Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/1DQ_Wq6Ihq7pDbRBBCB-CaWi2J4.roa
File: 1DQ_Wq6Ihq7pDbRBBCB-CaWi2J4.roa (raw, json)
Hash identifier: YoYvCE1H1TLOj8yH6lHZXmwLaOVuQGCHBQ153/cpHaM=
Subject key identifier: D4:34:3F:5A:AE:88:86:AE:E9:0D:B4:41:04:20:7E:09:A5:A2:D8:9E
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 018796A7072C8FF8D42E59FA3FC72FA74EF4
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/1DQ_Wq6Ihq7pDbRBBCB-CaWi2J4.roa
Signing time: Tue 18 Apr 2023 23:15:41 +0000
ROA not before: Tue 18 Apr 2023 23:15:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.138.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 May 2023 04:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:96:a7:07:2c:8f:f8:d4:2e:59:fa:3f:c7:2f:a7:4e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Apr 18 23:15:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4343f5aae8886aee90db44104207e09a5a2d89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e9:17:a7:61:99:44:81:47:a7:f7:20:2f:ca:
fc:09:b3:53:a5:f4:87:78:6a:5b:1f:eb:0f:32:6d:
e8:3a:1f:23:84:4c:37:d1:89:e8:0f:c7:b5:6d:c5:
87:f5:4d:50:1c:e3:7c:c5:4e:75:32:61:b7:84:f2:
d8:c5:26:f7:ed:77:8d:b0:22:f4:af:f6:d2:13:2e:
b6:fd:c5:a4:8f:f7:0b:e9:71:70:a4:97:f9:70:df:
cf:f5:c3:35:60:fe:3b:71:ad:27:db:9d:c4:fe:cd:
68:2f:e5:35:2f:8c:07:5d:e4:a1:ed:9d:7f:ff:01:
f8:31:45:e6:99:26:25:56:b0:26:4b:e6:b5:c0:ca:
a4:65:31:0f:1b:78:ee:30:33:69:63:9d:58:f1:00:
3e:e2:f1:f2:13:73:c9:fe:a9:91:95:ca:dc:8f:6e:
0a:53:77:40:96:91:49:56:d2:59:5f:ac:b7:e9:b5:
a7:cb:9c:32:99:9d:38:40:8a:63:93:a2:32:92:b1:
79:ac:08:1a:cb:c8:0f:15:c2:41:12:4a:85:4b:19:
8e:5c:74:69:a8:fa:56:61:bb:e0:53:e0:0f:6c:6d:
4e:a7:13:23:fb:dd:c1:ac:e7:b5:f8:7a:ec:2e:23:
34:4f:2c:ff:f4:7b:5f:04:80:d2:73:e6:ec:d1:d0:
43:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:34:3F:5A:AE:88:86:AE:E9:0D:B4:41:04:20:7E:09:A5:A2:D8:9E
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/1DQ_Wq6Ihq7pDbRBBCB-CaWi2J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.235.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:19:74:aa:c1:8d:0e:6b:3e:f9:ae:ed:46:37:86:09:2e:21:
b1:44:9d:a6:9d:7c:42:9b:42:b9:c8:e0:0b:35:8b:8d:53:de:
07:69:a3:75:cf:43:79:e7:a6:f4:74:a9:c8:60:19:9a:58:e9:
c6:24:82:91:c3:7c:c6:ea:a8:1b:9a:cb:f2:87:97:f1:11:f9:
33:0a:05:89:e9:02:f7:0f:9e:29:66:4f:af:82:1d:12:cb:ec:
7b:6a:98:22:f0:92:fc:50:01:fb:ae:2b:f3:74:df:a8:3c:b6:
e0:4e:b9:e4:16:df:a0:40:24:5b:8a:40:e6:b5:ae:7d:37:a8:
d9:f0:39:4c:15:93:e9:cb:87:45:c0:08:0f:e0:45:c4:9f:4a:
93:bc:79:97:b7:ec:b6:c5:40:45:84:45:08:38:0f:33:c4:8a:
b9:37:66:ad:4c:a0:a3:a8:41:78:a7:08:ab:d3:86:31:22:e3:
1e:e0:a5:3a:4f:1a:00:31:ac:5e:49:71:0e:45:9d:61:c0:97:
4a:88:f6:f4:3f:2b:29:75:48:cd:1a:dd:05:ea:ea:0c:37:4b:
1c:1c:1e:0d:c0:a4:80:61:fe:56:10:bc:58:9e:0c:5b:4f:d2:
61:9b:a2:44:67:3f:5f:7f:18:4b:b7:58:c5:c6:e1:43:62:4c:
c4:fe:28:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-fra.rpki-client.org