Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/j-SK6Ksqq5HMN8BTfWrgKF-xHO0.roa
File: j-SK6Ksqq5HMN8BTfWrgKF-xHO0.roa (raw, json)
Hash identifier: POfS7Mo/geYRgPMAK+XFLKSdXT02+rNSvwJvO2MM5pU=
Subject key identifier: 8F:E4:8A:E8:AB:2A:AB:91:CC:37:C0:53:7D:6A:E0:28:5F:B1:1C:ED
Certificate issuer: /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial: 018CC64AB6D2830BF5124014C22D0B74C8E3
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/j-SK6Ksqq5HMN8BTfWrgKF-xHO0.roa
Signing time: Mon 01 Jan 2024 18:30:34 +0000
ROA not before: Mon 01 Jan 2024 18:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51786
IP address blocks: 185.117.12.0/24 maxlen: 24
185.117.13.0/24 maxlen: 24
2a06:8280:10::/44 maxlen: 44
2a06:8280::/44 maxlen: 44
Validation: Failed, certificate revoked on Sat 06 Apr 2024 21:40:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:b6:d2:83:0b:f5:12:40:14:c2:2d:0b:74:c8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Validity
Not Before: Jan 1 18:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fe48ae8ab2aab91cc37c0537d6ae0285fb11ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:f4:f6:db:e4:b6:c6:52:c0:51:0a:cd:a2:
68:f7:ae:98:3b:b8:ff:35:7e:78:7e:44:9c:76:8a:
5d:52:5c:55:17:a9:78:3a:6a:a0:10:6b:68:09:b0:
de:1e:c1:22:b0:26:11:33:20:5e:bf:6b:19:7b:0d:
51:f3:8d:68:e2:c6:92:89:d5:f5:cd:ad:d9:c2:4c:
dc:90:c7:c0:18:ae:75:97:c2:59:db:a2:10:ea:b4:
43:9a:90:ab:f7:84:85:77:58:e9:1b:ae:7b:33:c9:
f3:df:79:ee:0a:87:cb:6a:dd:0c:f1:b4:28:af:bf:
f7:ca:2f:e3:a9:39:96:3b:73:a7:58:51:0c:5e:8f:
7f:bb:8c:1e:44:25:04:8c:f2:cd:12:ff:aa:f2:79:
ff:b2:1c:a5:7c:6d:b6:1b:a7:62:39:6b:41:bb:4b:
7c:24:36:fa:5e:b9:02:ac:62:01:90:9c:89:10:26:
25:8f:61:d8:bd:89:78:6e:9e:e7:82:cc:f7:5f:8f:
6f:36:a9:a9:2f:ed:4c:dd:d3:a0:08:76:aa:65:ab:
29:7b:f8:9d:d1:eb:e5:b1:b9:02:aa:b5:69:82:09:
53:d9:aa:8f:7f:0a:fc:5f:e6:36:99:c6:9e:9c:3e:
5b:7a:26:fd:bb:7b:e9:ec:16:32:4c:74:48:46:3f:
8e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E4:8A:E8:AB:2A:AB:91:CC:37:C0:53:7D:6A:E0:28:5F:B1:1C:ED
X509v3 Authority Key Identifier:
keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/j-SK6Ksqq5HMN8BTfWrgKF-xHO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.12.0/23
IPv6:
2a06:8280::/43
Signature Algorithm: sha256WithRSAEncryption
ab:23:b8:06:67:85:fb:20:61:74:4a:01:96:63:8a:48:d4:6f:
ae:1b:86:23:32:ff:73:d3:4c:b8:9a:6e:1c:83:b3:31:b6:45:
a5:66:e2:f1:71:2c:32:50:a8:f7:98:9b:85:6e:57:fc:f3:40:
c9:98:07:8c:e4:3c:aa:97:27:71:9d:c1:ae:75:1c:38:91:33:
85:60:f1:d6:bb:5e:ed:cb:05:6d:af:37:6f:27:19:87:53:10:
bd:57:68:e5:82:63:f3:2e:53:09:a6:01:a1:01:c8:d4:6a:86:
66:f0:3e:18:21:80:55:62:2c:67:cd:49:13:bd:cb:71:fd:71:
b8:71:58:f5:67:44:43:1b:69:ca:c1:41:37:c8:5a:bf:ab:51:
99:cd:84:2a:28:20:97:64:6c:8d:53:e8:60:5f:fe:5e:06:bd:
f0:3f:3e:e6:80:0b:80:2a:d9:f9:ec:4b:83:38:41:a2:cb:d1:
df:46:bc:e5:c4:a0:97:72:5c:19:56:f9:f8:9c:08:eb:c2:10:
f1:d4:a3:53:53:97:29:a7:98:54:5a:a2:1d:cb:e1:c3:a7:80:
15:fc:3f:77:ee:9e:1c:d4:17:e7:bf:f7:8c:c9:28:fa:8e:5f:
03:c5:c0:76:a8:c5:9c:07:35:ba:64:3f:44:a6:9a:c5:13:7b:
04:9f:7a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:53 2024 by rpki-client on console-ams.rpki-client.org