Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/bnUK0dJdWTV6CtP5tw2NskEMHTw.roa
File: bnUK0dJdWTV6CtP5tw2NskEMHTw.roa (raw, json)
Hash identifier: WdQAZ+NGpQNmv1Ab0ut0UYKV4/hTt4B8ist+XYAnEIg=
Subject key identifier: 6E:75:0A:D1:D2:5D:59:35:7A:0A:D3:F9:B7:0D:8D:B2:41:0C:1D:3C
Certificate issuer: /CN=7f188adab5b552081ecac821c9b090394873b315
Certificate serial: 0185704BA820ED8D528905263EECF031A439
Authority key identifier: 7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/bnUK0dJdWTV6CtP5tw2NskEMHTw.roa
Signing time: Mon 02 Jan 2023 02:24:44 +0000
ROA not before: Mon 02 Jan 2023 02:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211354
IP address blocks: 185.194.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:a8:20:ed:8d:52:89:05:26:3e:ec:f0:31:a4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f188adab5b552081ecac821c9b090394873b315
Validity
Not Before: Jan 2 02:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e750ad1d25d59357a0ad3f9b70d8db2410c1d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:32:f5:65:2b:c7:08:60:61:fd:4c:9d:65:
41:24:ae:0a:76:34:ba:9d:94:69:60:2a:10:61:47:
f0:36:fa:6c:a2:98:b6:b6:34:35:9f:0d:71:3a:9c:
61:bf:d7:f9:e9:d7:56:15:d0:28:ea:15:a6:be:f6:
4f:70:65:cb:28:9f:46:f0:2f:a6:e0:20:80:41:47:
5b:34:0b:a9:2a:67:06:52:b2:71:6f:87:fa:c5:35:
04:01:7e:20:9f:8f:bc:70:27:24:d5:80:9b:af:91:
ee:2f:87:39:94:2c:f7:a7:5e:f5:11:3b:61:53:9d:
35:e5:c5:be:ac:8a:f5:dd:ad:92:fe:30:64:ce:11:
15:64:fb:58:04:6a:a3:a0:20:ae:d0:3b:08:59:72:
ba:0a:82:3b:a2:cf:fc:cf:02:87:66:91:60:b6:4e:
46:96:60:fa:a7:6e:67:62:16:a3:a6:cd:53:10:d1:
1f:25:fd:5e:cc:4b:56:5a:33:94:c1:b8:8b:25:01:
76:fe:64:e6:df:c9:c2:60:02:62:8f:b6:83:9a:11:
da:f6:90:58:76:df:4d:f4:31:60:ce:21:07:00:79:
d9:e1:dc:d3:0d:f0:65:c2:3c:49:82:fe:5f:1e:c9:
82:ac:b1:b6:de:f8:ca:53:31:d2:27:60:73:97:4f:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:75:0A:D1:D2:5D:59:35:7A:0A:D3:F9:B7:0D:8D:B2:41:0C:1D:3C
X509v3 Authority Key Identifier:
keyid:7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/bnUK0dJdWTV6CtP5tw2NskEMHTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.14.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:0c:22:c4:2a:22:af:d3:86:da:db:1a:0c:0b:e6:b0:39:f1:
36:6f:0c:14:d0:0b:30:95:b9:eb:e1:a2:0a:0f:69:e8:fe:f2:
87:15:c5:52:c4:b5:68:22:b6:b5:23:29:a6:8e:ee:90:2d:e2:
0c:2b:51:8d:e6:5e:6d:d1:1a:21:6e:0f:70:f1:5e:37:ef:e6:
e6:ca:74:35:6e:20:18:a6:e3:d6:02:ef:13:4d:06:e8:e0:0f:
d0:7b:26:0f:80:47:bb:03:45:4d:7f:71:79:3b:7b:1e:5d:f8:
34:6d:b8:94:47:c4:1e:cb:e1:4e:67:31:60:60:88:41:e0:64:
9c:b4:9c:44:6a:7f:c0:3c:41:ad:a6:b4:b7:62:c1:54:f0:ef:
df:2c:1c:e6:59:c3:e9:c3:f1:9a:a2:d4:d4:49:31:a9:42:df:
96:a0:2c:41:2a:0f:8c:46:ed:d2:64:ae:42:ae:2b:00:1e:ba:
04:78:fc:a8:e7:5d:30:a0:4d:7b:bf:da:ad:bf:cf:7a:5b:2c:
c0:16:a3:db:45:c4:0f:9c:50:0d:72:6c:fb:94:24:d2:95:40:
e6:19:c2:ad:4c:2e:98:00:69:69:d6:5e:14:fc:06:97:b4:e4:
47:b4:fc:f6:92:e9:bd:40:d0:61:ea:f5:76:7f:a7:93:1c:9d:
2a:7b:b6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:51 2024 by rpki-client on console-ams.rpki-client.org