Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/drhMVyg7PSudahbBXI3IjvBHBlA.roa
File: drhMVyg7PSudahbBXI3IjvBHBlA.roa (raw, json)
Hash identifier: 6qmXKm2AxPqwcEGeyNMFihtUrfc7wkjDIpxiC7jLHY8=
Subject key identifier: 76:B8:4C:57:28:3B:3D:2B:9D:6A:16:C1:5C:8D:C8:8E:F0:47:06:50
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018632DF1D3DBE4745A5AB9248BD47BD3D39
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/drhMVyg7PSudahbBXI3IjvBHBlA.roa
Signing time: Wed 08 Feb 2023 21:12:08 +0000
ROA not before: Wed 08 Feb 2023 21:12:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25184
IP address blocks: 185.243.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Mar 2023 09:51:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:32:df:1d:3d:be:47:45:a5:ab:92:48:bd:47:bd:3d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Feb 8 21:12:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76b84c57283b3d2b9d6a16c15c8dc88ef0470650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6b:55:2d:a2:5e:da:4e:8f:7f:d0:74:59:6f:
02:96:aa:47:da:a2:5d:2f:b5:20:b1:e2:f7:d1:d2:
bf:47:ab:04:b3:90:e9:14:6e:73:45:2b:0a:54:4b:
f2:60:0f:14:18:14:73:98:05:3b:72:8c:14:c3:8c:
11:ca:7b:f1:66:9e:e0:00:7a:9e:a8:23:ba:67:0f:
5a:e1:1d:95:4b:e3:70:33:10:90:d3:60:8b:96:2a:
ec:90:38:b2:7c:03:6c:1b:6a:58:9b:1c:05:63:e5:
cb:d5:96:82:6b:47:65:8b:ea:60:8f:ad:16:b4:27:
3d:f8:96:b0:b4:55:c3:92:f3:d8:43:2e:7a:92:5a:
b4:c4:49:07:92:01:72:d4:03:f5:7b:08:f2:49:b5:
38:21:b1:b8:29:d1:0f:a5:de:f7:c6:d6:e7:9c:c1:
9b:f1:6c:e9:08:20:43:47:af:82:12:be:ec:ab:e6:
74:18:d1:4c:f4:5d:b8:31:06:9a:48:aa:cc:36:af:
5e:07:cb:7d:e8:08:76:ef:cf:1d:1b:71:25:f7:10:
36:b6:08:05:5c:0b:01:81:d0:0d:86:c2:df:3a:57:
a3:9e:63:ca:18:26:21:89:b7:f3:f6:5e:b2:ae:8b:
15:07:48:c0:1f:66:8a:6e:e5:fe:84:7a:6d:d9:d1:
2c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B8:4C:57:28:3B:3D:2B:9D:6A:16:C1:5C:8D:C8:8E:F0:47:06:50
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/drhMVyg7PSudahbBXI3IjvBHBlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.48.0/24
Signature Algorithm: sha256WithRSAEncryption
40:97:2b:1c:91:3e:7d:63:40:1f:7d:45:0c:68:d3:e3:c8:ab:
0b:fb:2a:d4:08:2a:2f:d4:ad:8c:b3:bc:e4:ee:0b:a6:b4:e7:
89:77:b9:b5:7f:30:f7:a9:cd:07:84:cb:0e:d0:c2:e5:44:02:
c0:cf:33:a6:de:2a:11:91:43:18:85:bc:c7:11:e1:d4:19:2b:
00:b8:e0:d9:80:03:5b:b4:b2:4f:22:3b:11:54:3c:e5:50:a6:
66:00:b8:f9:57:e7:85:b2:0a:d7:fb:d7:42:1b:ce:d8:66:b0:
15:62:b3:85:f4:91:c0:3c:c9:3f:4f:18:aa:e5:00:ea:7c:c1:
07:63:71:38:50:b1:2f:29:1f:72:eb:f0:5c:2d:00:00:a3:33:
0c:64:a7:3f:43:e0:fc:a8:d3:4f:ea:5a:b6:b2:91:50:21:40:
63:d1:13:46:30:67:f5:dd:8a:fd:8e:9b:e7:44:09:c1:85:fd:
b1:6a:22:b8:ae:42:97:13:ab:0a:d3:7e:7e:bd:f9:8e:cb:87:
75:49:8d:bb:df:f8:07:ae:11:61:ce:c0:35:d0:2d:02:e3:c0:
95:cd:89:f5:51:57:af:9a:6b:f9:02:39:e8:72:f3:33:93:fd:
bd:00:81:b4:9c:7b:97:b3:57:76:97:67:e4:67:0b:c3:69:62:
ff:88:2b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:09 2024 by rpki-client on console-ams.rpki-client.org