Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/8CdBeKtM4DMvf0ny4MV1WglFP1o.roa
File: 8CdBeKtM4DMvf0ny4MV1WglFP1o.roa (raw, json)
Hash identifier: 6onAF0FzMnLUBajs/t+1RV/r8XUHnIjfS6tbvyCoKSI=
Subject key identifier: F0:27:41:78:AB:4C:E0:33:2F:7F:49:F2:E0:C5:75:5A:09:45:3F:5A
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 0186A6CC442A9D4FD36950E10E093B851460
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/8CdBeKtM4DMvf0ny4MV1WglFP1o.roa
Signing time: Fri 03 Mar 2023 09:27:29 +0000
ROA not before: Fri 03 Mar 2023 09:27:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61135
IP address blocks: 185.125.202.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Mar 2023 19:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:cc:44:2a:9d:4f:d3:69:50:e1:0e:09:3b:85:14:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Mar 3 09:27:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0274178ab4ce0332f7f49f2e0c5755a09453f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:e5:30:bf:bb:7f:52:78:ec:5b:41:e4:55:
4a:ba:50:1f:6a:ae:cf:8b:39:7c:0e:49:fc:42:31:
07:1c:1d:a5:ff:a2:1c:e7:2d:c0:b9:b0:c4:4c:cb:
84:c5:40:5f:6c:86:11:e0:39:17:5c:01:66:3e:a1:
a1:8d:e7:44:f1:ba:b1:4f:1a:40:9b:92:3a:e2:cb:
5a:d9:ff:53:ae:7f:58:f8:f7:82:74:57:43:2f:22:
aa:0e:44:c2:26:75:72:96:be:11:e7:49:a4:7d:e4:
d7:85:80:56:de:27:62:11:a6:7f:8e:92:b7:c5:75:
84:41:ce:20:78:5a:36:ac:48:97:c4:dc:d0:af:fb:
0a:a9:76:b6:2d:19:92:7a:55:ef:64:18:ad:05:60:
1e:9b:80:1d:f7:81:1a:33:53:20:f5:38:55:ae:30:
78:27:6e:3b:5b:47:36:d6:31:00:0c:de:84:a6:ba:
ae:a3:b1:94:62:8f:a3:f3:0c:75:7b:aa:59:85:ac:
4c:39:0a:03:ed:81:7c:4c:24:98:54:34:b1:1a:e3:
96:ca:5b:33:3e:16:bf:05:4c:84:09:54:e6:d9:d1:
47:dd:53:d2:75:79:e3:e8:8f:b4:bb:fb:67:61:d1:
14:6e:ac:9a:02:dd:8e:7e:55:8c:1b:de:4e:4a:59:
8a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:27:41:78:AB:4C:E0:33:2F:7F:49:F2:E0:C5:75:5A:09:45:3F:5A
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/8CdBeKtM4DMvf0ny4MV1WglFP1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.202.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:a6:66:c6:93:d0:f4:c8:36:57:1b:c9:4f:af:b1:f3:49:cc:
0c:dd:ff:45:70:50:70:be:dc:ea:54:4a:59:0c:e2:db:d9:a1:
63:5e:73:bc:33:23:34:b3:b7:22:3e:46:6d:a9:50:b0:81:14:
ba:14:38:db:a3:8f:c6:22:cd:83:b4:b9:f5:be:5d:f8:79:b3:
a7:75:87:eb:f3:72:0e:b3:ef:ec:c1:ba:5b:5b:31:e3:6c:4c:
3d:97:13:8b:5a:dc:81:c7:7c:17:ba:30:d5:7b:86:df:77:6c:
9a:f4:b8:b5:e2:b9:97:00:1d:15:18:d6:d8:e6:f1:5a:58:e2:
24:f5:03:27:02:81:54:66:f9:5c:d2:40:c5:b2:ab:4a:ef:a5:
75:d1:d6:76:8d:36:ab:a5:85:0c:dc:46:15:58:ba:f3:03:1b:
c9:13:fd:be:4b:22:f1:32:b6:62:da:19:27:0b:bc:06:78:9b:
37:9c:ff:52:79:aa:0f:9f:fa:8c:5c:5e:0c:db:32:b8:0a:8b:
8c:ce:28:13:47:99:76:4a:04:22:3d:ee:7a:0e:63:b2:da:44:
9e:5c:5d:be:26:bd:52:02:43:11:f8:89:a0:7a:4b:78:97:c2:
b2:bc:e5:74:73:6e:66:f7:0e:d9:7d:89:cd:3d:64:0e:fd:0d:
51:3f:af:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:23 2024 by rpki-client on console-ams.rpki-client.org