Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/CBHw9jhDKrMquym8Oq0XHyeYY4Y.roa
File: CBHw9jhDKrMquym8Oq0XHyeYY4Y.roa (raw, json)
Hash identifier: WTZdkHdre+oXhy1PSx7bUexIRJ27JG+KMz2YB5gpMPE=
Subject key identifier: 08:11:F0:F6:38:43:2A:B3:2A:BB:29:BC:3A:AD:17:1F:27:98:63:86
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 018E1BD226E4291965E3AD75583A8CAA00FE
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/CBHw9jhDKrMquym8Oq0XHyeYY4Y.roa
Signing time: Fri 08 Mar 2024 02:09:01 +0000
ROA not before: Fri 08 Mar 2024 02:09:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14315
IP address blocks: 185.200.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 21:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1b:d2:26:e4:29:19:65:e3:ad:75:58:3a:8c:aa:00:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Mar 8 02:09:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0811f0f638432ab32abb29bc3aad171f27986386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:cb:04:50:4e:3d:70:d1:3d:70:fc:55:c3:
66:86:56:22:c9:28:e4:1c:0a:ac:43:f2:a6:23:96:
66:fe:e4:b1:5a:12:8c:7d:ae:42:ca:ef:da:5c:60:
c4:58:3f:13:b9:e9:7b:1f:40:c5:4e:73:21:ba:8a:
45:2d:51:66:d6:7e:95:8f:06:3b:b4:2e:4f:77:c1:
e9:78:52:30:30:c2:09:ef:6d:15:45:c4:48:f1:66:
d5:5f:cb:fd:96:32:cb:79:4c:b6:2f:e1:8b:25:62:
b9:bb:64:f4:c9:52:b6:47:dc:ce:af:d0:18:b8:62:
93:1b:43:80:c5:b3:bf:9d:2d:ee:37:c8:99:07:bc:
79:dd:0a:c7:d3:1a:69:a4:ab:21:2a:44:18:cb:d7:
1a:bc:36:88:e4:25:a1:29:a8:0b:b1:54:ec:70:c7:
11:ae:19:00:39:65:d9:b3:09:09:32:ab:bd:23:b7:
6d:5a:52:31:c4:98:4a:a8:26:aa:5f:ae:8a:b6:fe:
6a:d6:56:57:92:b4:61:3a:8f:16:8d:80:c3:ae:45:
72:87:95:65:78:84:1c:0e:af:c9:bd:dd:41:fb:01:
95:54:d9:1f:31:35:ca:94:86:52:da:28:a8:79:cd:
ec:fd:ee:17:5e:c1:e9:b0:d8:f7:52:20:70:ab:47:
3d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:11:F0:F6:38:43:2A:B3:2A:BB:29:BC:3A:AD:17:1F:27:98:63:86
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/CBHw9jhDKrMquym8Oq0XHyeYY4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.244.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:38:83:e6:ef:39:6a:ef:bb:fc:ba:1f:51:ac:ce:b0:40:76:
69:2c:19:42:a4:72:dd:4c:05:6d:99:d2:c4:1b:27:d1:5f:15:
d2:27:ff:28:d4:55:c8:f9:3b:9f:fd:cc:9b:5b:b5:12:55:f6:
ae:b3:10:9b:53:c3:f7:0d:ac:e2:fc:e4:45:22:a2:c4:fe:14:
fc:8b:fd:13:3e:f0:c8:0f:ce:77:35:9e:14:1a:fd:c9:9c:05:
95:6c:17:14:b5:64:01:11:c2:9a:a0:aa:b0:97:00:82:b8:f2:
be:4d:57:83:7c:e1:a0:1e:fc:07:40:c0:50:82:1f:ac:7e:84:
a6:6b:d4:8a:c7:52:c5:d5:de:78:bc:65:d2:e5:96:ea:d8:8e:
aa:73:9c:95:c5:f0:21:1f:ff:ff:9c:d7:83:ae:7a:b0:d5:cb:
0e:20:fe:5b:e1:50:cd:93:64:48:92:02:96:20:8f:89:1d:eb:
21:6a:0d:c8:48:9a:83:2d:69:85:d1:92:a7:d6:6b:98:8d:2c:
54:ec:fc:6e:20:97:13:04:c7:1c:9d:d8:e0:f7:08:79:d1:ba:
bf:f2:a4:3b:23:33:68:6f:4d:61:f1:9c:be:6d:b4:e1:58:70:
2d:b2:15:f3:d6:f2:05:fa:c8:bb:1a:c8:f4:af:f5:a0:24:2f:
96:84:2d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 00:55:02 2024 by rpki-client on console-ams.rpki-client.org