Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/F7ARhmxxRUqhrX_l6KZmGLGWUQ4.roa
File: F7ARhmxxRUqhrX_l6KZmGLGWUQ4.roa (raw, json)
Hash identifier: RMcDSj0PpAWkiL6vzNNQzUYwCam6entcM2kjgTy21kk=
Subject key identifier: 17:B0:11:86:6C:71:45:4A:A1:AD:7F:E5:E8:A6:66:18:B1:96:51:0E
Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial: 018ACBAD274A8B55640E1BF9EA5C362806C4
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/F7ARhmxxRUqhrX_l6KZmGLGWUQ4.roa
Signing time: Mon 25 Sep 2023 09:30:37 +0000
ROA not before: Mon 25 Sep 2023 09:30:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 185.236.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cb:ad:27:4a:8b:55:64:0e:1b:f9:ea:5c:36:28:06:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
Validity
Not Before: Sep 25 09:30:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17b011866c71454aa1ad7fe5e8a66618b196510e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b3:60:e4:69:fc:e9:80:23:36:13:c6:04:bf:
95:13:8a:03:f9:87:9e:9d:3f:0d:27:85:8b:65:43:
af:7b:a8:0b:6e:3d:cb:d7:1d:e7:ce:a2:bf:f5:a2:
28:2a:77:61:d8:13:c2:fe:05:f4:d2:63:56:e3:4d:
8a:8d:67:16:03:26:24:33:93:10:50:98:a6:f2:34:
36:e2:9d:3b:e3:fa:66:65:7f:27:88:3a:b7:88:28:
9d:37:e0:e7:d1:9d:0e:2b:a1:ff:e8:cf:de:68:71:
70:39:00:bd:02:06:98:3f:14:26:2f:c2:05:c3:be:
aa:f2:9b:d3:53:9a:73:e2:11:93:55:62:5c:51:33:
11:fe:cc:5d:47:91:a5:ea:08:d5:8c:eb:1a:24:37:
1e:49:90:83:08:d1:8f:07:9f:2d:f5:d1:33:87:7f:
0e:bc:5c:1d:a6:70:a0:0b:19:47:5d:47:0c:e5:23:
41:08:76:9c:92:94:a9:c3:30:1a:21:64:91:fb:52:
dc:56:37:c6:24:0d:d0:c8:06:2b:01:ea:f1:d0:d6:
6a:a7:06:79:0d:41:91:6b:17:51:08:e1:eb:91:35:
9d:48:87:aa:d3:09:e6:72:4a:d6:a8:ad:3d:37:9d:
4c:6a:a4:5d:68:f3:02:7f:c7:a1:8f:fe:a9:02:06:
71:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B0:11:86:6C:71:45:4A:A1:AD:7F:E5:E8:A6:66:18:B1:96:51:0E
X509v3 Authority Key Identifier:
keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/F7ARhmxxRUqhrX_l6KZmGLGWUQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.221.0/24
Signature Algorithm: sha256WithRSAEncryption
76:0b:3c:ab:03:3a:39:f1:61:c8:45:b8:95:4c:d2:0e:6b:de:
b5:06:73:cf:6c:5a:01:e5:d3:99:a5:e2:94:89:2a:3b:47:10:
76:85:52:a5:ba:a3:c0:cf:0f:c0:4f:0d:84:05:d1:47:8d:ca:
09:2b:a3:a7:48:89:ad:b9:b7:7b:fb:3f:55:28:62:e3:27:1d:
91:8a:90:9a:80:31:1b:33:58:06:51:db:22:3a:e4:9f:76:64:
40:0f:a4:6e:fd:40:d0:df:b6:bc:b0:d7:4f:b5:fa:cc:65:ee:
e8:da:fc:47:b5:06:00:97:d3:29:b1:02:0e:df:6c:21:f2:19:
22:ca:bc:98:d9:4e:5a:c3:3b:16:a1:07:46:40:90:d0:da:ab:
0f:5c:3c:fe:41:63:86:2c:37:eb:df:48:3f:74:7b:03:4a:96:
42:3d:5c:0c:9b:7b:4b:48:c4:c9:f3:94:a6:e8:8c:00:14:8c:
0c:61:60:16:c0:f3:36:b9:18:f6:dd:86:52:02:73:90:6c:3f:
12:46:a5:47:7a:ce:14:60:88:26:13:3d:db:2a:81:87:52:e2:
f1:be:eb:b3:66:78:3f:0c:f8:cf:cd:8a:5e:23:26:56:f1:cf:
e1:a9:fb:12:08:3a:9c:73:25:f0:e5:ff:58:6f:15:66:44:ca:
c7:bd:07:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:27 2024 by rpki-client on console-ams.rpki-client.org