Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/zDuALPsWK10j_UtpYD5d1Mgplt8.roa
File: zDuALPsWK10j_UtpYD5d1Mgplt8.roa (raw, json)
Hash identifier: Hl9+CDXf/tE+iZYu58HXsraUSJgobgeUXbe/47qbkHI=
Subject key identifier: CC:3B:80:2C:FB:16:2B:5D:23:FD:4B:69:60:3E:5D:D4:C8:29:96:DF
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 0185917CA065A46CBB4C6AAEC259CF8BFC6E
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/zDuALPsWK10j_UtpYD5d1Mgplt8.roa
Signing time: Sun 08 Jan 2023 13:05:41 +0000
ROA not before: Sun 08 Jan 2023 13:05:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 185.11.142.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Mar 2023 06:35:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:91:7c:a0:65:a4:6c:bb:4c:6a:ae:c2:59:cf:8b:fc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Jan 8 13:05:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc3b802cfb162b5d23fd4b69603e5dd4c82996df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7f:50:be:89:27:dd:d5:4c:cd:a9:2b:29:84:
8d:9e:45:38:a6:ff:99:21:66:c6:41:b7:26:84:c0:
88:1e:8d:a6:15:06:22:e6:7d:ab:d7:1a:c3:81:1b:
a0:ef:fc:cb:ba:50:b2:9c:75:4e:46:13:41:00:5b:
82:f8:17:b1:69:2a:bb:84:37:df:ef:4e:b9:85:35:
3d:bf:93:dd:85:a2:ae:70:a6:40:60:a6:5e:f1:73:
a6:5c:8c:97:19:50:7f:56:6f:eb:cd:1f:26:99:c1:
f6:06:d0:fc:63:6a:d9:f0:5c:b3:7b:17:f4:59:09:
53:9c:ea:e3:0c:05:1d:71:86:87:a7:b9:9e:62:7c:
1a:55:30:33:16:b1:c6:90:93:71:66:87:02:05:fd:
02:70:b7:76:1d:74:89:18:b9:30:62:47:bf:7b:03:
19:e4:0c:4f:2f:65:9c:e4:75:2e:4c:23:cb:b3:f1:
22:7f:a5:21:53:0b:b9:25:94:35:c2:58:56:c3:c1:
b5:0f:63:b2:3b:74:6e:8f:f3:7b:4d:dc:62:c5:08:
bf:ee:7d:cd:f7:40:c8:59:cf:f8:d0:b1:d7:68:1e:
cc:f8:cd:0c:fb:47:70:61:c8:04:f9:92:e7:6b:75:
97:c8:51:3f:6f:c2:ef:f1:3e:eb:66:1a:f4:94:b4:
1e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3B:80:2C:FB:16:2B:5D:23:FD:4B:69:60:3E:5D:D4:C8:29:96:DF
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/zDuALPsWK10j_UtpYD5d1Mgplt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.142.0/23
Signature Algorithm: sha256WithRSAEncryption
51:90:a4:fb:7e:0a:ab:9b:3c:6f:61:65:70:f2:5d:5e:f2:76:
ae:db:1f:11:86:f1:f4:8b:72:94:6b:c9:86:30:f1:2f:23:86:
b3:79:3f:96:e9:98:e9:d1:f4:20:56:53:26:0a:24:9b:3e:2f:
52:a4:80:d0:6f:a1:a1:a3:4d:18:46:4f:32:f8:a6:47:fe:7e:
27:e0:90:77:48:e4:2e:a6:a7:ac:96:64:9e:2b:3c:d0:68:ff:
96:0f:d5:a9:25:5f:63:94:61:1e:93:a2:8c:42:fd:20:ea:e3:
4c:12:3a:b2:c6:df:d5:7e:2a:53:f9:b2:97:3d:57:3d:67:55:
61:87:a2:43:56:43:69:8f:f2:32:06:d6:30:2c:cd:ac:c7:66:
ac:3b:6b:60:2e:20:4d:c1:89:e4:72:ac:11:d2:ad:d3:2b:ee:
c0:f9:b6:2d:29:84:0d:1f:fb:d0:7d:1b:c0:63:d2:f7:fa:af:
e0:42:c5:29:8d:03:8e:62:b6:cc:e9:30:1b:5a:df:ed:91:ab:
34:58:fc:55:d6:f0:c2:8e:ea:61:fb:93:42:34:82:a5:05:77:
3f:73:af:f7:dd:5e:00:33:5d:02:eb:12:f7:22:bf:83:50:a1:
81:06:8f:d5:05:d7:2f:a6:4e:f0:b9:af:d3:a5:94:58:83:a1:
d7:5a:43:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:31 2024 by rpki-client on console-ams.rpki-client.org