Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/1-2I0kit_IZGas4VcincCZRsU0nM.roa
File: 1-2I0kit_IZGas4VcincCZRsU0nM.roa (raw, json)
Hash identifier: iWEdeMEh6CVYoak8wCbNt7rM8ixXXck5Lbx/VuJ6Y8M=
Subject key identifier: FB:62:34:92:2B:7F:21:91:9A:B3:85:5C:8A:77:02:65:1B:14:D2:73
Certificate issuer: /CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Certificate serial: 01856D2F327D05B374D82353220530448C57
Authority key identifier: 3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/1-2I0kit_IZGas4VcincCZRsU0nM.roa
Signing time: Sun 01 Jan 2023 11:54:47 +0000
ROA not before: Sun 01 Jan 2023 11:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212849
IP address blocks: 185.120.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:32:7d:05:b3:74:d8:23:53:22:05:30:44:8c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Validity
Not Before: Jan 1 11:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb6234922b7f21919ab3855c8a7702651b14d273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:43:f4:07:4e:b4:c4:87:60:95:02:b3:f0:09:
bf:96:86:85:36:1d:4a:78:59:8c:11:80:f4:af:d8:
77:02:f5:17:05:ad:6f:8b:50:59:d7:01:3b:fa:78:
d2:06:e3:1b:ee:dd:41:d5:ca:32:b9:48:26:ba:f2:
1b:b9:7d:02:bd:44:a3:09:90:2a:a8:bb:be:66:f8:
de:73:46:20:28:08:5e:98:81:69:61:1a:55:f3:cd:
82:54:41:4a:7b:01:f1:2c:44:45:10:1c:7d:44:b6:
ca:2c:22:69:a8:20:a6:dd:bb:21:1d:5c:e8:bc:71:
bf:f4:81:ef:cb:59:cf:a7:44:b7:32:d6:ac:54:7e:
94:b2:c4:04:cd:15:91:85:c9:94:95:03:de:3a:bd:
e3:b9:a3:12:db:87:c4:91:70:0d:70:2d:a4:b1:60:
2f:50:67:52:3f:6c:9e:c8:b9:ce:b1:04:62:4a:e2:
56:07:bb:ee:07:84:3c:03:ee:78:c2:a1:25:e2:97:
77:aa:e7:8e:dd:90:a9:dd:d8:4f:8d:52:db:b3:88:
7a:0f:c8:3d:94:67:5b:d6:f4:53:f4:15:6c:af:d0:
79:c1:fc:ab:96:72:b1:50:60:ac:a1:f4:fe:0b:a8:
db:c1:34:65:21:ba:9f:63:fc:89:28:70:89:4a:c8:
e3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:62:34:92:2B:7F:21:91:9A:B3:85:5C:8A:77:02:65:1B:14:D2:73
X509v3 Authority Key Identifier:
keyid:3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/1-2I0kit_IZGas4VcincCZRsU0nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.142.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ab:75:dc:ea:9d:94:60:1d:c7:cd:b3:c2:99:50:e9:70:ca:
e8:e1:81:8a:7d:4d:6f:90:cb:a8:b8:7d:97:ae:7a:3c:33:e5:
9d:d3:d3:8b:e4:20:62:15:22:48:da:de:6e:90:5e:ab:6e:92:
ed:9d:e7:a1:5d:54:0b:e3:0b:49:6a:16:2e:34:ba:8b:da:d7:
d5:7a:9c:af:18:38:70:e5:5c:a6:b9:9d:7b:62:11:60:0a:31:
e1:f8:ce:ed:44:b2:07:06:e7:06:3e:df:0d:3f:07:be:f0:c3:
95:89:02:06:cd:db:27:2e:7e:92:35:4d:62:2e:58:61:27:5d:
db:8b:cb:25:1d:5c:62:ab:7a:a0:fe:d4:41:5c:27:1d:84:ca:
c8:3a:95:ce:5a:47:be:4a:ec:97:23:f1:b7:70:de:26:3c:c3:
f3:10:a1:af:65:e0:43:12:d0:57:be:e1:78:9e:a3:b9:90:91:
61:55:d8:76:04:6b:ac:5c:5c:91:fe:21:3a:bc:6f:b4:d8:ec:
97:df:f3:d1:f1:3a:98:ea:bb:f3:c3:b3:73:9a:36:c1:e5:e9:
04:88:30:85:71:ee:81:5c:9e:17:10:b3:a0:f5:0a:eb:80:94:
98:b4:32:c2:61:62:65:2b:f5:7b:5c:7d:40:a2:b8:6c:b0:6d:
9d:44:1a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-fra.rpki-client.org