Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/tKfeEFdBrXgbh7RRpfsSdh63aUA.roa
File: tKfeEFdBrXgbh7RRpfsSdh63aUA.roa (raw, json)
Hash identifier: 8bSNzOZDLfU0xwnIChKQo5ignlHMyblvb0G2tJ1UlcI=
Subject key identifier: B4:A7:DE:10:57:41:AD:78:1B:87:B4:51:A5:FB:12:76:1E:B7:69:40
Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial: 018DE491FA046FC76F95623C149B716A5B8E
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/tKfeEFdBrXgbh7RRpfsSdh63aUA.roa
Signing time: Mon 26 Feb 2024 08:39:48 +0000
ROA not before: Mon 26 Feb 2024 08:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 185.139.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Apr 2024 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e4:91:fa:04:6f:c7:6f:95:62:3c:14:9b:71:6a:5b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
Validity
Not Before: Feb 26 08:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4a7de105741ad781b87b451a5fb12761eb76940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:81:42:b9:63:5c:22:15:86:fa:d4:88:4c:
d4:75:ea:81:8c:94:a2:8a:13:c6:1b:67:35:e5:97:
2e:9c:9e:58:0c:6e:f5:c4:2b:71:93:1a:45:ee:23:
b0:87:9e:14:af:5f:ec:fa:8b:84:a2:d1:1a:70:3b:
fb:b6:63:6f:6c:53:32:67:50:5f:40:84:e8:a9:93:
d0:15:69:67:c9:df:aa:35:5c:78:7c:61:a5:5b:f5:
46:79:be:aa:59:6a:42:ec:04:c7:8f:24:ff:ab:5a:
91:a6:51:b6:dd:8a:66:6c:87:0f:1b:f1:fb:7e:44:
f9:92:47:0d:5c:28:f8:ce:e4:a0:09:b1:6a:8b:f0:
da:2d:ce:fe:4c:dd:0b:0f:2a:65:6e:7e:60:69:10:
13:51:cb:48:45:5c:00:8d:6f:7f:da:7c:36:0a:25:
97:c3:49:8e:6a:7e:95:0e:02:dc:c6:23:ce:98:4a:
4f:3e:1b:be:e9:3c:82:e8:08:36:44:69:c2:16:69:
a9:fe:7c:6b:c1:09:49:fb:e1:13:f9:ab:8d:1d:9b:
d1:5e:ff:02:e0:a8:c9:c0:86:49:55:b2:19:ff:5e:
2d:59:6e:d9:06:6b:fb:9b:3d:63:a7:5b:ab:34:d1:
ed:64:4c:e4:1e:38:68:2b:21:d5:aa:3b:ce:2e:b2:
ed:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A7:DE:10:57:41:AD:78:1B:87:B4:51:A5:FB:12:76:1E:B7:69:40
X509v3 Authority Key Identifier:
keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/tKfeEFdBrXgbh7RRpfsSdh63aUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.35.0/24
Signature Algorithm: sha256WithRSAEncryption
61:18:e3:0e:37:4e:19:67:f0:d6:a0:58:1f:02:47:6a:5b:0f:
e0:2e:5c:a8:5a:71:c0:a5:0f:6e:e1:dd:58:78:43:a5:9a:c6:
9a:8f:88:5a:04:e1:b0:15:06:1c:ec:fc:35:1c:31:9c:60:82:
ab:08:3c:1c:c8:b3:07:b9:8d:e0:b3:26:8f:55:b1:c5:e9:66:
30:90:a6:1a:38:f5:1e:91:c9:58:4f:1c:f6:38:71:1f:b8:c4:
0a:d1:11:99:53:26:b6:ae:48:fe:56:79:7a:f2:48:81:81:32:
1f:aa:99:7d:bd:d7:99:69:dc:1b:58:b1:41:30:a8:a1:f5:ab:
a6:06:b7:4e:1c:1e:e3:fc:f4:f7:0f:9c:9a:76:90:f1:98:08:
e8:89:6b:63:7d:f7:c0:b5:60:5f:15:2a:fa:3f:dc:0b:1d:11:
d0:6e:a3:10:e3:f8:ce:ec:df:5b:80:33:ad:3b:cd:0e:64:97:
6a:e1:eb:ae:0d:21:3a:d6:0c:43:39:2e:c8:dc:54:12:e8:e7:
9f:29:28:95:7e:94:1b:95:1c:21:19:89:43:82:b7:83:2f:96:
c4:84:1f:fa:31:6a:6e:e2:f2:60:76:ae:e3:55:f0:0d:61:d4:
7a:82:01:cf:78:91:4d:3f:8e:7c:1e:fb:e0:37:6b:67:e9:e4:
83:24:52:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:50:20 2024 by rpki-client on console-fra.rpki-client.org