Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/iKlcv3jD38KsFJOO-_-UpxNGWyE.roa
File: iKlcv3jD38KsFJOO-_-UpxNGWyE.roa (raw, json)
Hash identifier: RHqticiKzCtVQ2YCGceJsSGdoezLaCtrWmJDpLASPrM=
Subject key identifier: 88:A9:5C:BF:78:C3:DF:C2:AC:14:93:8E:FB:FF:94:A7:13:46:5B:21
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 0190C57801552B5592032978993AB426F0BA
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/iKlcv3jD38KsFJOO-_-UpxNGWyE.roa
Signing time: Thu 18 Jul 2024 10:51:34 +0000
ROA not before: Thu 18 Jul 2024 10:51:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 329272
IP address blocks: 185.240.48.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 07:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c5:78:01:55:2b:55:92:03:29:78:99:3a:b4:26:f0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Jul 18 10:51:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88a95cbf78c3dfc2ac14938efbff94a713465b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:a3:79:f1:01:96:d3:80:b3:07:f8:77:30:
c2:52:23:30:e2:44:de:d1:87:9f:49:30:79:e0:84:
a5:d2:cf:9a:f1:66:4d:91:79:2d:70:c4:74:a2:a6:
e3:8f:2e:12:0f:e6:70:ce:77:e9:3c:c4:8a:b0:f5:
b3:d8:c4:d3:93:12:3e:44:07:2f:ae:3c:4f:24:c5:
c4:f3:0e:c3:45:c6:10:01:aa:a2:18:01:1d:fe:34:
5d:71:0d:b1:d4:fe:f8:47:ab:cd:41:99:75:e4:ad:
5a:20:bf:14:55:8e:ba:9d:c0:58:dd:7b:82:3e:dd:
31:52:50:cc:af:c3:96:a1:ec:ba:2e:b6:e0:4b:d8:
90:d7:eb:05:26:6a:ae:11:82:63:f3:5e:eb:6e:7b:
fd:58:ff:57:53:80:19:e0:6a:51:ff:34:6c:48:40:
af:6d:11:35:10:70:5b:08:8c:63:06:6f:33:b2:7b:
15:14:56:d4:d5:b3:6a:af:8e:fa:e0:56:38:40:4a:
6b:29:fc:12:c3:95:64:50:32:a0:c1:21:96:fc:d2:
12:97:06:9e:66:95:52:91:36:03:e8:24:c6:a2:a9:
6b:96:e5:6c:18:52:b4:af:8b:bf:2b:14:96:ee:f7:
0b:91:60:61:76:12:0a:b1:15:f2:ba:71:ce:f6:dd:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A9:5C:BF:78:C3:DF:C2:AC:14:93:8E:FB:FF:94:A7:13:46:5B:21
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/iKlcv3jD38KsFJOO-_-UpxNGWyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.48.0/22
Signature Algorithm: sha256WithRSAEncryption
24:4c:80:3c:13:1a:f2:9e:b8:e1:03:0a:78:6d:9a:cf:fd:2b:
d3:89:54:40:b4:db:ce:4f:99:74:42:15:9e:4f:a6:f7:b6:41:
57:7d:c6:b4:74:32:07:32:a6:8d:20:9b:6c:d3:5a:62:a5:f3:
c6:d9:94:97:c5:8b:20:cd:92:74:91:d2:7c:09:7a:b1:4b:5d:
e6:e4:46:ad:4b:54:dd:d7:1a:20:28:8c:42:73:c2:8b:86:96:
15:de:f2:3d:19:ef:e3:c9:f1:99:3b:6b:9e:33:e1:71:fd:6c:
39:17:df:1d:d7:cf:65:23:02:bd:21:4b:0c:d3:1b:16:29:eb:
91:36:a5:fb:af:37:67:4d:41:2e:58:98:7f:4a:ca:52:6b:c1:
93:99:d8:4e:27:e8:3b:a9:58:95:9c:89:87:03:48:1a:83:5e:
64:e4:4a:4b:5c:6c:0c:2a:64:21:7f:61:f2:d9:64:2a:22:7a:
d2:79:e0:85:6c:ed:94:18:8d:98:ea:8c:db:cc:68:75:9e:2d:
e4:2f:04:10:a8:d7:ec:f5:10:54:9c:c1:0b:75:bf:93:8b:26:
71:fa:92:74:09:58:8a:41:ac:21:d9:bd:85:67:12:a2:f4:aa:
9c:d9:a7:d8:49:39:5e:69:ba:70:d7:64:dc:bb:65:75:03:aa:
75:a6:f9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 09:02:42 2024 by rpki-client on console-ams.rpki-client.org