Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/xG3mRHOCojH0yVqE0G_vh4SFKUI.roa
File: xG3mRHOCojH0yVqE0G_vh4SFKUI.roa (raw, json)
Hash identifier: YE0KIbQJksqmeeasp26JH3uU6Go4+F9GviZaaMe/xC0=
Subject key identifier: C4:6D:E6:44:73:82:A2:31:F4:C9:5A:84:D0:6F:EF:87:84:85:29:42
Certificate issuer: /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Certificate serial: 0186A2A63F1BCC666CF5183FE5C313BF3C95
Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/xG3mRHOCojH0yVqE0G_vh4SFKUI.roa
Signing time: Thu 02 Mar 2023 14:07:29 +0000
ROA not before: Thu 02 Mar 2023 14:07:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201584
IP address blocks: 185.199.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:a6:3f:1b:cc:66:6c:f5:18:3f:e5:c3:13:bf:3c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Validity
Not Before: Mar 2 14:07:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c46de6447382a231f4c95a84d06fef8784852942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5a:97:95:7f:07:27:29:cf:d0:a7:6a:6a:eb:
bc:30:3e:ac:b6:88:c0:26:ec:63:1f:87:31:3e:dd:
7f:51:df:63:da:65:f0:c2:9c:3e:51:a9:91:da:c2:
4f:5f:f4:b3:18:fd:c8:a3:e2:35:60:8b:b1:7c:bb:
03:0e:46:e8:b3:71:0b:62:83:a0:1d:70:d7:f7:6a:
af:0e:d7:31:ad:24:3c:60:05:b8:a8:39:79:0e:05:
a8:a2:71:ed:48:ce:11:02:35:35:f7:fd:a2:99:cd:
6f:d1:fc:8d:83:24:9a:06:da:a4:e1:91:00:d3:f7:
99:06:a6:6d:a1:33:d3:9b:af:d3:b1:a9:9b:53:a5:
5e:af:91:fd:f2:fc:af:02:24:15:37:6a:9a:12:13:
45:2c:5d:59:dd:61:4b:c5:05:1e:da:64:b1:9f:f6:
61:57:db:4a:af:bb:2b:5a:e8:cb:cf:a6:8d:0f:4b:
21:a6:92:3f:c2:0e:e2:4d:c9:e4:47:ba:43:ba:02:
59:51:72:40:a1:82:f5:a0:f5:fd:c3:e9:ce:06:64:
e3:f4:80:f1:41:ee:50:b3:99:c7:c2:35:8c:42:07:
98:e3:50:51:86:c0:55:23:9a:cf:cd:ae:d5:1a:3b:
37:11:c0:13:67:4f:c7:df:4b:55:02:69:5f:dc:2b:
b5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6D:E6:44:73:82:A2:31:F4:C9:5A:84:D0:6F:EF:87:84:85:29:42
X509v3 Authority Key Identifier:
keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/xG3mRHOCojH0yVqE0G_vh4SFKUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.209.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:ce:f5:32:74:7d:76:67:79:4d:3d:7f:13:e3:d6:12:b8:f8:
25:4e:8e:17:f1:88:ed:fc:e7:8e:25:53:a5:db:97:d2:2e:ed:
1a:aa:50:17:b7:da:da:90:f1:de:58:d2:50:b1:55:02:90:6c:
5e:6b:a8:38:b6:bf:1b:fe:73:af:11:d9:3d:fd:93:1e:4e:07:
76:3b:4d:72:f4:85:2b:1d:62:e4:44:ab:bb:f8:e5:34:d7:62:
04:72:3e:71:4c:12:d8:56:2e:05:6f:d7:22:72:bc:7b:c8:dc:
e6:e3:ba:a4:d6:b0:e5:77:f7:dc:ea:1d:1e:2b:e7:40:f1:77:
f4:a6:0b:b9:c4:c2:51:05:42:30:91:3e:04:0e:19:01:21:82:
7c:0a:97:3e:15:b6:89:c9:e1:13:35:f1:c6:47:8f:76:25:24:
cd:35:19:43:b4:b6:de:6f:cf:b1:b8:f2:aa:c0:21:a9:a7:cd:
37:70:a1:5e:4c:fd:05:f6:15:bd:2a:76:8a:62:52:9a:f9:8a:
4d:87:5d:ec:e4:ec:d2:73:fe:cf:8b:e2:3b:37:e7:fb:aa:60:
9e:be:0c:ba:10:79:76:be:08:6f:de:fb:3b:78:6e:29:87:1d:
d5:3f:ea:4f:76:4a:b2:10:6d:c6:5c:9f:2c:15:ef:33:a2:8c:
fe:a0:a7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:00 2024 by rpki-client on console-fra.rpki-client.org