Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/jR_6gcHatEuKx7NIs5ubKvB0k8U.roa
File: jR_6gcHatEuKx7NIs5ubKvB0k8U.roa (raw, json)
Hash identifier: Gxv6GVoE7cJyDBJSWTdA1JLbteQ3ioujQQdkS3TpZqw=
Subject key identifier: 8D:1F:FA:81:C1:DA:B4:4B:8A:C7:B3:48:B3:9B:9B:2A:F0:74:93:C5
Certificate issuer: /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Certificate serial: 01856F14AEF7BC70967EF2044920878D53C7
Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/jR_6gcHatEuKx7NIs5ubKvB0k8U.roa
Signing time: Sun 01 Jan 2023 20:45:04 +0000
ROA not before: Sun 01 Jan 2023 20:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 185.161.149.0/24 maxlen: 24
185.238.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:ae:f7:bc:70:96:7e:f2:04:49:20:87:8d:53:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Validity
Not Before: Jan 1 20:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d1ffa81c1dab44b8ac7b348b39b9b2af07493c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:2b:74:53:1f:08:56:b9:e3:2a:b5:96:43:
ea:fc:80:56:af:b1:18:d4:32:68:46:21:30:f0:d0:
57:fd:37:8d:a7:a9:13:80:e4:62:96:5e:0b:a2:65:
9a:6d:78:1d:32:75:3d:2c:c0:0e:75:e5:52:b3:95:
71:b5:98:42:52:9a:54:95:ad:30:4e:01:e8:56:08:
c0:09:47:b1:66:49:5a:47:97:41:c6:2f:03:9e:57:
bd:86:6c:e9:08:98:00:2d:45:3c:09:69:b0:cd:8f:
53:8a:36:4f:62:4b:70:12:66:94:62:10:e9:ca:94:
aa:b7:7b:49:71:09:8f:aa:ad:ec:58:ac:3f:43:a8:
b1:72:c7:4c:c2:e0:3c:4d:05:29:68:10:4d:6d:c4:
00:5d:41:18:ba:bc:bf:f7:87:fe:19:84:f9:db:a7:
2d:8c:d7:0b:99:3c:1d:65:28:b9:7d:ea:41:8e:0a:
00:58:67:b6:2d:7b:5f:ac:8a:b3:a3:75:87:47:38:
95:1d:fe:c4:11:95:82:77:3f:3f:50:1a:fe:63:23:
0d:61:70:83:df:3b:ff:ec:82:00:79:9e:47:54:8d:
f4:21:94:2e:01:bb:64:1c:11:14:71:e3:70:88:09:
85:32:b5:87:0b:91:d8:84:15:ba:b4:55:d5:6d:43:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1F:FA:81:C1:DA:B4:4B:8A:C7:B3:48:B3:9B:9B:2A:F0:74:93:C5
X509v3 Authority Key Identifier:
keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/jR_6gcHatEuKx7NIs5ubKvB0k8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.149.0/24
185.238.178.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f6:a1:52:7d:76:ef:13:71:f9:3d:07:ca:73:d4:8a:13:9c:
30:73:14:92:f3:ed:03:27:05:f8:a5:79:b4:22:bb:b8:1f:b4:
8b:90:14:61:d0:ad:8c:0e:b4:72:36:bb:37:4c:4b:15:19:a7:
fd:b1:c2:4c:5d:29:65:76:2e:98:61:11:24:ad:8e:ff:a1:0e:
83:09:df:fe:09:67:d9:e8:15:25:51:b3:53:ac:54:9c:3c:c2:
36:b9:20:64:dd:dd:d7:31:41:56:4f:14:cc:64:3e:c4:a4:56:
22:42:74:de:da:88:55:d1:b6:15:ea:4a:3d:d5:5b:b9:8d:91:
96:ee:76:3a:c8:41:75:f2:10:a3:12:a9:8d:5b:73:a1:f4:6b:
1b:29:f3:df:08:7d:cd:7c:71:3f:45:fd:43:6f:a0:30:f4:67:
68:ae:46:db:d0:2b:84:ea:75:1f:d5:99:60:65:22:be:ba:b3:
72:52:15:e7:9a:93:b5:37:73:b4:42:99:61:b1:c0:f0:e7:f6:
42:4c:1b:95:e1:14:08:c3:36:ff:84:40:9b:85:6c:ee:08:22:
8d:23:8b:f7:50:0d:5a:4a:5d:aa:8e:b9:be:c6:eb:53:a0:ca:
2b:48:bf:c1:ad:8a:c9:54:a7:46:6a:64:f0:1b:ff:68:7d:e5:
cf:83:a7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:01 2024 by rpki-client on console-ams.rpki-client.org