Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/bgfeG3I8l1cmXx2-uT3PlXm9LAs.roa
File: bgfeG3I8l1cmXx2-uT3PlXm9LAs.roa (raw, json)
Hash identifier: GYwM3pE6v4HEW0of1zd2OmqdZlcQmd4f78e4tXj2ikk=
Subject key identifier: 6E:07:DE:1B:72:3C:97:57:26:5F:1D:BE:B9:3D:CF:95:79:BD:2C:0B
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0189F4406443FE46357E25FDAE34E74A268D
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/bgfeG3I8l1cmXx2-uT3PlXm9LAs.roa
Signing time: Mon 14 Aug 2023 13:33:27 +0000
ROA not before: Mon 14 Aug 2023 13:33:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202723
IP address blocks: 185.79.138.0/24 maxlen: 24
185.75.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f4:40:64:43:fe:46:35:7e:25:fd:ae:34:e7:4a:26:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Aug 14 13:33:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e07de1b723c9757265f1dbeb93dcf9579bd2c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:b4:fe:a2:7e:60:39:5c:63:fb:56:8d:34:
af:9a:9c:74:df:8b:22:d2:20:b2:91:c0:89:af:e2:
4f:54:c7:8f:45:ef:38:35:f0:f8:77:e9:7d:8d:93:
5f:ad:9b:ce:6f:99:a0:ef:98:67:c6:ad:6d:1b:8b:
cf:38:09:cf:f0:b1:c6:ea:6c:37:0e:eb:40:88:70:
a1:62:9d:9f:12:25:b8:f9:db:4b:ee:13:62:3c:31:
42:2d:ba:a3:26:26:8a:61:c4:81:63:e9:a4:cb:82:
b2:8a:15:90:21:80:91:95:5c:d7:c7:30:85:40:02:
38:66:79:c4:4c:3c:03:29:92:c8:0f:8a:f4:a5:c8:
22:ed:eb:f9:8f:cc:95:a6:1f:29:e7:d1:a9:2b:ec:
0c:c5:e9:51:a6:44:93:6f:e5:45:20:90:a7:7b:67:
dd:1c:b0:cd:19:26:7f:31:66:4b:3e:e8:72:97:ab:
fb:ad:fc:61:94:e5:d6:f6:b1:58:9f:4c:38:9c:51:
50:7a:52:d8:80:df:37:1d:02:ac:f4:f8:ee:48:2b:
9d:89:b2:6c:89:ea:d7:23:83:33:50:ab:c3:9a:eb:
87:b9:dc:6d:21:96:13:6c:eb:1e:b9:1a:d1:30:f2:
fc:8d:0f:c2:e3:2d:5b:32:48:64:c5:1d:57:95:36:
c1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:07:DE:1B:72:3C:97:57:26:5F:1D:BE:B9:3D:CF:95:79:BD:2C:0B
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/bgfeG3I8l1cmXx2-uT3PlXm9LAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.134.0/24
185.79.138.0/24
Signature Algorithm: sha256WithRSAEncryption
05:75:5a:d2:8a:25:c7:4c:b3:96:57:89:f5:98:65:95:62:2c:
c5:30:37:0d:7d:26:0e:3c:47:38:88:1f:fe:43:17:9b:ec:0d:
87:cc:08:f1:48:3e:85:e1:a7:42:72:84:96:de:d4:db:21:2f:
ee:36:6c:ad:89:43:5c:f2:b1:cf:cf:0c:0e:e4:ba:c3:08:7a:
17:4f:cf:73:da:ca:4d:4c:70:a5:05:12:62:31:ec:f6:46:1e:
72:6e:a4:ad:72:29:5d:6c:12:fd:2d:95:7f:9e:37:05:26:30:
f0:1b:ee:ec:2e:d4:5f:2f:dd:6b:fd:37:ec:9c:85:90:54:7c:
82:8f:54:df:e3:79:64:c5:b9:8c:e4:72:6c:46:75:6f:ff:39:
d5:75:8c:37:d0:77:d2:f2:9c:54:cb:12:73:51:c7:0f:97:37:
6b:61:65:e7:ec:26:bf:d4:c6:4e:d2:ca:83:71:f0:e6:79:69:
cf:d6:68:cf:06:58:53:e6:0b:8f:7e:a5:76:2c:fb:6a:81:18:
3d:7b:09:33:1f:e3:1f:3a:ed:4b:c7:d5:39:32:c3:af:95:01:
47:16:2f:2b:24:0d:7c:b4:a9:ef:cb:7e:fe:84:ac:9d:f7:7e:
86:a4:c8:54:46:0c:ea:7a:27:2f:0e:20:9c:ea:47:54:00:c8:
29:5e:ec:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org