Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/2OdU4VN-dGqKslTLXg0Y-I2o0eY.roa
File: 2OdU4VN-dGqKslTLXg0Y-I2o0eY.roa (raw, json)
Hash identifier: SUFnsk/UZJkZ7yOQqnSOfXTNdjrRTVTVtbFi+rvWPao=
Subject key identifier: D8:E7:54:E1:53:7E:74:6A:8A:B2:54:CB:5E:0D:18:F8:8D:A8:D1:E6
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 01856CE40C33216AB5172DFE665AA1EBFE7C
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/2OdU4VN-dGqKslTLXg0Y-I2o0eY.roa
Signing time: Sun 01 Jan 2023 10:32:42 +0000
ROA not before: Sun 01 Jan 2023 10:32:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212384
IP address blocks: 185.11.140.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e4:0c:33:21:6a:b5:17:2d:fe:66:5a:a1:eb:fe:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Jan 1 10:32:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8e754e1537e746a8ab254cb5e0d18f88da8d1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:94:b5:b7:04:ff:33:d2:fd:ca:a9:02:ff:
8e:94:4a:72:eb:ca:30:6f:bc:5b:bf:46:98:41:bc:
31:62:d5:3a:3a:c1:d8:be:98:74:f0:67:11:39:33:
7f:a1:13:4d:db:f7:b3:19:cc:74:a8:d0:ba:9c:1f:
a6:bc:92:5a:99:2d:3b:86:02:9e:9f:8d:f9:f8:79:
ef:23:49:58:75:57:67:1e:e7:4a:ba:13:90:d3:88:
74:fc:ff:c5:7b:13:60:67:a6:54:0e:e9:17:ff:4d:
09:99:a7:15:f3:71:ae:5a:d2:34:3d:5e:65:1e:2b:
25:4b:4e:12:28:58:06:f4:78:0d:ea:45:74:bd:ad:
58:e1:fa:0a:34:46:97:09:67:13:df:49:b2:92:d9:
7d:1a:6e:e0:cb:39:fa:31:bf:e0:28:cb:15:db:a6:
93:38:70:f2:d3:02:c4:e9:4d:05:7a:8a:5a:4d:7f:
ce:80:06:8a:9a:a2:7f:fc:9f:7a:34:5f:fd:83:03:
44:13:1d:b0:c3:15:47:ed:b7:e8:18:b4:53:52:50:
7d:17:85:bf:5a:05:66:4d:07:22:53:e5:d0:09:73:
80:c0:d5:a5:ae:23:c6:09:9e:e4:ed:2d:f1:59:53:
59:c0:2c:70:26:ef:f7:3c:e1:0b:fb:94:d9:68:f6:
06:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E7:54:E1:53:7E:74:6A:8A:B2:54:CB:5E:0D:18:F8:8D:A8:D1:E6
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/2OdU4VN-dGqKslTLXg0Y-I2o0eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.140.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:63:b1:09:8e:f6:84:16:64:f1:87:ba:9d:cf:64:7f:87:a9:
43:33:d8:61:da:82:d5:1c:e7:65:c9:76:7d:42:56:c4:f6:37:
ea:5b:3c:99:ea:08:d2:3c:29:63:b8:d3:0b:42:0c:1e:55:45:
06:e8:a7:df:32:e5:a9:43:cf:1d:6c:19:15:42:0e:65:08:b6:
15:85:76:cc:5f:79:f7:91:77:d7:a3:1b:f9:c2:d6:04:ea:2c:
32:68:8f:f8:42:30:92:f3:4b:5b:f4:5a:b1:cb:bd:c6:03:63:
dd:92:ad:35:94:b7:f1:16:9d:5a:aa:8d:1e:54:da:5b:bc:5e:
6e:86:01:53:e8:d1:8a:a8:0e:26:ef:ea:70:39:89:45:24:55:
c3:ac:6b:c6:5d:5c:25:37:00:1f:62:3e:fa:1a:58:9a:ce:15:
32:4e:ef:a8:66:a0:06:fb:a3:60:6d:10:81:82:4d:7a:cc:f8:
42:78:1b:26:64:60:92:b4:98:db:8c:dc:34:d0:71:76:86:c9:
6c:94:6e:e8:cb:8f:a9:d1:43:dd:98:17:fe:d2:58:6a:c1:9a:
81:6e:88:cf:9b:36:2d:4a:f0:e2:ab:4b:09:37:f7:8b:b7:f2:
b7:5c:f9:3d:c2:71:0d:3e:ba:ee:fb:0f:67:1d:fd:bb:fd:65:
70:de:48:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:30 2024 by rpki-client on console-ams.rpki-client.org