Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/2UNqTdC6sZXz1hX-bAx0Eafe6aU.roa
File: 2UNqTdC6sZXz1hX-bAx0Eafe6aU.roa (raw, json)
Hash identifier: fiDYYrdesEh1QopFKlGDiVwotT9SuyevQV0FehPdgAE=
Subject key identifier: D9:43:6A:4D:D0:BA:B1:95:F3:D6:15:FE:6C:0C:74:11:A7:DE:E9:A5
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018FFD2FA078AE955E6B7CDD4C323F7BE38E
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/2UNqTdC6sZXz1hX-bAx0Eafe6aU.roa
Signing time: Sun 09 Jun 2024 13:28:27 +0000
ROA not before: Sun 09 Jun 2024 13:28:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215480
IP address blocks: 178.239.144.0/24 maxlen: 24
185.212.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 06:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:fd:2f:a0:78:ae:95:5e:6b:7c:dd:4c:32:3f:7b:e3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 9 13:28:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9436a4dd0bab195f3d615fe6c0c7411a7dee9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:42:2f:a1:0a:85:a4:ac:c6:cb:39:bb:fd:
93:ac:fe:ab:2a:5c:56:ba:5e:a7:ad:2c:49:64:43:
f9:1e:1a:3a:49:13:b4:23:1f:8f:10:da:b5:35:4a:
b1:a3:93:a5:e6:c9:fe:cc:31:cf:82:bb:81:f8:aa:
ae:1e:17:f7:fd:e5:f7:20:9b:f6:b8:1f:82:b8:f4:
51:66:0a:9a:a6:49:52:dd:5e:98:82:30:3d:7b:56:
47:92:40:44:19:ca:72:fc:ff:c8:5d:bf:71:3e:fb:
ba:93:d5:fa:95:3b:9a:bc:67:8d:03:94:1a:02:22:
da:7d:30:35:40:10:c8:2d:ee:d9:fd:7a:80:ed:89:
bb:f5:a8:7f:25:46:5d:4c:a4:0d:23:ef:20:51:45:
50:2d:c1:61:b8:9e:5b:02:77:d1:7d:7a:ba:89:7f:
51:a9:72:4d:16:41:7e:e2:f6:dc:92:dd:44:71:12:
2f:2e:22:ba:7b:f3:ed:c3:92:3b:9c:fe:00:18:c6:
31:e8:95:bb:51:6e:8e:e9:e0:6c:f6:00:e7:eb:9f:
03:ca:4e:60:76:0b:b9:88:1e:a3:ba:ef:ec:11:55:
02:2a:2b:74:a3:94:25:f1:fb:89:fd:6a:87:50:f9:
37:cb:68:6d:5b:1b:b8:b6:3c:92:74:c1:61:88:d5:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:43:6A:4D:D0:BA:B1:95:F3:D6:15:FE:6C:0C:74:11:A7:DE:E9:A5
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/2UNqTdC6sZXz1hX-bAx0Eafe6aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.144.0/24
185.212.50.0/24
Signature Algorithm: sha256WithRSAEncryption
09:e7:d2:da:0f:27:13:ea:aa:6c:dc:f0:8f:2a:f8:c9:a6:59:
46:4b:ca:2c:27:cb:da:45:e6:42:e7:de:1c:5c:93:c0:e7:ff:
82:ef:42:9f:ed:45:09:44:fc:ce:4c:de:05:20:b1:4e:b3:2d:
08:d2:e9:e9:60:9c:9c:83:00:58:85:ab:af:15:ed:74:ba:c4:
0c:1f:6b:37:03:fd:f7:da:55:9e:78:4a:10:c9:a1:b0:fb:30:
0e:6b:8d:ad:f8:4f:21:c8:dd:0f:f2:16:e6:18:fc:9b:69:92:
1a:e5:5f:cd:af:0d:c6:81:11:69:36:e8:73:49:dc:15:81:0b:
19:03:b9:f8:eb:a4:17:8c:e7:21:f3:f8:9e:1d:50:cd:c3:f3:
05:c7:64:f1:b5:6d:ce:25:47:cb:28:1c:a1:36:28:65:04:4f:
a1:5f:04:d1:7c:c9:2d:e2:87:1c:da:27:dc:63:40:83:1a:c9:
34:e2:d1:69:6a:87:6e:26:f5:72:c0:d5:3c:8c:02:4d:81:f3:
a2:e8:0b:a3:c0:a7:ca:22:31:b1:87:4c:2f:a7:ea:bc:f4:7c:
1f:0d:aa:b3:78:72:9f:51:48:0b:6b:12:f5:3f:2e:c8:87:0d:
22:d8:76:4a:96:94:55:80:d7:5e:9c:0a:95:b9:32:b8:c0:b5:
d0:da:c9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 09:32:12 2024 by rpki-client on console-ams.rpki-client.org