Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/tJ2WctZPIop-GBEfhrLB6s-y4mE.roa
File: tJ2WctZPIop-GBEfhrLB6s-y4mE.roa (raw, json)
Hash identifier: pY0pYp+4IjbNi1JjfVJosgeRIC7sht9maUt89JReQHQ=
Subject key identifier: B4:9D:96:72:D6:4F:22:8A:7E:18:11:1F:86:B2:C1:EA:CF:B2:E2:61
Certificate issuer: /CN=b262bf21de51385859416c4c608001e2025a5d25
Certificate serial: 01856B257E8936193F0DDAEECA83AA34C1F7
Authority key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/tJ2WctZPIop-GBEfhrLB6s-y4mE.roa
Signing time: Sun 01 Jan 2023 02:24:57 +0000
ROA not before: Sun 01 Jan 2023 02:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57436
IP address blocks: 185.19.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:25:7e:89:36:19:3f:0d:da:ee:ca:83:aa:34:c1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b262bf21de51385859416c4c608001e2025a5d25
Validity
Not Before: Jan 1 02:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b49d9672d64f228a7e18111f86b2c1eacfb2e261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b1:ba:b3:d7:3f:78:d1:54:8d:e0:b6:87:b0:
5b:c6:6c:36:1e:fb:2b:06:54:42:16:66:64:4d:c6:
c2:84:39:0f:f9:dd:34:25:77:35:ae:24:57:79:8a:
a2:c3:bf:e9:98:62:c2:74:1e:fd:74:90:c5:69:db:
ca:4f:ab:67:f5:bc:cc:11:e7:da:45:a4:4c:20:8d:
1e:77:63:08:ae:0f:bb:6a:a7:59:6f:27:13:e0:1d:
db:d4:62:bf:0b:88:34:79:a7:bf:4f:dd:b7:f3:01:
a2:16:cf:76:24:c1:e5:0a:e8:ef:0c:4b:66:69:86:
a3:cf:b1:a6:22:57:99:62:a6:60:12:5f:e4:fe:34:
89:0d:16:0d:00:78:a6:fc:7b:7d:f4:47:9c:2a:79:
8c:39:6a:8c:0b:c0:24:3c:22:65:9c:e8:e8:c6:54:
d3:3c:69:92:bd:15:3d:3c:f7:bd:6a:e4:8b:75:9f:
c8:11:0e:bc:fd:a5:3a:5b:61:c5:08:aa:94:c9:ad:
d4:86:fb:0a:31:c0:c1:7a:0b:26:ec:6c:02:41:95:
7e:dc:f0:be:7c:73:82:e1:12:41:20:59:bb:f0:f4:
10:73:48:8d:bd:4c:92:3b:96:dd:b1:43:49:62:7c:
54:98:e7:a1:19:e3:6c:a3:18:8f:12:25:7f:f0:3d:
17:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9D:96:72:D6:4F:22:8A:7E:18:11:1F:86:B2:C1:EA:CF:B2:E2:61
X509v3 Authority Key Identifier:
keyid:B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/tJ2WctZPIop-GBEfhrLB6s-y4mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.151.0/24
Signature Algorithm: sha256WithRSAEncryption
60:61:3b:30:2e:43:d2:08:76:91:b9:e7:a8:47:ff:1b:3e:69:
d2:c6:95:bd:c7:b6:e3:fe:1c:15:ed:b2:d4:75:c5:20:6a:ce:
32:39:8f:9f:59:46:f2:b5:8f:dd:f4:d7:54:c4:15:8d:c6:80:
52:0a:78:9e:25:e9:9d:67:0d:26:eb:37:2e:e9:8a:36:d6:76:
cc:ca:71:d1:38:31:36:b5:b3:a5:b6:52:bc:fd:64:a6:27:7a:
96:e4:4f:21:05:64:9b:33:c7:f3:26:14:8b:31:fd:ef:0b:8b:
7f:6f:20:6f:1d:a4:b7:86:ab:24:94:70:1f:ba:78:ec:b9:a4:
7d:88:d2:98:26:c7:a1:b5:b4:fa:85:46:7e:c5:86:34:44:0f:
bb:28:38:48:22:bd:59:26:1b:fb:8f:ee:32:f0:10:7e:94:27:
20:ec:49:fa:03:4c:de:d6:0a:2a:c8:bf:1c:68:da:9a:7a:29:
80:d8:48:68:e4:93:fc:8a:27:c5:05:8d:ae:37:46:d5:1e:5d:
dc:21:40:fb:b7:57:8e:9e:26:0a:48:0f:bd:19:16:ac:f3:de:
59:29:fa:54:b3:0a:50:d7:60:2f:31:22:c2:9d:de:1c:ff:38:
07:a8:6e:f4:62:5d:cb:b6:5a:5a:d8:92:2e:62:ac:b3:35:78:
0e:19:51:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-fra.rpki-client.org