Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/9sZtdOMzpH8JeJRgOI2sQM7EYpM.roa
File: 9sZtdOMzpH8JeJRgOI2sQM7EYpM.roa (raw, json)
Hash identifier: ZP/HJGy+7xvuAtnwcZkigTJTV09aGNpXzANroBFzyf8=
Subject key identifier: F6:C6:6D:74:E3:33:A4:7F:09:78:94:60:38:8D:AC:40:CE:C4:62:93
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 0185CE45334DE99BAC710C3222C10588A390
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/9sZtdOMzpH8JeJRgOI2sQM7EYpM.roa
Signing time: Fri 20 Jan 2023 08:21:59 +0000
ROA not before: Fri 20 Jan 2023 08:21:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3262
IP address blocks: 185.194.24.0/24 maxlen: 24
185.219.217.0/24 maxlen: 24
185.219.216.0/24 maxlen: 24
185.219.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Feb 2023 11:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ce:45:33:4d:e9:9b:ac:71:0c:32:22:c1:05:88:a3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Jan 20 08:21:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6c66d74e333a47f09789460388dac40cec46293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b3:ae:19:4a:d0:3c:4e:7c:52:52:55:5b:a7:
ea:98:15:a3:c3:a5:46:40:a0:3e:fe:b3:8e:3d:49:
d0:6f:38:9e:85:aa:d6:f7:25:07:85:59:1b:17:8d:
7c:cb:67:67:62:7b:e5:5b:23:fe:ca:2d:03:e8:6c:
f5:bb:ba:8a:ac:b1:5e:88:15:2e:ec:78:ae:93:4a:
bc:79:53:70:7a:f1:9d:e2:0d:f0:61:f9:91:02:83:
4c:9f:90:40:e1:d4:7c:b5:58:54:7e:cb:bf:81:b0:
55:e3:bb:f9:ab:8a:7e:2b:70:6e:45:db:ce:86:03:
ce:7c:cb:6b:9b:41:aa:46:b8:fc:44:dd:59:4d:cb:
a9:99:62:8e:f2:8c:3c:55:ea:f6:e8:1a:65:8e:5b:
90:98:58:2f:d8:98:48:a1:c6:98:70:eb:85:2f:ec:
90:72:f6:ed:84:8f:f3:a9:4a:94:bf:7c:b2:22:f6:
5d:70:14:63:d6:c2:be:56:91:39:e7:00:c4:19:a4:
3d:65:e3:5c:5d:a4:5a:d8:15:ca:5c:b7:aa:50:51:
7f:8a:45:a2:5d:15:38:33:7c:f3:9c:28:f7:bc:99:
db:20:12:45:4c:f8:ec:69:6f:7f:de:1c:38:fc:64:
19:16:00:53:2c:a1:81:62:00:5c:43:73:68:94:02:
c3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C6:6D:74:E3:33:A4:7F:09:78:94:60:38:8D:AC:40:CE:C4:62:93
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/9sZtdOMzpH8JeJRgOI2sQM7EYpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.24.0/24
185.219.216.0/23
185.219.219.0/24
Signature Algorithm: sha256WithRSAEncryption
42:98:c6:d6:c1:6d:04:0c:d3:48:5b:73:91:1d:5d:59:61:84:
55:3a:65:56:c9:7f:72:10:aa:c0:e6:ce:6c:b0:75:15:03:bf:
9f:80:15:b6:40:98:89:b8:5a:a7:0b:ec:5f:93:f2:f9:b5:0d:
d4:cb:25:9d:e9:fa:65:49:7a:5d:c8:99:51:7a:c4:8e:a3:28:
e7:09:6a:6c:d1:bd:80:9c:81:d9:af:0e:36:c4:20:55:3b:09:
ef:6b:43:e4:35:24:b0:83:3c:25:85:f9:e2:8d:15:db:76:2c:
f8:be:2c:d2:62:4a:e8:9e:fc:5a:a0:a6:c2:95:9f:7e:5b:39:
c3:fc:30:fb:92:35:0c:65:c7:8c:cc:61:3e:af:f0:63:66:3e:
c3:31:0e:50:f6:ff:de:92:32:d3:ef:e3:dc:4e:8b:bd:70:89:
bd:49:11:43:ba:d2:09:72:cd:98:c6:35:87:ca:f1:5e:36:ba:
42:53:f1:73:6a:73:80:17:95:13:69:ae:25:e1:d6:9a:0f:9f:
29:71:bb:a7:0a:97:1e:d0:4c:8c:d9:c3:ed:6b:25:fe:bc:99:
bf:d8:04:7b:c3:9f:56:7d:39:5f:6e:73:ef:15:88:7a:c5:7e:
f8:b6:18:8e:91:5a:52:45:42:37:72:62:f9:17:c8:33:b7:52:
ee:44:e2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:38 2024 by rpki-client on console-fra.rpki-client.org