Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/_Nl9Vzf3nRzvlv3fJrgyDRKWDBs.roa
File: _Nl9Vzf3nRzvlv3fJrgyDRKWDBs.roa (raw, json)
Hash identifier: c1I5C6J/Y/zqkTfdRh7Qz/cyxXnC8Np3Y3DqapfmHLY=
Subject key identifier: FC:D9:7D:57:37:F7:9D:1C:EF:96:FD:DF:26:B8:32:0D:12:96:0C:1B
Certificate issuer: /CN=61b866e323382caea961e7d2423e53cab5099131
Certificate serial: 01856E2655DEAB6EA4E98EBCFABDFE1793EB
Authority key identifier: 61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/_Nl9Vzf3nRzvlv3fJrgyDRKWDBs.roa
Signing time: Sun 01 Jan 2023 16:24:44 +0000
ROA not before: Sun 01 Jan 2023 16:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200741
IP address blocks: 185.33.14.0/24 maxlen: 24
185.33.13.0/24 maxlen: 24
185.33.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:55:de:ab:6e:a4:e9:8e:bc:fa:bd:fe:17:93:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b866e323382caea961e7d2423e53cab5099131
Validity
Not Before: Jan 1 16:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcd97d5737f79d1cef96fddf26b8320d12960c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5d:01:f5:9b:fc:81:d2:5b:b8:4f:d1:4b:d3:
17:94:61:88:f3:1c:9b:9f:10:2d:5e:70:9f:2d:91:
b5:b4:34:16:3e:fe:69:da:a5:2e:67:2f:e6:94:8f:
1c:92:3d:c1:36:12:fb:04:31:e8:40:df:94:8a:6f:
ba:c0:c4:01:b2:f5:a0:85:10:ea:64:c0:3e:26:54:
fb:5c:f5:9b:63:56:d6:4f:e7:1c:55:c9:b9:af:ea:
4e:cc:95:d4:7f:e6:fe:df:60:39:91:20:05:3e:76:
ad:f1:dd:91:22:b2:5c:4b:b5:1b:d5:78:0f:d6:3e:
87:17:ed:9e:d2:c6:7f:9f:db:7d:17:2e:ed:56:0c:
b0:6a:b8:5c:81:a3:9e:52:47:a1:20:78:18:74:b5:
89:68:11:1d:77:c5:41:ca:92:f1:82:27:11:f3:3f:
7b:a1:78:46:33:69:63:66:cc:5c:04:57:97:1f:e5:
18:95:de:81:01:7e:dc:34:8c:bf:fd:69:03:50:cb:
15:68:4f:4f:70:cd:fc:48:26:a8:cf:75:be:af:c2:
9a:25:26:f9:ac:69:12:80:12:af:b1:85:99:3d:eb:
d4:d4:6f:a1:da:c1:ce:b4:5d:3e:04:d0:69:b6:72:
5e:57:e7:eb:b0:cb:69:f4:79:e8:a7:82:df:be:a3:
61:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D9:7D:57:37:F7:9D:1C:EF:96:FD:DF:26:B8:32:0D:12:96:0C:1B
X509v3 Authority Key Identifier:
keyid:61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/_Nl9Vzf3nRzvlv3fJrgyDRKWDBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.13.0-185.33.15.255
Signature Algorithm: sha256WithRSAEncryption
96:de:57:17:79:7f:a3:30:79:90:c4:31:41:7f:f7:06:b5:dd:
af:ef:5c:0f:c3:25:c8:d1:bc:16:6b:b3:ed:73:5e:02:d3:17:
6f:f9:40:c2:1d:d2:42:7b:82:57:6c:31:c6:dc:91:c0:1a:3b:
83:47:2b:46:62:fc:18:a6:72:31:ad:c5:7f:82:a4:b7:82:7d:
ae:2a:44:3d:fd:5d:5d:59:ae:65:0a:3f:a4:e0:29:b9:ad:de:
08:74:a7:1f:ad:11:19:78:8d:db:73:ed:39:5f:0e:c3:fe:96:
1a:ff:30:9e:7e:27:40:28:f8:48:bd:ce:75:f8:db:6b:c6:80:
00:0d:9d:31:49:ac:3c:aa:2d:2e:40:05:cc:7f:38:bf:ee:ba:
0a:2a:99:72:e6:0c:11:9d:48:b4:c6:01:1e:6a:5e:6a:b6:40:
f9:1d:b3:95:2f:11:98:e4:f6:86:a9:28:99:3a:8a:ee:b5:dc:
44:87:70:da:5a:5e:2e:be:96:ad:f2:d1:9b:c4:99:39:5f:4e:
05:7c:fe:2a:42:08:77:56:0e:b6:43:56:2e:a5:13:f2:2f:38:
ee:4f:5f:55:81:75:4a:d6:10:58:55:99:44:fe:65:a1:3d:e8:
34:fa:1e:4f:71:62:34:9e:d7:42:44:5f:a2:08:88:89:09:c9:
a4:d1:2e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-fra.rpki-client.org