Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/0X0lNEcfuJ6126FfHPU0jf0fIG4.roa
File: 0X0lNEcfuJ6126FfHPU0jf0fIG4.roa (raw, json)
Hash identifier: ig4alvP12eOE+bJqtbzM/eOyBl9M/hp30VK3yap5C9Q=
Subject key identifier: D1:7D:25:34:47:1F:B8:9E:B5:DB:A1:5F:1C:F5:34:8D:FD:1F:20:6E
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 01857169ACCA23C35E0C8208C4F87641EEC8
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/0X0lNEcfuJ6126FfHPU0jf0fIG4.roa
Signing time: Mon 02 Jan 2023 07:37:08 +0000
ROA not before: Mon 02 Jan 2023 07:37:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 185.18.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:ac:ca:23:c3:5e:0c:82:08:c4:f8:76:41:ee:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Jan 2 07:37:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d17d2534471fb89eb5dba15f1cf5348dfd1f206e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:2c:01:23:d3:41:72:06:2c:73:3c:8b:40:
60:cc:45:b0:50:5f:09:b8:f7:f7:8a:52:0e:02:e8:
b9:1a:b7:6e:09:ac:93:8f:ee:7e:61:d6:1d:c5:ba:
cf:e4:65:31:cb:1a:cb:91:47:4c:f8:fc:2a:55:b3:
7a:83:59:e6:81:67:f6:ff:e1:64:aa:0b:b6:11:6e:
f0:57:41:36:26:97:25:6c:b3:15:c3:c8:fa:5a:f1:
19:dc:99:83:b5:da:c2:54:af:9b:6e:47:19:73:f3:
e9:3c:b8:2f:b0:c6:48:6a:c8:4d:a2:e6:f7:6c:33:
a0:7b:6a:1b:33:20:8f:95:66:a2:66:5d:39:6c:4d:
08:6b:05:9f:e4:cf:95:4a:c1:93:1c:77:65:b7:05:
60:21:8b:76:99:1b:29:76:c6:02:64:ff:57:dc:7c:
be:9e:ca:71:49:d6:b1:6f:cc:4d:81:67:ee:58:0e:
f8:54:a4:63:30:d0:6e:a7:e8:89:f1:d3:75:c5:ad:
e9:f2:bd:5b:51:c1:a4:21:71:37:89:d7:bf:42:78:
f5:5c:97:52:32:aa:e5:8a:0e:ba:bb:9c:9b:b6:2c:
d2:35:58:59:a3:d0:64:3a:de:26:43:f0:ce:05:99:
da:89:45:97:71:62:35:03:92:8e:6b:9a:88:48:75:
7b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7D:25:34:47:1F:B8:9E:B5:DB:A1:5F:1C:F5:34:8D:FD:1F:20:6E
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/0X0lNEcfuJ6126FfHPU0jf0fIG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.250.0/24
Signature Algorithm: sha256WithRSAEncryption
96:fd:02:a5:34:e1:04:44:cd:9d:17:d1:d2:6d:a8:92:ee:bf:
e4:0c:8d:ac:94:30:91:29:cd:25:72:35:59:f3:d7:61:d4:e7:
c8:ca:a8:0f:1a:fd:85:56:54:55:67:27:ea:76:f4:fc:b4:60:
61:07:92:8e:69:81:51:5b:19:11:14:b2:fd:79:99:ea:37:25:
9c:f7:0c:9d:2b:ac:07:8e:09:2b:39:97:e5:6d:2b:90:61:08:
04:44:af:39:24:97:10:fc:d0:fe:c9:d5:79:9a:4f:f7:8d:d1:
3d:82:89:60:b7:5e:a1:51:f6:84:cd:a2:e0:a7:b0:91:85:2c:
d0:58:7e:94:8a:20:af:7d:65:51:3b:35:da:27:24:5d:6b:84:
e4:d5:55:81:63:be:a4:66:c5:12:97:af:2d:af:5b:e8:62:a6:
06:01:bd:2e:54:18:c6:cc:69:6a:2d:69:e0:e8:74:70:05:6a:
d2:67:fe:a8:2f:78:51:59:b7:03:77:ec:f3:30:80:48:6e:4f:
15:43:54:44:85:9c:a0:f9:d3:17:5d:d4:8a:84:8c:58:8e:ed:
9e:a1:74:72:9b:9e:ef:45:00:da:9a:f6:54:10:53:83:25:ad:
ac:f4:ee:25:81:b1:a0:9c:61:c9:a3:71:af:a2:a0:1a:9f:7e:
2d:0c:f3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:35 2024 by rpki-client on console-fra.rpki-client.org