Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/T4w0MXq087UF5E_j8a99uf81ekk.roa
File: T4w0MXq087UF5E_j8a99uf81ekk.roa (raw, json)
Hash identifier: kp/hroiVrhbyendnLx9W5s/5DacZjntm7kO/CSnmT0U=
Subject key identifier: 4F:8C:34:31:7A:B4:F3:B5:05:E4:4F:E3:F1:AF:7D:B9:FF:35:7A:49
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 01856DDD62D38CE8A452C3EFDAB07F23693E
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/T4w0MXq087UF5E_j8a99uf81ekk.roa
Signing time: Sun 01 Jan 2023 15:05:03 +0000
ROA not before: Sun 01 Jan 2023 15:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 185.132.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Feb 2023 07:51:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:62:d3:8c:e8:a4:52:c3:ef:da:b0:7f:23:69:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Jan 1 15:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f8c34317ab4f3b505e44fe3f1af7db9ff357a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:96:f8:b9:a4:92:fc:c4:8a:de:a9:00:6e:
64:e2:c9:b5:94:59:0d:a8:97:b4:d9:1b:de:c0:48:
92:75:2a:f1:16:b5:98:8b:cd:6b:fc:84:87:1b:3c:
0b:d6:f7:2e:32:77:a4:16:d8:8e:2b:1d:3f:c0:16:
14:5e:5b:52:b6:97:97:72:23:09:c1:90:f5:e0:4f:
78:52:a5:92:98:03:e3:2a:6e:2a:d9:47:f0:cd:bc:
00:11:4f:89:93:ee:bd:bd:75:72:6e:fa:3d:cd:79:
75:27:f0:bf:f1:d2:74:47:3d:db:e1:73:0e:0f:19:
e8:65:92:e5:40:f9:88:79:4a:64:ac:f7:00:ce:33:
38:51:e6:ad:48:c8:d1:79:4a:5f:26:55:16:28:46:
45:4d:61:81:15:03:99:81:48:b2:1a:b5:6d:f9:41:
90:3b:5a:2c:7f:10:fe:c4:d1:95:47:9d:df:67:f1:
db:08:9b:aa:6e:c0:22:c5:29:3d:63:54:ec:b4:47:
7d:e7:03:76:bb:c3:3a:83:3b:54:82:b6:78:e9:f2:
54:98:ed:40:8a:bb:b9:e0:84:8b:f2:84:87:9a:d0:
8d:53:20:70:4e:22:44:8c:45:3f:b0:28:ba:35:15:
65:dc:f6:1f:86:b6:04:6b:05:92:cf:31:d5:ef:9b:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8C:34:31:7A:B4:F3:B5:05:E4:4F:E3:F1:AF:7D:B9:FF:35:7A:49
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/T4w0MXq087UF5E_j8a99uf81ekk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.187.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:fe:31:b2:eb:a7:3b:dc:ef:97:3f:1f:30:f8:19:c7:ff:19:
fe:c4:b1:7b:d4:8b:57:b9:20:90:bf:be:23:ee:24:8a:e1:e6:
88:55:74:36:4c:b2:18:bf:81:ff:ae:0f:31:c5:d5:04:b6:ac:
0e:5e:83:db:71:86:e3:bf:59:28:17:98:31:93:58:91:81:f9:
e7:09:08:b3:cb:af:32:d9:db:fe:be:80:56:c4:34:9d:d9:cd:
1f:e5:ef:c4:a3:e4:ba:b9:ec:14:ed:b1:b9:36:6d:6c:54:6a:
7c:30:82:da:96:47:9f:f5:56:23:c3:56:b1:97:f6:08:3e:7d:
21:94:98:f1:3f:6c:3f:d7:04:77:06:96:11:6a:06:d1:b8:3c:
b9:3d:b0:e1:e2:31:85:0f:25:5a:e4:45:48:a8:8e:74:0d:95:
72:28:4d:1e:78:47:d6:a6:af:5c:13:d2:da:dc:c6:0c:82:23:
26:33:99:8b:8f:b8:92:9b:d1:10:bc:f8:55:e6:8e:ad:f2:b2:
4f:e4:be:a4:74:33:de:c4:64:74:ee:a9:16:a8:d7:96:07:11:
97:ef:c1:f3:aa:69:05:9d:8a:2e:6f:c7:d1:55:b3:b8:61:60:
d1:8c:e4:6f:91:b9:59:d5:ab:13:f7:de:db:34:32:25:28:f0:
35:6c:eb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:02 2024 by rpki-client on console-ams.rpki-client.org