Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/1-4GefwvBVZWNmVIgP0GccN0Mcn0.roa
File: 1-4GefwvBVZWNmVIgP0GccN0Mcn0.roa (raw, json)
Hash identifier: s9H14ilkbSNn8iAV8OI7nyTUFghhtZH81sO+xfSHkSM=
Subject key identifier: FB:81:9E:7F:0B:C1:55:95:8D:99:52:20:3F:41:9C:70:DD:0C:72:7D
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018BEBE42D3F7C2743F8388E01F740204608
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/1-4GefwvBVZWNmVIgP0GccN0Mcn0.roa
Signing time: Mon 20 Nov 2023 08:41:21 +0000
ROA not before: Mon 20 Nov 2023 08:41:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39134
IP address blocks: 185.177.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:eb:e4:2d:3f:7c:27:43:f8:38:8e:01:f7:40:20:46:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Nov 20 08:41:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb819e7f0bc155958d9952203f419c70dd0c727d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:e3:b0:5d:f4:d9:e6:0b:ad:08:de:69:99:
5f:d6:94:b5:1c:20:4e:11:fc:ea:90:a4:64:d2:e0:
b7:36:40:40:5b:9f:aa:a0:57:58:cc:9d:33:91:71:
90:00:22:7e:17:0d:7a:1b:56:4b:4a:04:fc:81:94:
89:10:83:24:b7:bb:b9:36:bf:41:5a:01:c7:ee:8c:
54:de:44:6c:ab:45:52:ae:4e:ff:3f:0c:c6:3a:37:
9c:ff:dd:a4:de:30:e0:33:dc:53:44:55:7c:be:49:
12:62:1a:04:8c:42:6c:8a:8c:45:f7:00:48:5e:0f:
51:b3:15:49:30:fc:c6:be:fa:b0:cb:e6:bd:e2:c9:
d1:9e:68:9b:c7:64:71:97:50:b2:92:c1:db:12:c5:
f7:c4:d3:59:a2:c0:c7:74:e0:5d:42:b9:88:84:15:
e5:70:0d:0a:0e:b2:f7:9f:da:04:40:2d:26:96:b9:
1c:ad:60:26:10:71:6c:f5:2e:a4:c7:9b:b2:ce:50:
a7:9b:aa:f8:dd:cf:40:31:8c:cb:b4:09:a7:2c:89:
73:15:8e:f2:34:8a:0c:94:8e:22:af:33:f8:e1:4a:
13:4b:4b:61:03:b2:5b:44:16:ea:a2:75:d6:3f:5a:
f3:55:95:84:ac:9b:2a:11:6b:8f:cc:40:17:13:3f:
3f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:81:9E:7F:0B:C1:55:95:8D:99:52:20:3F:41:9C:70:DD:0C:72:7D
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/1-4GefwvBVZWNmVIgP0GccN0Mcn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.239.0/24
Signature Algorithm: sha256WithRSAEncryption
39:14:fd:e4:c5:1f:80:c5:cc:88:e5:fc:b4:d9:ea:5b:e2:50:
58:6d:35:42:82:56:c0:70:25:dc:41:50:70:28:72:63:c6:2a:
03:08:73:57:68:ad:22:4b:89:74:e4:19:b0:a9:e5:e5:5b:16:
3b:c8:9b:6e:0a:9f:c8:7b:b5:e3:21:36:c5:f6:ab:c2:83:ea:
ee:8f:72:20:7d:a6:b0:16:a9:dd:3f:af:66:80:42:95:e2:79:
c1:84:62:ae:5c:48:32:a6:b5:ea:58:fa:08:76:a6:c1:00:da:
4e:87:1f:14:d7:23:5b:13:4f:af:91:fe:cf:ae:80:08:f4:32:
d9:c5:90:81:66:35:a9:89:b9:e2:60:ec:55:fc:fa:61:19:52:
87:c0:59:59:91:84:ac:77:64:c0:02:5d:93:3a:e6:09:7c:d0:
c7:52:27:74:c3:23:5e:fe:f3:20:dc:0c:42:6b:0c:1f:dc:d0:
51:c4:11:3e:62:9e:84:5e:f5:30:f5:16:0f:58:fe:28:e9:b5:
b5:7e:f9:0b:ed:8a:c7:4e:36:0e:e7:67:c0:da:bf:07:10:99:
80:39:d6:14:05:a8:25:11:c6:32:9c:cc:ff:da:9c:5b:af:da:
59:c6:42:41:3f:f4:94:94:32:23:f4:d5:72:1d:78:dd:2d:62:
7f:d5:4e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org