Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/4AmknZTfkBB23g_17gP87LPM5Lk.roa
File: 4AmknZTfkBB23g_17gP87LPM5Lk.roa (raw, json)
Hash identifier: NbHmrGP04B8SxrrGhjsK6CLUtAMGBR8J4mHKwBfc2PE=
Subject key identifier: E0:09:A4:9D:94:DF:90:10:76:DE:0F:F5:EE:03:FC:EC:B3:CC:E4:B9
Certificate issuer: /CN=708029a674177efd99252275094618c0c9cfbd1d
Certificate serial: 018E7C7374A733B5D7FDF3961360658959E8
Authority key identifier: 70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/4AmknZTfkBB23g_17gP87LPM5Lk.roa
Signing time: Tue 26 Mar 2024 20:28:45 +0000
ROA not before: Tue 26 Mar 2024 20:28:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212150
IP address blocks: 185.167.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 17:47:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7c:73:74:a7:33:b5:d7:fd:f3:96:13:60:65:89:59:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708029a674177efd99252275094618c0c9cfbd1d
Validity
Not Before: Mar 26 20:28:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e009a49d94df901076de0ff5ee03fcecb3cce4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:61:61:43:3b:02:b9:49:e1:4d:66:cc:be:
df:cd:db:45:80:03:a7:9f:0b:54:d2:bb:49:3d:00:
f4:03:46:0a:4e:3b:68:19:9d:a9:0b:de:ab:5e:7d:
82:40:03:da:02:33:ba:fa:cb:f7:6e:30:d8:ff:f4:
bb:a6:80:98:7b:3a:6a:20:95:91:d7:71:c6:e8:7a:
39:35:6b:9c:5a:93:82:ae:95:b5:45:b7:f2:5c:f8:
85:42:91:13:e5:ff:82:6f:33:fc:00:58:77:e5:89:
8d:53:63:b9:50:b4:e2:74:a6:8d:c6:74:03:c6:8d:
38:85:fc:6c:e7:da:1f:b6:8a:d2:d8:93:f5:2c:cd:
af:a1:8a:43:61:dd:44:b8:5b:5b:7d:07:a5:52:1b:
2c:bc:56:4b:6e:e7:4e:23:92:c2:d2:b7:c1:25:c8:
dd:89:ad:25:7d:07:d4:93:1c:19:6a:cd:29:70:17:
e2:e9:2a:98:e3:ce:bc:b7:a9:69:2e:6a:1f:08:07:
66:51:7a:1b:b8:f7:5a:e7:c2:f9:c4:79:e9:c1:d2:
c3:23:92:61:a8:ae:b0:98:4d:eb:20:83:d3:14:ef:
98:4c:fe:bb:20:89:ac:4d:87:8d:20:7a:82:5b:9e:
95:47:b8:a4:4d:49:c5:d5:0f:e3:8c:40:ae:1d:98:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:09:A4:9D:94:DF:90:10:76:DE:0F:F5:EE:03:FC:EC:B3:CC:E4:B9
X509v3 Authority Key Identifier:
keyid:70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/4AmknZTfkBB23g_17gP87LPM5Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.253.0/24
Signature Algorithm: sha256WithRSAEncryption
26:aa:17:4f:23:51:23:73:63:12:59:36:43:31:8a:11:4c:8c:
a9:6b:4b:82:c7:6a:0c:ed:71:dd:fa:80:ed:1f:0c:96:0e:86:
6e:41:a2:58:ae:fa:a7:86:f0:9b:d0:53:5a:5a:07:93:08:88:
ff:56:dd:0f:e7:da:18:5e:8a:e0:ec:a7:40:44:6b:ce:a5:ed:
15:e5:86:e2:6e:17:c8:2b:91:91:6c:1b:c8:07:1b:f2:ca:85:
51:27:ec:9d:64:3b:cf:42:48:9c:6d:13:4e:f5:d0:f8:4e:a9:
41:46:e3:1e:23:6c:36:aa:db:77:f0:c1:2f:80:a0:21:95:a4:
f3:65:b0:fc:b5:12:4a:75:13:9e:48:fd:67:0f:7e:33:0c:8f:
73:8f:52:99:1b:22:bf:4d:12:14:97:1d:28:e7:90:dc:ec:58:
65:03:e3:d0:e2:2d:9e:23:74:91:46:cc:d1:e1:75:f4:f4:78:
73:e7:d2:e8:06:bc:06:27:ec:ca:93:f0:8a:1e:13:2e:e4:b0:
b6:63:f5:c8:54:a9:c2:0e:2c:ca:75:7f:e9:60:96:89:b0:c9:
39:66:85:06:5a:88:06:36:f8:a6:2c:2b:d3:a1:3d:a7:7a:b4:
77:fa:21:f9:22:df:e1:1d:72:61:c3:29:a4:99:fa:db:a6:e2:
a5:52:ab:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-fra.rpki-client.org