Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/bLBw2Qp0udmcQF0Dw0bfhAcCcow.roa
File: bLBw2Qp0udmcQF0Dw0bfhAcCcow.roa (raw, json)
Hash identifier: tSWneqko4lnbpz9S4NQ9BFL2/SWUwHFwQseFaJG82ls=
Subject key identifier: 6C:B0:70:D9:0A:74:B9:D9:9C:40:5D:03:C3:46:DF:84:07:02:72:8C
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 01872402CF1A0223FAF05A9E0B74F84994E8
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/bLBw2Qp0udmcQF0Dw0bfhAcCcow.roa
Signing time: Mon 27 Mar 2023 16:59:36 +0000
ROA not before: Mon 27 Mar 2023 16:59:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52073
IP address blocks: 185.143.241.0/24 maxlen: 24
185.200.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:24:02:cf:1a:02:23:fa:f0:5a:9e:0b:74:f8:49:94:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Mar 27 16:59:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6cb070d90a74b9d99c405d03c346df840702728c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fc:27:17:43:42:87:d4:d0:34:77:53:5b:0f:
b0:80:df:ab:6b:ad:c5:6a:ca:77:4b:be:d4:88:52:
d8:43:1c:e6:6e:5c:87:ed:c8:a3:32:9c:07:f5:d8:
d8:41:cb:5f:11:5a:96:14:e3:e7:a2:77:f2:a7:1b:
e6:d5:9e:a9:06:eb:15:d3:76:e5:32:37:02:88:93:
b6:bc:16:03:a3:a4:2b:e1:1f:d9:28:19:f8:b8:fe:
e1:5a:de:04:31:58:61:53:cd:89:be:f0:1a:8c:9f:
93:d1:13:37:38:8f:6a:05:16:dc:75:6e:be:d4:68:
84:a6:bc:35:55:5f:6d:e6:df:63:e3:20:9b:8c:5b:
6a:92:f5:f5:ec:e9:d5:27:3f:ee:d4:26:47:b2:09:
b4:78:ef:31:ba:20:06:bd:4e:69:6a:91:a6:66:ce:
bb:2a:d8:13:61:de:e0:00:fa:b4:20:74:f9:06:64:
71:c7:8b:62:6e:78:0a:25:97:da:67:79:29:3c:7c:
c0:9d:9d:9e:f1:fd:9a:e8:77:9b:bb:9e:b0:95:ef:
4c:66:e7:20:33:cc:ad:d1:6f:6a:40:97:4f:b6:3b:
26:a7:d6:f8:c9:a9:af:e6:e5:ba:26:a1:e3:e6:1a:
56:24:be:2c:30:e6:dc:cc:19:b5:74:b1:eb:2e:97:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B0:70:D9:0A:74:B9:D9:9C:40:5D:03:C3:46:DF:84:07:02:72:8C
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/bLBw2Qp0udmcQF0Dw0bfhAcCcow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.241.0/24
185.200.246.0/24
Signature Algorithm: sha256WithRSAEncryption
91:5b:1f:d7:6a:8c:40:dd:04:37:99:ce:c4:28:7e:24:23:8f:
e5:a2:41:8f:f0:91:c0:d9:4d:85:6c:0e:23:35:dc:27:5a:83:
95:ab:e3:27:02:b8:33:c8:31:08:2f:86:86:2d:c1:3b:70:1c:
07:e9:f1:a5:9a:d3:62:97:59:06:41:7d:b7:7e:97:ea:56:ab:
56:ac:1f:16:ec:a9:47:6e:07:0b:d8:f3:dc:7b:36:41:52:ce:
e7:c1:e4:7f:e0:f9:8b:58:87:b6:96:76:5a:5f:b9:e1:b1:58:
23:c1:1b:ab:c5:d1:29:58:b7:08:5e:3b:8e:e9:95:77:43:0e:
42:df:32:9b:5a:53:0c:a7:55:1d:62:67:04:8f:a4:7a:12:78:
1e:b3:62:d2:01:71:7c:fd:47:a1:f7:68:51:45:9d:bf:b8:20:
16:cb:fe:fe:62:f8:c7:c8:37:42:02:f0:35:95:cc:23:28:97:
54:16:91:57:ee:bf:9e:fb:cb:e9:ab:69:10:f6:6a:f8:54:96:
04:2b:92:24:68:ef:f3:c1:9e:22:da:31:af:bc:e3:7a:8e:16:
85:3f:ad:14:3c:0e:da:44:7c:c8:08:59:7c:2a:f0:3e:41:d2:
76:39:a5:3a:9f:4b:8e:c1:cd:e1:ad:f6:12:54:d6:79:5d:9a:
d3:3e:70:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:29 2024 by rpki-client on console-ams.rpki-client.org