Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/kjSrSqTbN8ec767YJtF0BFuk1Vs.roa
File: kjSrSqTbN8ec767YJtF0BFuk1Vs.roa (raw, json)
Hash identifier: tyC9tHrZhm3TnSudtKJM4juptONtF/iOlykfRCuEyA4=
Subject key identifier: 92:34:AB:4A:A4:DB:37:C7:9C:EF:AE:D8:26:D1:74:04:5B:A4:D5:5B
Certificate issuer: /CN=177e11f5233e933999a2a0c68903fc275ae459e6
Certificate serial: 018CC94E21F4973E9007AD7F15A134C40A83
Authority key identifier: 17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/kjSrSqTbN8ec767YJtF0BFuk1Vs.roa
Signing time: Tue 02 Jan 2024 08:33:10 +0000
ROA not before: Tue 02 Jan 2024 08:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34636
IP address blocks: 185.63.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 10:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:21:f4:97:3e:90:07:ad:7f:15:a1:34:c4:0a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177e11f5233e933999a2a0c68903fc275ae459e6
Validity
Not Before: Jan 2 08:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9234ab4aa4db37c79cefaed826d174045ba4d55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:d2:b9:08:0b:ee:49:98:7d:77:88:8b:02:
2a:80:e6:3f:a4:9c:db:7e:01:92:a2:98:31:4c:34:
f2:4c:35:de:eb:ab:26:33:a2:23:ff:0e:43:ad:7c:
ed:0c:67:7e:09:bd:0c:d4:48:7d:da:63:09:c5:d1:
1b:cf:8c:49:b5:20:08:1d:49:33:e8:1f:e5:9c:57:
05:4f:d8:c6:4b:b4:c2:e8:00:20:5b:a6:ea:69:24:
f6:d1:da:fd:5d:cf:a4:a9:77:60:79:3a:ac:00:2a:
64:9e:e5:2e:1c:f0:c6:52:41:0d:02:0a:96:19:b1:
5f:f0:74:66:b4:2e:2f:7f:8f:04:9f:d8:a2:cb:0d:
63:64:41:bb:48:20:13:f2:7c:26:39:2b:ab:51:03:
a8:f8:a4:9d:1a:a7:8b:83:8e:47:c5:4b:73:e7:f2:
d1:bf:0f:ed:59:3e:09:54:44:17:7c:28:ac:ec:0d:
e3:2c:43:e6:88:69:2d:6a:24:b8:c5:a6:23:e9:61:
43:8c:e7:45:e2:a8:73:07:37:53:a5:35:ab:f0:07:
3f:fe:de:92:3f:96:5e:38:b9:62:f9:76:36:53:65:
e5:51:ad:f5:c4:4b:c0:0a:d9:b6:bd:2d:5d:0e:8f:
43:ef:f8:10:02:3f:40:1a:38:d9:8c:5b:26:ec:c4:
da:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:34:AB:4A:A4:DB:37:C7:9C:EF:AE:D8:26:D1:74:04:5B:A4:D5:5B
X509v3 Authority Key Identifier:
keyid:17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/kjSrSqTbN8ec767YJtF0BFuk1Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.113.0/24
Signature Algorithm: sha256WithRSAEncryption
50:64:3c:72:fb:73:74:9d:15:ab:3e:83:6f:ee:35:38:62:06:
ee:cb:11:83:93:4f:18:01:2d:57:9d:5e:7a:cf:30:9e:9f:7e:
a9:4a:51:ce:39:60:32:7c:5e:b9:f6:0e:26:07:f8:ad:51:92:
bc:89:ed:01:6f:52:4d:22:16:63:27:f9:53:13:d1:fc:67:d8:
7c:ec:63:a4:4a:74:64:1a:68:25:58:12:c8:9c:c1:26:1c:3c:
1a:55:73:bd:b4:3c:de:35:20:ce:8d:ac:d4:34:54:0a:d6:f4:
a8:cd:21:5d:73:2e:f8:5f:57:db:7e:7f:3a:d4:85:58:47:29:
a5:5b:a5:76:28:6d:66:62:e3:ff:e9:e2:68:48:b8:f8:32:3e:
50:97:90:30:10:e2:d5:63:23:e0:6e:49:e4:2e:1c:ef:4f:41:
93:64:f2:a5:60:d5:d2:d1:9d:4a:2c:f6:a4:a2:2e:2e:8c:bb:
9d:e4:13:e1:fd:85:84:60:73:27:de:1e:53:89:e8:2c:c0:f3:
c7:b0:78:ac:77:06:03:2b:e2:db:9e:52:14:ac:ec:75:e0:c1:
4a:3a:32:60:3e:7f:07:84:b5:8d:d1:df:c9:c4:98:0a:93:a8:
58:0d:0f:9b:e8:76:17:bf:77:49:59:69:ee:84:61:ee:46:16:
22:35:35:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:07 2024 by rpki-client on console-fra.rpki-client.org