Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/XOe_kJxXqmy8kk7KqW5vnLv8kHE.roa
File: XOe_kJxXqmy8kk7KqW5vnLv8kHE.roa (raw, json)
Hash identifier: 91tBf7vdudx+BbFqR23hKLoknDIrCbLJqs2pSaRy8Hw=
Subject key identifier: 5C:E7:BF:90:9C:57:AA:6C:BC:92:4E:CA:A9:6E:6F:9C:BB:FC:90:71
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 018CC6B9252C3B3CEEFB8FF41DAB4468D810
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/XOe_kJxXqmy8kk7KqW5vnLv8kHE.roa
Signing time: Mon 01 Jan 2024 20:31:11 +0000
ROA not before: Mon 01 Jan 2024 20:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202777
IP address blocks: 185.235.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 21:35:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:25:2c:3b:3c:ee:fb:8f:f4:1d:ab:44:68:d8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Jan 1 20:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ce7bf909c57aa6cbc924ecaa96e6f9cbbfc9071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:1c:74:c7:07:7c:ff:1e:e3:2f:a9:99:92:
27:09:d9:f9:ef:2b:b2:86:ec:7b:61:e4:2f:c1:44:
a0:e7:ab:01:68:de:21:e7:d9:d6:2f:ca:85:a2:37:
e8:e9:2b:44:e1:bc:46:d4:98:e1:3f:dc:43:93:b8:
f9:c9:d5:5a:e9:41:d5:29:66:58:5b:ba:75:57:81:
d5:36:3a:7b:54:42:a2:83:d2:d8:8e:b5:5c:8e:0e:
10:30:fd:71:37:c5:cd:58:b3:af:58:76:c0:98:d3:
d6:8f:be:29:ff:8d:f8:d4:1c:16:25:66:78:54:e7:
96:3c:95:81:dc:c3:7b:a5:37:dd:ab:eb:9d:08:09:
90:0b:8d:ac:e3:69:49:1d:1b:80:22:59:00:04:cc:
46:d1:dd:86:05:e5:33:10:86:e5:4a:cd:33:90:6b:
44:b5:63:fe:c2:9d:90:63:09:cf:e9:04:3c:6a:e5:
16:62:f7:85:83:7f:69:7e:57:a2:b5:46:f1:33:68:
17:5c:8e:7f:ed:1d:3c:ae:e7:d1:f4:a8:10:e2:5a:
74:9b:a4:f5:d8:8b:d8:00:df:f0:a8:87:21:87:78:
cf:b8:9c:c8:d4:da:18:d1:56:37:49:73:07:bf:39:
28:0f:02:19:e1:6f:fa:94:4a:09:e3:19:a7:23:a2:
d9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E7:BF:90:9C:57:AA:6C:BC:92:4E:CA:A9:6E:6F:9C:BB:FC:90:71
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/XOe_kJxXqmy8kk7KqW5vnLv8kHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.141.0/24
Signature Algorithm: sha256WithRSAEncryption
32:db:0d:54:30:08:d2:94:db:b5:35:7b:95:ca:26:c2:b1:25:
c5:a7:80:ca:4a:b3:0b:cb:9e:9e:4c:79:f8:95:8f:bc:b8:fb:
51:c7:5d:d4:e1:83:17:c9:13:6e:0d:50:2f:a9:90:66:94:0c:
2d:9a:aa:99:68:b5:8d:45:34:ec:0b:58:e7:bc:8d:ac:3c:93:
dc:2f:19:0a:32:8f:e5:37:e6:38:f3:9a:a8:72:2c:66:81:00:
23:f4:e3:c0:82:08:a7:89:b1:78:07:5b:20:96:3b:28:f0:de:
6e:b1:a9:f5:b1:2b:0a:51:c9:ca:5f:26:41:16:d7:55:9c:f4:
b0:b3:51:72:22:49:91:83:91:01:a8:a5:99:81:39:66:43:d5:
62:b4:64:d5:ef:82:c2:d2:93:e5:4f:d4:14:1c:11:17:6a:99:
6c:90:75:7c:81:8f:de:11:6a:e7:a7:fc:82:73:63:62:72:e8:
2b:22:7c:58:55:2f:a6:f7:3e:eb:b7:07:10:83:92:90:38:65:
dd:9c:cb:78:75:78:b7:75:9d:e5:eb:7f:29:c6:17:d8:29:b1:
f9:ce:7a:b4:c0:3b:40:70:ba:ce:20:d3:e3:80:ec:67:a8:f7:
71:49:99:ad:15:10:e7:ea:d5:d2:68:c6:cd:c9:f7:7a:e5:3a:
b4:f2:8b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 23:09:54 2024 by rpki-client on console-ams.rpki-client.org