Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/pF6KtNBbbLJ0Gxfe2gHy9UzBMGE.roa
File: pF6KtNBbbLJ0Gxfe2gHy9UzBMGE.roa (raw, json)
Hash identifier: IdMO0ckI/PCGsa7jgd3QQpXtc+CAfr0ADQ3u7m+o/Rk=
Subject key identifier: A4:5E:8A:B4:D0:5B:6C:B2:74:1B:17:DE:DA:01:F2:F5:4C:C1:30:61
Certificate issuer: /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Certificate serial: 0185C16944621C4212CDABA7C420C64E617C
Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/pF6KtNBbbLJ0Gxfe2gHy9UzBMGE.roa
Signing time: Tue 17 Jan 2023 20:26:19 +0000
ROA not before: Tue 17 Jan 2023 20:26:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210542
IP address blocks: 185.140.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c1:69:44:62:1c:42:12:cd:ab:a7:c4:20:c6:4e:61:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Validity
Not Before: Jan 17 20:26:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a45e8ab4d05b6cb2741b17deda01f2f54cc13061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:cf:f6:77:b0:5f:99:9f:5b:b9:35:c0:e2:
d2:8e:02:2c:9a:f8:b9:87:32:62:b3:b7:37:e8:d2:
17:2f:4e:e6:2e:f3:91:8a:aa:b6:21:f9:ff:3b:ef:
22:d8:db:0c:11:46:d1:72:ed:9f:4c:cd:d3:69:07:
9f:35:56:d3:5e:d3:3f:2c:8f:97:91:3b:5c:ab:5f:
32:98:ce:70:e1:19:86:10:f6:b5:c1:d6:c3:92:79:
bc:dc:da:d6:64:ef:96:74:44:1f:7e:79:bf:c7:92:
23:dd:aa:40:55:82:b9:b0:27:f9:49:5e:2b:2c:00:
4e:7b:b8:f8:b5:38:fe:d1:1b:31:41:ac:96:63:38:
31:69:55:57:e6:38:22:73:f9:11:c7:32:d9:ef:b2:
97:eb:70:a0:07:8f:1a:28:d0:0d:be:52:e9:dc:ce:
fe:f6:f2:21:4b:dc:12:1a:8b:0c:25:2a:d9:2c:df:
4b:7f:69:56:57:eb:c9:1c:2f:c9:07:a9:05:b3:fa:
c6:2b:16:62:96:ca:9d:8f:1f:6e:af:4b:0d:09:ec:
c7:ab:8b:7e:0a:d9:09:74:61:52:bd:65:0d:0d:20:
c4:bf:f6:74:fe:8f:0d:34:dd:9c:64:72:18:50:fa:
43:e9:a4:63:ea:c8:ab:9f:5e:76:fe:8f:ba:59:f2:
22:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5E:8A:B4:D0:5B:6C:B2:74:1B:17:DE:DA:01:F2:F5:4C:C1:30:61
X509v3 Authority Key Identifier:
keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/pF6KtNBbbLJ0Gxfe2gHy9UzBMGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.53.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:70:d9:d3:8b:2e:cd:cd:4c:b2:cf:a6:4e:ae:ff:91:e0:e4:
eb:13:18:2b:2b:aa:9b:e3:1c:b9:d6:c5:fe:99:74:78:cf:99:
b5:c1:05:09:91:95:0f:9d:0b:7b:41:ca:e2:f4:91:f5:54:06:
66:3f:18:11:6a:ad:b1:9a:bc:64:cf:d7:50:9d:32:0c:1c:cd:
89:76:d2:25:55:83:f2:7f:39:74:50:0f:ef:34:08:47:86:de:
b1:b2:10:81:d7:39:e9:22:ed:45:ff:19:e7:71:f8:96:55:4c:
f2:2a:6c:8a:76:58:3c:90:95:88:75:04:28:3f:ef:87:b8:33:
6f:a7:5f:ea:28:38:7e:9f:34:22:40:ec:33:2a:4f:48:7a:a9:
ea:1d:1f:80:15:64:38:fa:c9:f2:45:04:a6:78:e7:0c:3c:ba:
2d:05:71:99:5d:a8:db:61:73:0d:35:65:35:bb:d2:8e:c6:69:
79:f6:f1:de:bb:fe:9f:e2:1e:3f:6d:2a:0c:f8:59:e1:f9:50:
6d:2a:cf:d5:ba:ed:33:7e:26:03:fe:99:22:f1:f9:0f:36:0a:
8c:ec:35:0f:bd:ee:24:de:61:16:90:76:8b:33:bf:2c:c5:4e:
1a:b2:fd:d4:a3:e1:51:64:e8:7a:b9:aa:ad:7c:9c:4d:9b:1c:
2a:05:5c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:45 2024 by rpki-client on console-fra.rpki-client.org