Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/t6JayfLAKHpaEf5haA67vaG9aU4.roa
File: t6JayfLAKHpaEf5haA67vaG9aU4.roa (raw, json)
Hash identifier: b55mDSQWIBbpszp+77hRlCMKv8NKKLB6MEEvkTwYRJM=
Subject key identifier: B7:A2:5A:C9:F2:C0:28:7A:5A:11:FE:61:68:0E:BB:BD:A1:BD:69:4E
Certificate issuer: /CN=26472cfdcd392a184f1f051320bba806a204c6cd
Certificate serial: 018CC56E05DFA389FF2041652D1F6859B26C
Authority key identifier: 26:47:2C:FD:CD:39:2A:18:4F:1F:05:13:20:BB:A8:06:A2:04:C6:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jkcs_c05KhhPHwUTILuoBqIExs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/t6JayfLAKHpaEf5haA67vaG9aU4.roa
Signing time: Mon 01 Jan 2024 14:29:31 +0000
ROA not before: Mon 01 Jan 2024 14:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 185.124.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 May 2024 17:12:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:05:df:a3:89:ff:20:41:65:2d:1f:68:59:b2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26472cfdcd392a184f1f051320bba806a204c6cd
Validity
Not Before: Jan 1 14:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7a25ac9f2c0287a5a11fe61680ebbbda1bd694e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:ba:74:26:5b:e8:1a:4c:7c:2a:53:d7:77:
51:d2:7b:ff:9c:c2:7a:5a:18:a2:33:3a:90:04:e0:
85:cc:3a:c0:16:61:9b:73:2e:6a:4e:41:f0:e3:55:
3b:af:00:21:db:fa:84:30:31:22:7a:c8:eb:46:05:
37:c4:95:94:af:47:18:ac:dc:17:cc:51:a9:1d:c0:
33:a7:a5:0a:d9:fa:dc:0d:33:bd:ab:6e:a2:63:93:
6c:3d:ec:53:30:a8:b7:28:5f:fe:34:60:9c:66:7c:
7b:4a:bf:e7:88:c5:be:63:5c:b1:b5:12:55:92:8a:
de:1c:1e:e9:b8:06:67:12:bf:4e:8f:33:ae:2b:28:
e9:fa:39:7a:fe:3e:2e:09:4b:72:05:c9:75:23:8b:
18:ae:a1:f8:d7:ba:72:9f:a3:d9:03:96:96:92:bb:
51:4a:1f:a8:b0:ea:85:04:13:80:01:35:c7:f9:5e:
f0:22:4e:c0:05:c9:3d:d2:6e:59:69:f5:d1:a7:94:
af:18:76:b9:3f:93:b0:a2:e5:d5:ec:2d:0b:fa:a8:
b0:54:72:1b:0f:50:d6:91:16:a3:9f:f9:65:6c:7f:
21:ee:62:56:77:ef:06:aa:99:84:93:25:ab:13:af:
0b:98:4b:7e:95:24:00:81:2a:2e:20:6d:c1:fb:c0:
a2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A2:5A:C9:F2:C0:28:7A:5A:11:FE:61:68:0E:BB:BD:A1:BD:69:4E
X509v3 Authority Key Identifier:
keyid:26:47:2C:FD:CD:39:2A:18:4F:1F:05:13:20:BB:A8:06:A2:04:C6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jkcs_c05KhhPHwUTILuoBqIExs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/t6JayfLAKHpaEf5haA67vaG9aU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/Jkcs_c05KhhPHwUTILuoBqIExs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.64.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:fb:38:5d:11:c3:e4:cf:91:ab:90:3a:5c:87:7c:73:b2:43:
92:05:a3:5d:46:28:ac:ac:7e:9b:de:d2:b7:a3:26:2e:5a:74:
bd:38:1a:5e:e4:49:77:f1:ac:75:cd:10:cb:a9:2d:e6:d5:4f:
94:85:15:cf:f9:64:6c:7a:18:c6:3c:c9:2b:94:9a:40:60:cb:
74:8b:4c:23:a0:af:ae:57:3f:6a:b7:2d:68:0b:f9:14:46:3f:
79:99:c4:24:3c:3b:8b:14:53:e9:15:ff:e7:21:25:7b:a2:bd:
9f:92:ae:d2:96:39:02:ca:80:8a:b0:97:23:26:3a:f8:da:6c:
d4:4f:90:14:4b:c2:65:47:a9:88:68:90:e6:57:13:74:bf:6d:
38:16:f4:1b:69:1d:20:7e:a6:40:d8:36:d1:f6:a7:75:88:e8:
e9:12:6b:4e:67:f2:52:d6:80:6f:c8:cf:88:3d:6e:34:eb:40:
b6:93:7c:99:b1:c5:cb:56:05:2e:25:fb:e1:06:e5:a1:54:2d:
89:e6:75:99:38:7f:ab:1e:b6:99:7c:ff:e3:6e:23:60:fe:6f:
f7:5d:a4:d3:50:e4:66:7f:04:a8:95:bf:dc:d3:74:8d:c8:9e:
2b:1c:d6:b0:6e:5a:f5:1f:77:4a:78:e5:77:b5:f2:4e:cd:7c:
20:d3:3d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 20:34:22 2024 by rpki-client on console-ams.rpki-client.org