Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/8WoDRIYvtShtyRZS1vjGLAdTVJg.roa
File: 8WoDRIYvtShtyRZS1vjGLAdTVJg.roa (raw, json)
Hash identifier: yXcFP2878+P48mmDkaQ2m79bodnWPEsHwPEA7IsHKNs=
Subject key identifier: F1:6A:03:44:86:2F:B5:28:6D:C9:16:52:D6:F8:C6:2C:07:53:54:98
Certificate issuer: /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Certificate serial: 01883DF5A12E281E2768BB66580AE5002F7E
Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/8WoDRIYvtShtyRZS1vjGLAdTVJg.roa
Signing time: Sun 21 May 2023 10:58:07 +0000
ROA not before: Sun 21 May 2023 10:58:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60051
IP address blocks: 185.141.8.0/24 maxlen: 24
185.141.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Dec 2023 06:45:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3d:f5:a1:2e:28:1e:27:68:bb:66:58:0a:e5:00:2f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Validity
Not Before: May 21 10:58:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f16a0344862fb5286dc91652d6f8c62c07535498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:34:d8:de:8c:7e:a0:01:6e:75:5a:fe:e4:
34:7b:20:6b:00:6c:44:7e:0b:40:ff:ce:c9:50:50:
cb:b3:8b:f2:82:7d:f1:74:31:83:58:c9:5b:8a:92:
5f:46:26:78:8d:ea:eb:23:90:4c:23:45:33:8b:b0:
b5:7a:35:02:a0:57:5d:a6:9a:f7:21:79:7f:18:c4:
2d:da:a9:b6:6f:5e:6d:cb:ad:fd:23:c9:ac:c8:e3:
ca:8e:a8:14:36:5a:00:78:61:bf:b6:37:d6:4d:b0:
a8:1d:08:c4:0d:1b:4a:ed:0b:fe:fc:c1:1a:93:36:
9e:32:09:c3:a1:b6:2b:29:82:8d:b0:fe:af:88:45:
af:7f:cd:e6:ff:39:b7:39:1f:bf:83:1b:25:ee:4b:
ae:e5:6e:ec:dd:09:39:68:83:e1:6a:4e:cc:c4:4d:
7e:58:9e:06:ec:23:95:8c:84:3f:36:46:bd:d9:45:
7e:5f:f7:70:42:96:fa:18:82:81:8e:95:7d:39:74:
b2:0c:78:8b:a9:a5:83:4f:ff:23:60:81:8b:c2:cf:
2a:c7:d6:2c:c4:20:38:d1:c2:bb:88:d6:a4:54:89:
21:ac:67:2d:e5:93:09:79:b9:75:76:f5:4d:01:7b:
d3:27:21:ed:84:12:47:be:04:b3:83:63:3c:10:de:
21:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6A:03:44:86:2F:B5:28:6D:C9:16:52:D6:F8:C6:2C:07:53:54:98
X509v3 Authority Key Identifier:
keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/8WoDRIYvtShtyRZS1vjGLAdTVJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.8.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:a8:7d:dd:46:b6:4e:ee:1d:c0:9f:95:e2:2d:28:d0:20:bb:
0a:11:71:d4:5d:47:38:eb:4b:72:92:7b:3e:9c:2a:4e:4b:b2:
f8:df:ae:ec:13:25:6b:15:ed:24:06:bb:8b:9d:87:22:d4:bb:
24:2b:5b:0e:9f:cd:70:7b:e8:01:40:7b:b4:70:a1:35:6a:cb:
28:2e:9e:e4:f0:4d:27:e3:ee:09:2d:be:96:d2:93:b7:ac:47:
d0:f4:87:fd:d1:9f:2a:bd:c8:96:ba:82:e3:28:25:8a:bd:22:
00:1a:e2:03:ee:24:82:33:08:2b:e6:4e:81:45:11:a5:c4:2c:
62:07:a9:6a:e5:d1:e4:9a:ba:75:f9:1b:1f:1d:56:08:ff:90:
3c:11:90:bd:cd:d0:80:da:23:84:2e:31:22:1f:5d:dc:40:0e:
d4:5e:12:e7:35:55:b9:e5:fa:ec:64:4a:58:23:7e:4d:51:ae:
55:fe:b7:c3:a5:9f:5c:4a:d5:73:d8:76:9d:f7:90:34:64:01:
4a:17:0d:03:1e:0f:d7:04:71:d2:f3:89:4e:22:5c:5d:2b:31:
8d:1b:2c:fc:84:bb:07:23:c0:90:0d:6a:a2:0f:49:61:66:2e:
4c:a1:29:ea:38:29:74:e8:89:ff:75:51:6b:36:29:07:83:02:
00:b9:3d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:07 2024 by rpki-client on console-ams.rpki-client.org