Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/tL4kthCN_Y7qX_CEKwibf3II6dA.roa
File: tL4kthCN_Y7qX_CEKwibf3II6dA.roa (raw, json)
Hash identifier: u9Jj3NVWvnwsIkjreLt7RWisphHG4HPQhT30EdHjpNY=
Subject key identifier: B4:BE:24:B6:10:8D:FD:8E:EA:5F:F0:84:2B:08:9B:7F:72:08:E9:D0
Certificate issuer: /CN=b7a670e51c96419fc52028b12e45655ef914ddbb
Certificate serial: 01856BD381F2DA87065FCB6EA260490EC89A
Authority key identifier: B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/tL4kthCN_Y7qX_CEKwibf3II6dA.roa
Signing time: Sun 01 Jan 2023 05:35:01 +0000
ROA not before: Sun 01 Jan 2023 05:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43395
IP address blocks: 185.66.224.0/24 maxlen: 24
185.66.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:81:f2:da:87:06:5f:cb:6e:a2:60:49:0e:c8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a670e51c96419fc52028b12e45655ef914ddbb
Validity
Not Before: Jan 1 05:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4be24b6108dfd8eea5ff0842b089b7f7208e9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:44:40:20:76:19:8e:2b:6e:53:de:de:ba:a2:
ab:68:b8:3d:75:d7:e7:af:a9:41:25:7d:71:d2:b4:
5d:53:a4:d8:c0:ae:13:c9:68:77:ab:eb:16:f1:3f:
f0:9d:27:a7:bd:de:c8:e4:29:34:d2:b6:ab:9e:de:
b5:29:0f:21:18:18:7e:5c:63:4d:a7:4f:8d:0d:e5:
12:2d:cc:d1:c6:89:fe:55:b9:12:4d:38:87:e8:d7:
15:27:75:fc:87:2c:d2:78:13:0a:56:9a:e8:c6:d5:
45:98:7d:b4:8d:a7:72:58:90:e6:3a:8e:cc:17:06:
d1:d9:e9:e4:53:91:22:34:4c:4e:aa:98:fe:5c:8a:
c9:e7:06:0b:72:25:b0:ec:df:be:a6:fe:7b:54:ff:
09:f3:ed:ef:e6:77:2a:44:76:9a:25:57:64:59:05:
05:c0:b1:c2:42:1a:5c:df:f1:d3:c0:d7:d4:58:6e:
ac:07:f7:d8:83:e9:25:1b:7b:71:6d:d3:d8:c7:60:
d3:6d:b1:48:96:39:0f:d6:1d:bc:57:55:bd:e6:79:
e7:2d:86:82:0f:04:5f:26:fd:3b:b4:0f:a6:6d:66:
cf:d7:7a:1d:eb:8a:c7:95:0d:35:80:5d:e8:ce:f9:
5b:57:43:d0:fe:f1:6b:25:ca:fc:97:03:6b:9e:ba:
be:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BE:24:B6:10:8D:FD:8E:EA:5F:F0:84:2B:08:9B:7F:72:08:E9:D0
X509v3 Authority Key Identifier:
keyid:B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/tL4kthCN_Y7qX_CEKwibf3II6dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.224.0/23
Signature Algorithm: sha256WithRSAEncryption
58:da:dc:bb:d4:a5:39:c0:31:1a:dd:12:88:87:a0:b4:ac:02:
57:53:48:4e:c3:f9:a6:e5:33:bb:a2:4b:70:92:21:58:e6:00:
23:68:66:6f:d8:7f:a7:f6:4e:c3:98:77:f1:a3:4a:96:f1:66:
f8:f9:17:30:57:ec:3b:1c:75:92:b6:46:a8:fb:e3:1d:13:56:
84:40:26:5c:6a:4e:70:50:0e:3f:d4:23:19:e5:46:95:f1:e9:
47:ba:87:7c:2c:ec:6d:c6:06:98:a3:1c:b3:b1:4d:01:7a:3b:
1e:c3:dd:5e:75:3d:54:ea:02:bd:93:e3:7e:89:9f:50:d1:ec:
20:19:77:55:49:69:8f:6b:57:6c:d9:17:27:ad:10:90:e4:6b:
9a:07:d0:18:5f:61:f8:80:ba:35:1c:56:aa:3f:ca:ec:06:df:
95:be:06:93:53:43:0d:51:9d:e3:8a:1e:35:c9:33:a4:56:34:
d6:ff:85:3e:fb:f4:68:cf:0a:15:77:6d:de:13:fc:4f:59:b8:
80:a3:99:a9:90:34:9d:57:c3:37:75:f1:86:6f:8d:88:de:f3:
be:87:a7:a0:a5:96:51:04:e8:e7:d5:64:69:95:ff:9c:4f:20:
c7:49:7a:d5:e5:5e:94:1f:88:4a:9f:8d:95:bc:93:4d:40:27:
e9:87:8c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:24 2024 by rpki-client on console-ams.rpki-client.org