Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/xn6op_c7e_HFAxvQmirYoA38OdY.roa
File: xn6op_c7e_HFAxvQmirYoA38OdY.roa (raw, json)
Hash identifier: NkNmUOEfUVFoVB+E7wGWSiw6kQK6Qj4xOyGYiFQJcWU=
Subject key identifier: C6:7E:A8:A7:F7:3B:7B:F1:C5:03:1B:D0:9A:2A:D8:A0:0D:FC:39:D6
Certificate issuer: /CN=84284d67c9abaf6fa8fea6142a5b2558c9cbcf74
Certificate serial: 01856D66368D15658F67C89288328144ED62
Authority key identifier: 84:28:4D:67:C9:AB:AF:6F:A8:FE:A6:14:2A:5B:25:58:C9:CB:CF:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hChNZ8mrr2-o_qYUKlslWMnLz3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/xn6op_c7e_HFAxvQmirYoA38OdY.roa
Signing time: Sun 01 Jan 2023 12:54:53 +0000
ROA not before: Sun 01 Jan 2023 12:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211136
IP address blocks: 185.15.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:36:8d:15:65:8f:67:c8:92:88:32:81:44:ed:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84284d67c9abaf6fa8fea6142a5b2558c9cbcf74
Validity
Not Before: Jan 1 12:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c67ea8a7f73b7bf1c5031bd09a2ad8a00dfc39d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:75:82:c7:e4:17:65:93:31:49:9a:24:e3:a6:
ec:ea:62:63:94:2d:d9:ad:3a:5c:26:a4:da:b9:8e:
dd:4f:49:83:fe:cb:92:2e:53:0a:ed:7e:49:18:db:
3c:0c:fe:fa:04:aa:13:79:ca:a0:50:f4:e3:e3:6a:
da:e8:07:ff:90:f1:f2:35:b4:d4:2a:38:49:fc:a1:
9a:c5:a7:c0:dc:15:12:1b:6f:22:9a:16:2e:db:2e:
30:f9:a4:15:9b:e6:a9:5f:02:b5:84:87:ab:d8:57:
fd:b2:60:f1:2c:6a:23:f3:96:5d:47:fb:0b:00:6c:
08:ca:9b:40:62:82:c0:fa:b6:38:36:1d:fb:17:07:
3e:11:f2:ab:81:44:71:94:25:a4:db:8f:f8:06:d9:
76:b1:51:5f:ae:af:ce:eb:d6:1c:8c:50:91:13:6a:
bb:bd:5b:e0:f5:29:9e:6a:21:15:23:dc:78:c0:17:
79:90:f5:73:98:cd:65:e4:77:17:86:61:0a:d6:3b:
16:5d:d5:8a:49:d1:8c:1d:c2:32:9e:03:e8:4c:98:
1c:ae:fa:b7:fb:1f:d7:b8:96:21:6e:2a:2c:78:5c:
15:10:a1:50:45:f3:93:7c:fa:80:ab:76:f7:e1:0c:
ba:a4:e0:0c:c4:9c:89:f8:56:c3:77:67:13:e1:b7:
15:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7E:A8:A7:F7:3B:7B:F1:C5:03:1B:D0:9A:2A:D8:A0:0D:FC:39:D6
X509v3 Authority Key Identifier:
keyid:84:28:4D:67:C9:AB:AF:6F:A8:FE:A6:14:2A:5B:25:58:C9:CB:CF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hChNZ8mrr2-o_qYUKlslWMnLz3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/xn6op_c7e_HFAxvQmirYoA38OdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.138.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:cc:5f:7f:28:70:5f:56:14:68:0a:48:75:93:95:44:40:6d:
96:4f:82:07:48:1e:69:79:23:ab:c7:6b:85:a9:d9:4a:e9:74:
89:a0:a9:37:66:86:39:08:a2:80:ca:41:e3:a9:44:da:5a:cc:
77:1b:ca:b1:5f:89:a1:71:e7:44:1a:c2:c1:49:2d:07:6d:d8:
5b:ff:a0:dc:78:f8:68:d1:f1:38:76:39:bd:7d:9d:23:37:09:
a8:f5:0e:02:04:dd:49:d2:fa:97:69:c6:17:a9:37:b8:9c:c5:
79:71:7a:6a:43:18:15:03:b0:61:1a:e1:f4:2f:ff:dc:68:b8:
98:bf:8d:5b:97:62:af:57:06:f9:c1:dc:ca:84:e1:99:8e:3d:
09:5f:74:5a:f5:20:a0:3b:f5:0f:26:ec:e6:3f:6e:94:fd:13:
b2:34:bd:52:a7:d9:d2:2b:69:f4:8a:13:5a:d7:50:42:10:b4:
0b:9f:f2:8f:9e:ab:a8:44:83:ec:a2:02:cb:b0:15:8f:09:f8:
d7:3c:cb:55:39:a3:c7:ae:e8:a3:54:d8:44:33:17:5b:f1:ec:
56:2e:08:6b:e2:d7:51:16:b5:24:e9:e7:6a:35:f6:98:c6:1c:
92:43:e9:7a:fd:67:ab:4a:61:b2:c3:50:2d:1b:47:f0:ef:9c:
bf:49:16:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:34 2024 by rpki-client on console-ams.rpki-client.org