Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/m0ocqqsL6mQJbSZurtEQ3s-waLg.roa
File: m0ocqqsL6mQJbSZurtEQ3s-waLg.roa (raw, json)
Hash identifier: uEci82If7d2NT77ETAQ1QF3kWA8IGdadn4poDhdrqZU=
Subject key identifier: 9B:4A:1C:AA:AB:0B:EA:64:09:6D:26:6E:AE:D1:10:DE:CF:B0:68:B8
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 0189339771ED850A07B769C33569A998AFF2
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/m0ocqqsL6mQJbSZurtEQ3s-waLg.roa
Signing time: Sat 08 Jul 2023 03:41:50 +0000
ROA not before: Sat 08 Jul 2023 03:41:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.11.142.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jul 2023 10:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:33:97:71:ed:85:0a:07:b7:69:c3:35:69:a9:98:af:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Jul 8 03:41:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b4a1caaab0bea64096d266eaed110decfb068b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5a:f9:00:2d:60:70:68:4d:9c:66:71:82:ef:
75:30:ff:6a:43:44:29:05:62:56:fa:ae:12:05:d2:
3a:aa:4c:be:bb:ad:ff:c3:3d:19:0b:46:5a:0a:1c:
49:78:25:a7:7c:68:02:98:13:04:ce:13:9b:c7:84:
47:6c:e0:73:03:63:0c:dc:e6:93:d2:68:1b:02:d7:
3f:9a:df:70:8c:46:dd:77:62:70:d0:c5:87:fc:8b:
e9:3f:87:13:1a:70:39:a2:98:58:82:6f:80:0a:a3:
63:88:e1:09:32:84:c7:db:20:07:e6:be:b9:82:57:
0b:f4:bc:31:24:2e:7f:74:a1:77:08:3d:72:52:85:
88:09:5a:90:bb:cb:f1:8a:ca:b4:b6:c4:b2:10:d8:
21:c6:b6:6e:10:ed:2a:83:0f:37:3d:51:4b:ed:ba:
3e:ec:12:83:ed:d9:4b:ea:71:b3:5d:40:da:93:0b:
e1:22:1c:a2:0f:bb:85:f6:99:c0:63:4d:70:1c:6f:
74:08:e1:cf:96:43:d1:20:2d:3c:38:3c:b8:2d:84:
18:83:23:32:e1:56:2a:43:cd:7b:95:e0:7b:62:b6:
23:c3:06:8b:94:38:ef:5d:d3:05:d8:e5:8a:d4:0c:
a8:87:63:71:a3:a5:f7:e5:6a:d4:c9:b3:18:bc:b3:
37:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4A:1C:AA:AB:0B:EA:64:09:6D:26:6E:AE:D1:10:DE:CF:B0:68:B8
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/m0ocqqsL6mQJbSZurtEQ3s-waLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.142.0/23
Signature Algorithm: sha256WithRSAEncryption
18:62:21:cf:b0:7b:4f:cc:41:c3:6d:10:20:8e:4e:b2:c0:cb:
4e:d3:f3:93:6e:1a:5c:3b:8e:8b:23:a4:d7:71:20:85:b6:7e:
0e:75:59:51:8f:c2:d0:99:b2:22:ba:d3:66:ce:e6:51:9c:6e:
2a:23:3e:07:b9:5f:1f:86:04:db:c9:96:07:19:1d:fd:d0:01:
b6:d9:c7:bc:46:28:39:a7:41:22:81:a3:35:0e:32:a1:ee:c5:
13:9c:6e:c3:02:cc:5d:8f:b6:21:fc:c6:c4:37:0f:b3:6c:f1:
23:eb:63:f6:2f:af:07:77:2e:79:51:99:d4:76:95:c0:53:b1:
9b:68:26:30:e0:9c:81:58:cb:17:e6:ca:cc:fe:3c:44:5e:c4:
d0:2c:80:85:b6:d6:4a:7f:02:94:d7:81:d2:d9:0a:df:57:99:
56:2f:09:c8:bb:ba:ec:e1:2d:28:49:d0:88:0c:ea:fc:7a:04:
7c:c3:56:91:77:bd:bb:ac:f4:78:49:96:1d:5b:dc:37:19:d7:
0d:d6:6e:35:65:e6:06:66:32:6a:99:df:59:db:00:9e:07:54:
bf:9c:d6:7b:d7:fa:59:7f:ab:a1:a7:c3:43:60:1a:b8:25:1e:
2c:a5:6c:55:14:b6:14:1d:dd:1a:ca:85:19:b0:10:00:86:7f:
06:c4:12:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:30 2024 by rpki-client on console-ams.rpki-client.org