Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/iaVbi_EPVqGgGTWhw74rA1BcaQE.roa
File: iaVbi_EPVqGgGTWhw74rA1BcaQE.roa (raw, json)
Hash identifier: n3z4VSnTpvmfCIhno1iq/EDQOvmVXV3Cmp9hk1IwnNU=
Subject key identifier: 89:A5:5B:8B:F1:0F:56:A1:A0:19:35:A1:C3:BE:2B:03:50:5C:69:01
Certificate issuer: /CN=0e36a05fae760691f70cfb5b4f6249947abade87
Certificate serial: 01856F4B6890CDE0FA263CD4568AB4837713
Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/iaVbi_EPVqGgGTWhw74rA1BcaQE.roa
Signing time: Sun 01 Jan 2023 21:44:51 +0000
ROA not before: Sun 01 Jan 2023 21:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9051
IP address blocks: 185.124.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:68:90:cd:e0:fa:26:3c:d4:56:8a:b4:83:77:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87
Validity
Not Before: Jan 1 21:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89a55b8bf10f56a1a01935a1c3be2b03505c6901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6d:a5:c6:56:fa:3a:a6:69:00:1b:0b:dc:92:
c7:d6:b2:fc:74:62:54:6e:6f:2c:13:ef:07:b5:96:
07:76:4b:f0:f9:b6:45:91:47:a9:04:66:81:bc:d2:
35:d4:ab:55:9f:00:9b:61:50:db:5c:f4:30:1d:00:
6b:59:0d:b6:03:4c:58:0d:e4:06:57:39:4e:64:64:
d1:34:96:1f:f5:03:93:62:ae:bf:f2:41:c7:d0:91:
64:78:bd:cb:84:d3:e2:90:b3:9d:95:4d:df:fc:27:
6d:36:01:01:56:54:7a:9b:fa:28:d3:ad:5e:74:ae:
b9:4b:f6:23:31:2e:57:7f:c3:c8:d2:a4:df:51:e0:
70:41:96:5e:a1:b0:4b:73:c3:dd:36:81:2a:9b:56:
65:d9:33:8c:53:4e:94:c8:d4:f1:b2:9f:1c:bf:35:
ea:df:b0:61:d3:7f:d8:9f:da:2f:8d:25:02:fb:12:
6a:01:48:62:c1:c8:75:de:c1:6d:2d:62:fb:01:6b:
74:e8:2d:6c:4e:80:38:92:5e:84:ff:ff:cb:eb:29:
54:a9:76:2b:21:3b:1f:9c:f5:a4:71:a7:18:a2:94:
16:be:c0:d4:c7:a9:6d:de:e0:18:f2:22:ec:ed:02:
6f:59:f8:29:bf:3d:d3:f4:fa:77:0c:dc:4d:42:c3:
e3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A5:5B:8B:F1:0F:56:A1:A0:19:35:A1:C3:BE:2B:03:50:5C:69:01
X509v3 Authority Key Identifier:
keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/iaVbi_EPVqGgGTWhw74rA1BcaQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.247.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:4e:91:67:36:4a:67:85:6b:54:fa:5d:0c:70:e6:61:ae:fa:
db:fd:b9:02:51:b6:39:b1:46:cb:db:4b:24:c8:da:b8:9a:6d:
bd:1a:c2:82:38:de:04:c3:8c:29:4f:bb:64:7e:73:f6:57:5b:
e4:8c:48:b3:59:b7:52:30:2d:86:90:11:d3:1e:6c:24:1e:31:
3a:a3:e0:65:0c:b2:39:67:e4:b4:ce:8d:0e:41:12:65:12:75:
e8:61:70:cf:48:b8:19:76:27:d5:c4:0b:a7:8d:c1:3c:a8:b4:
28:ae:7b:c1:b1:09:56:86:f2:03:1f:4a:2f:69:22:6d:1f:57:
a1:20:34:ab:9a:31:9c:06:6c:5f:db:b7:58:3b:87:53:50:20:
eb:28:9b:6f:c8:ca:74:05:b5:a9:e1:5d:59:dc:bc:55:ab:f6:
f4:02:2c:35:7d:c7:68:49:b4:ca:4f:4b:98:c3:ed:15:39:c9:
74:f0:1a:c4:e1:a7:5a:cf:28:d8:1b:f7:43:05:8d:c4:ac:6a:
fb:54:93:5a:1d:dc:8b:dc:d8:eb:c7:61:25:15:e1:63:fa:6b:
93:34:0a:ed:ec:c2:68:6c:16:db:73:c2:9c:a9:9c:38:98:0a:
0d:cc:05:c5:b5:ef:89:9c:ef:b1:58:f7:48:d9:af:4c:10:04:
f4:c7:2b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:20 2024 by rpki-client on console-fra.rpki-client.org