Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/AG12gAVZ3jgckB2LM72YAnCrsWI.roa
File: AG12gAVZ3jgckB2LM72YAnCrsWI.roa (raw, json)
Hash identifier: 7sM/cP33x67iWWbrKM9XlO7JzCLrYZKYqPFfyf8OWN8=
Subject key identifier: 00:6D:76:80:05:59:DE:38:1C:90:1D:8B:33:BD:98:02:70:AB:B1:62
Certificate issuer: /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Certificate serial: 018571032AB13474691F6B28EC664CD6F7A7
Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/AG12gAVZ3jgckB2LM72YAnCrsWI.roa
Signing time: Mon 02 Jan 2023 05:45:11 +0000
ROA not before: Mon 02 Jan 2023 05:45:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34984
IP address blocks: 185.48.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:2a:b1:34:74:69:1f:6b:28:ec:66:4c:d6:f7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Validity
Not Before: Jan 2 05:45:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=006d76800559de381c901d8b33bd980270abb162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2d:19:c9:76:2a:93:0c:18:42:80:c5:56:8e:
65:fc:49:c2:f8:c6:8e:47:0e:bc:14:69:e2:46:c7:
6a:32:ba:02:ab:e9:92:73:7c:6b:7b:50:fe:77:bd:
db:71:7a:0a:c6:8b:73:98:33:67:7a:c9:e6:d3:1a:
dc:a9:fc:29:c2:cd:4b:b1:22:d0:05:a4:a8:83:1f:
da:b8:43:ea:15:10:20:41:81:2f:0d:0e:69:9b:fe:
5b:07:2e:a5:f7:c0:6e:0d:11:ff:51:b4:85:2e:b9:
3e:dc:40:10:4e:06:eb:c6:dc:6e:10:e0:8d:87:a7:
d6:4f:14:d9:a0:df:ba:08:43:bc:be:74:b5:d7:c2:
f9:75:5e:8c:07:f1:f2:e6:cb:fa:34:f5:2e:f2:a4:
b8:d1:4c:db:11:46:e1:0a:24:24:d1:c4:5d:7f:af:
ac:7d:84:a6:c4:4f:a5:78:a9:9c:d0:e7:f7:fd:71:
a2:0b:3e:37:29:39:ad:bb:f4:a2:2c:3e:84:69:1f:
7c:72:99:b1:d1:e7:93:34:f3:09:67:1e:df:af:c5:
a6:ed:ac:99:c4:ce:23:87:da:6b:0c:4b:c8:74:77:
e3:7e:1f:f6:f8:3c:23:63:70:2a:b7:b4:01:c3:d4:
04:4c:fc:e8:d3:c0:b6:1c:e2:e6:42:75:55:ce:e5:
76:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6D:76:80:05:59:DE:38:1C:90:1D:8B:33:BD:98:02:70:AB:B1:62
X509v3 Authority Key Identifier:
keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/AG12gAVZ3jgckB2LM72YAnCrsWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.27.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:19:f7:25:9c:23:fe:1d:e4:2d:e0:1c:08:08:25:d5:c1:fa:
95:b0:84:04:b2:0b:7d:81:59:40:48:05:fe:d8:1d:7d:f4:ff:
a8:f7:ea:72:48:10:b5:fa:92:70:3b:bb:70:a5:00:78:53:63:
e8:07:3c:f2:d7:23:d9:4c:c0:43:e0:24:28:9b:1e:d1:d0:ff:
fb:b5:08:56:1e:62:28:e4:33:54:40:8f:2f:b9:68:7d:44:86:
9c:3e:ef:67:fa:49:31:93:6e:f2:53:e8:d1:bf:37:fc:06:fb:
d7:38:73:eb:ad:e8:60:5e:92:ec:e1:ec:66:05:ff:3b:27:3e:
a7:6c:12:5c:78:16:37:96:a5:bc:68:0a:6f:db:b9:fb:37:8d:
76:a1:71:22:b7:68:b6:67:60:ef:db:9e:7c:50:c1:06:d9:36:
93:e3:57:ad:ce:00:94:95:fc:1b:9d:33:74:e7:c2:4e:52:06:
b8:8c:d7:73:f1:53:f9:e5:c3:9d:22:e8:8e:6b:4c:87:38:3e:
fe:db:31:e1:84:d7:50:5b:93:fd:4a:e1:d5:10:6e:ea:99:b6:
60:a2:55:a9:c2:30:a7:66:a1:c6:64:f6:51:7f:64:76:cc:aa:
8c:50:0a:83:46:a6:94:5d:ca:ab:23:d3:47:f1:3c:2a:2b:cb:
e9:d3:f4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:33 2024 by rpki-client on console-fra.rpki-client.org