aa027c26bb5084bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:db:42:6c:1b:fa:bd:0f:2a:78:04:93:57:
8d:98:15:b9:9c:79:79:87:26:15:48:90:93:7b:41:
c9:6c:c4:ab:5c:71:21:ca:68:dd:e4:bd:c6:16:e2:
77:a0:d5:77:49:e7:1f:e4:6a:22:ac:10:d3:19:04:
40:97:e0:49:85:25:ab:32:25:c7:7e:78:0b:b8:13:
9b:d9:02:9f:d2:91:c8:69:f6:25:4e:b1:a9:b8:bb:
c6:fe:a7:9e:41:af:03:a5:c5:94:37:e2:18:ec:06:
5f:1d:52:9a:cf:88:f5:be:d9:79:ee:b5:a9:fe:92:
3a:6d:a0:34:c5:88:c8:f0:bd:3c:9e:ad:8f:d1:3d:
cc:51:47:ed:62:df:e0:63:ab:16:d6:7f:19:1b:48:
bf:9b:75:b3:ea:49:06:62:ca:c0:a9:24:cb:2e:96:
82:de:4a:33:dd:b2:cf:72:65:de:e3:35:42:65:b4:
d3:a5:0d:d8:48:92:19:08:fd:32:f3:6f:45:48:64:
31:fe:a4:42:00:a5:52:95:0c:69:1f:55:ff:04:df:
64:bb:d2:71:bf:e7:52:3c:b3:ef:c4:bc:98:dd:4f:
17:28:a4:cc:b3:70:28:65:c9:96:b0:6c:f7:45:2b:
fc:b5:e8:16:ee:36:2f:d6:20:da:89:cd:1d:38:35:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:68:C0:78:C3:CA:91:90:24:61:9C:5A:A0:27:C2:6B:B5:08:4B:B8
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/62jAeMPKkZAkYZxaoCfCa7UIS7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.29.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:cb:75:cf:5c:fe:f6:6e:2f:9c:d1:f2:80:1b:84:cf:71:70:
23:10:47:1a:52:2a:3b:b9:c7:fd:ef:99:7d:55:97:22:67:65:
2b:af:17:7e:83:f9:25:5b:92:0c:33:3e:7e:a6:b7:44:ca:90:
d1:5d:d1:ca:ea:4f:08:79:61:e4:71:32:a8:92:e9:91:f4:14:
5d:61:0d:0d:5e:fc:60:ef:9f:02:fc:5c:53:cc:50:4f:0e:81:
85:f1:53:fd:36:ab:b8:ca:a2:1a:6a:b0:7f:10:4e:d7:f4:e0:
3d:13:31:bb:69:38:79:e8:74:70:ec:c1:a3:57:38:30:fe:53:
43:10:77:fa:e8:0f:37:79:a0:b8:9e:b5:4c:ac:ed:75:7c:ca:
61:c7:80:8b:e6:3f:ef:87:91:33:1a:71:e4:1d:b2:b6:ff:d9:
8e:e6:28:bc:e4:97:39:c3:34:f4:c3:f5:89:0d:01:d6:4a:1a:
32:e0:7f:df:81:f8:81:31:71:10:41:00:12:c6:1c:43:e0:49:
44:92:ff:3b:19:f3:3f:13:07:ae:48:85:46:06:5a:4d:77:1c:
76:6e:df:a3:e7:f8:6a:65:b6:69:80:d9:90:c3:11:42:01:b5:
b6:ef:2d:ff:cc:b6:df:58:1b:14:f5:de:f8:a4:74:43:6f:ec:
24:1c:96:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:51 2024 by rpki-client on console-ams.rpki-client.org