Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/tnNM43rXuLCdvTF8JYq6aS_y76s.roa
File: tnNM43rXuLCdvTF8JYq6aS_y76s.roa (raw, json)
Hash identifier: 1ezA7CN5IncTI61Y5TuRUJJPDw9zbzsXzSf0aakenHY=
Subject key identifier: B6:73:4C:E3:7A:D7:B8:B0:9D:BD:31:7C:25:8A:BA:69:2F:F2:EF:AB
Certificate issuer: /CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Certificate serial: 018CC26D792F11D71F6649EED8D85E5C5070
Authority key identifier: 05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/tnNM43rXuLCdvTF8JYq6aS_y76s.roa
Signing time: Mon 01 Jan 2024 00:30:03 +0000
ROA not before: Mon 01 Jan 2024 00:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198089
IP address blocks: 185.98.124.0/24 maxlen: 24
185.98.124.0/23 maxlen: 24
185.98.125.0/24 maxlen: 24
185.98.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 12:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:79:2f:11:d7:1f:66:49:ee:d8:d8:5e:5c:50:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Validity
Not Before: Jan 1 00:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6734ce37ad7b8b09dbd317c258aba692ff2efab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:7d:68:bc:ae:b6:1a:a1:78:83:d0:d6:de:
59:ee:a6:c9:29:21:af:b5:d6:30:d7:5b:f6:4a:13:
af:c4:53:5f:7e:57:39:6c:1b:2f:ec:f0:ae:28:5b:
75:1e:c7:6a:f3:d7:0c:ce:3c:21:fb:a7:6f:00:c9:
73:10:15:69:4a:ac:25:97:be:ff:36:c0:17:57:2f:
2a:72:89:d3:88:ac:73:96:c9:64:45:a3:9b:cc:3f:
7c:6a:61:63:34:57:78:1e:9e:0e:c8:84:83:c0:4e:
4f:82:9c:d0:5d:b7:3d:c4:b8:bf:65:85:1a:3d:b4:
01:0f:dd:60:4c:0a:9c:00:36:b5:ab:2b:d8:da:e4:
d3:3c:c7:1f:30:e0:0f:e2:cd:de:38:36:c0:ec:67:
06:2f:84:3a:b5:dc:ed:1c:7b:7c:99:cc:13:ad:ce:
50:d0:40:32:5f:a5:28:00:6b:32:d1:3e:7c:2a:f7:
dd:37:3b:7d:26:25:7d:37:20:50:60:3f:17:76:64:
41:77:a3:ff:e6:d7:50:42:26:02:d4:c5:47:53:05:
bc:04:55:e7:cc:1c:33:88:90:5d:2c:67:23:45:0e:
76:e4:36:52:80:d0:8b:0d:9a:05:2e:24:0a:a9:44:
ea:9c:3a:94:17:e1:ca:01:10:5e:02:42:7b:61:ea:
88:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:73:4C:E3:7A:D7:B8:B0:9D:BD:31:7C:25:8A:BA:69:2F:F2:EF:AB
X509v3 Authority Key Identifier:
keyid:05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/tnNM43rXuLCdvTF8JYq6aS_y76s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.124.0-185.98.126.255
Signature Algorithm: sha256WithRSAEncryption
18:52:33:ed:34:e1:1b:f2:8f:19:ff:4c:c4:5a:21:be:da:33:
bd:8f:dc:76:f0:46:aa:91:6c:06:56:64:b5:13:cc:14:f6:8f:
2c:8a:9f:5c:f5:6d:9e:0b:50:6f:1d:97:d5:d6:79:c5:26:d3:
66:cd:58:f0:97:23:c7:f9:31:fd:48:07:49:78:dd:83:60:36:
29:eb:86:8b:ea:a4:2b:02:64:53:c1:56:2a:83:1e:16:57:49:
a7:8d:12:90:ef:65:0a:68:95:9e:d3:3d:be:a4:b6:5c:2e:8d:
71:5a:84:37:8a:32:8a:74:3b:74:60:32:42:e4:ad:39:ed:b1:
e7:eb:e1:ad:60:8b:d5:62:92:a9:6f:e8:04:2c:18:20:ea:27:
ce:59:9b:3a:ef:63:84:d4:b5:e5:03:d2:a2:d9:17:76:cc:cb:
32:91:00:d8:04:9d:72:97:88:36:82:8c:cf:bb:13:17:d1:08:
47:81:3c:6d:80:bb:0a:ab:9d:34:99:fc:1b:b5:0b:a4:e4:fb:
34:d8:1e:43:24:2b:67:50:33:c8:af:bf:5d:25:92:75:38:d8:
4b:bb:50:91:b6:20:81:7a:4f:9d:30:6d:25:d7:80:0b:f7:8f:
f6:02:91:15:ca:d6:57:d8:c2:b2:70:81:07:91:fb:54:c7:15:
f7:63:63:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 17:54:50 2024 by rpki-client on console-fra.rpki-client.org