Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/h-2rp1ycmaFvxBc__i8tDzBgR5U.roa
File: h-2rp1ycmaFvxBc__i8tDzBgR5U.roa (raw, json)
Hash identifier: clbcjCySE3zD9Tf+LVVHKj2ZT17SU5RgQ9OGZox658o=
Subject key identifier: 87:ED:AB:A7:5C:9C:99:A1:6F:C4:17:3F:FE:2F:2D:0F:30:60:47:95
Certificate issuer: /CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
Certificate serial: 0186278ABDFE325F13CC6C1D257A5EACE80E
Authority key identifier: B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/h-2rp1ycmaFvxBc__i8tDzBgR5U.roa
Signing time: Mon 06 Feb 2023 16:24:09 +0000
ROA not before: Mon 06 Feb 2023 16:24:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12076
IP address blocks: 185.242.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Feb 2023 12:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:27:8a:bd:fe:32:5f:13:cc:6c:1d:25:7a:5e:ac:e8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
Validity
Not Before: Feb 6 16:24:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87edaba75c9c99a16fc4173ffe2f2d0f30604795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:6e:73:bc:0c:c0:8a:10:6b:86:22:12:60:
d0:e5:77:47:46:f0:44:0b:c9:8d:16:6f:f1:09:72:
2d:da:e1:11:3b:18:d1:e7:bb:1e:65:cf:e4:8a:90:
a7:24:b1:0f:e8:10:bf:49:36:4a:a5:bb:17:ad:55:
d9:84:77:81:51:a7:e6:4b:37:da:42:d0:5c:b8:db:
38:71:ad:f9:d8:43:a2:a1:fd:95:ce:5d:bd:45:4e:
85:2c:e0:7a:65:e9:53:b4:bc:52:47:46:94:18:3e:
ec:bc:4c:85:ae:af:33:d4:7d:0d:5f:14:35:9a:8a:
0b:64:ac:b5:38:67:21:96:42:aa:eb:41:da:3f:c8:
aa:84:2a:7e:55:69:34:c0:98:98:11:9d:78:1d:6a:
63:41:db:dc:7b:43:44:18:dc:93:79:40:fd:c2:38:
b1:b6:ce:9f:60:43:23:75:de:ab:46:85:98:77:ce:
b3:9d:6c:98:b9:ae:87:a8:05:12:08:67:e6:9b:35:
47:e9:34:62:fb:37:a6:0c:74:f3:21:d5:b9:10:16:
2d:c5:7f:14:63:f5:c8:ab:f2:57:1c:4e:bf:54:65:
de:18:04:cb:7d:50:6f:83:b3:50:83:c3:22:80:63:
37:94:2f:63:67:bc:4f:33:a2:63:6a:f7:91:b4:b5:
48:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:ED:AB:A7:5C:9C:99:A1:6F:C4:17:3F:FE:2F:2D:0F:30:60:47:95
X509v3 Authority Key Identifier:
keyid:B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/h-2rp1ycmaFvxBc__i8tDzBgR5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.139.0/24
Signature Algorithm: sha256WithRSAEncryption
21:87:e6:27:2d:c3:af:78:fa:6e:c1:f1:1a:ff:74:48:1f:90:
06:0c:5e:bd:42:ee:fe:fe:bf:b3:2a:11:79:b9:fb:55:67:7f:
52:a4:e8:d5:d9:d9:3f:58:5c:b5:8d:92:6a:4b:58:54:14:e3:
19:79:a3:ed:6b:5a:ac:52:99:9f:ce:fd:08:77:41:07:49:a4:
a3:4e:d2:1c:7a:e4:29:f9:46:dc:c2:14:9d:82:f3:2e:bd:98:
54:f1:b2:93:c4:f2:d1:0b:d8:89:be:df:30:d0:75:94:b6:3a:
5a:58:d0:18:03:dc:06:48:c8:94:42:bb:2a:28:95:de:78:a1:
0d:1c:7b:48:32:62:8c:d9:4b:2c:27:05:3e:bc:66:f3:6c:83:
86:df:8a:9e:dc:a8:8b:09:ad:72:5d:5a:dc:2c:5f:6e:1e:4d:
ff:c0:c5:26:27:c4:59:8c:cd:eb:52:7c:f7:63:c0:ff:96:6a:
fe:cb:e7:41:d8:c7:92:08:23:3e:be:17:1b:3c:3d:bd:e9:f9:
90:75:0a:7c:d3:0f:54:b3:77:1c:39:5f:17:ce:6a:9d:5a:87:
d1:a3:19:c7:98:3f:72:47:ca:75:1c:97:24:49:86:1d:3c:5c:
f1:75:7d:74:58:08:c8:11:6e:0d:26:ca:06:14:53:e5:2f:48:
64:14:0f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:07 2024 by rpki-client on console-ams.rpki-client.org