Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/DG1i7zJsQOX12LmLXC2xReiqjvI.roa
File: DG1i7zJsQOX12LmLXC2xReiqjvI.roa (raw, json)
Hash identifier: B6/HbDaxZWFB5CnwbNF/NBZULvTslZRnBEqLzs6yigE=
Subject key identifier: 0C:6D:62:EF:32:6C:40:E5:F5:D8:B9:8B:5C:2D:B1:45:E8:AA:8E:F2
Certificate issuer: /CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Certificate serial: 018B676ECAD5D8735DD315D1E45F9E19CA33
Authority key identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/DG1i7zJsQOX12LmLXC2xReiqjvI.roa
Signing time: Wed 25 Oct 2023 15:23:15 +0000
ROA not before: Wed 25 Oct 2023 15:23:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50840
IP address blocks: 185.237.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Dec 2023 16:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:67:6e:ca:d5:d8:73:5d:d3:15:d1:e4:5f:9e:19:ca:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Validity
Not Before: Oct 25 15:23:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c6d62ef326c40e5f5d8b98b5c2db145e8aa8ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0f:c9:f4:9e:3a:49:d6:d3:03:f2:bd:63:9e:
27:53:b0:43:7b:54:a4:1b:34:06:f8:10:32:64:70:
02:56:d3:3e:4e:8d:4e:f2:33:7f:37:5a:29:7d:dd:
79:de:b8:57:79:9f:83:a8:f3:10:74:f3:f7:a1:cd:
35:34:8f:f2:20:04:d3:8f:ce:43:59:36:7d:b3:53:
88:3b:79:ab:68:14:6f:79:c2:f1:09:1e:71:0a:b8:
05:b3:a7:3d:99:94:fb:34:85:7f:fd:73:f1:fa:50:
cf:e0:6a:3a:98:58:fe:71:05:1d:7b:fe:60:4f:35:
9e:3b:aa:35:f1:6e:04:d8:ca:a9:86:2c:2a:44:0b:
7c:bf:95:ca:07:f0:22:69:75:10:af:68:f8:b8:80:
da:8d:bc:c4:17:38:0c:61:ae:8e:c4:66:c5:e6:9b:
b6:a7:03:74:62:4a:48:27:f8:fd:6e:66:41:37:62:
c3:dc:78:c4:f7:84:93:9a:de:35:e8:a3:1c:f6:31:
96:c3:66:71:e2:c8:42:ea:26:83:5c:cf:60:aa:41:
64:cb:c8:ba:45:03:35:45:3a:2c:5a:bb:7d:51:72:
6b:2a:b5:54:c2:fb:67:45:5e:aa:14:de:b0:37:38:
71:94:dc:06:1a:7b:3a:37:88:43:d6:e1:e3:6c:32:
98:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6D:62:EF:32:6C:40:E5:F5:D8:B9:8B:5C:2D:B1:45:E8:AA:8E:F2
X509v3 Authority Key Identifier:
keyid:4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/DG1i7zJsQOX12LmLXC2xReiqjvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.30.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:15:4c:0b:6c:75:ca:31:05:0a:2f:ce:47:17:13:77:76:a8:
0a:52:b0:ca:41:44:b4:19:5a:a7:bc:09:b9:14:a2:d1:26:87:
1a:17:f3:5f:b0:b4:97:ac:bc:e5:94:de:4c:e1:a9:b8:02:d8:
23:ed:54:63:67:dd:02:c9:cb:b9:74:fe:aa:b8:2c:35:a4:1a:
64:f9:86:ea:5c:1c:c3:65:57:d2:6b:b8:f2:f9:a0:e1:b1:cd:
87:a3:43:46:7c:2b:47:8b:dc:5a:24:62:62:12:62:f2:2d:5d:
7d:6c:dc:76:8e:83:eb:e9:c7:f4:e1:7b:93:ac:f7:ad:58:78:
3d:54:56:25:25:58:6d:02:fb:d8:a4:4b:01:73:ef:3b:f5:58:
d6:ff:10:f6:1f:28:b2:a5:d0:ae:7e:eb:38:ef:63:0f:1c:1e:
64:28:6e:b9:09:52:ed:9f:50:dc:c1:22:15:f4:e7:02:d6:dc:
82:ef:e6:c3:54:b8:76:6b:71:f4:af:67:b3:ae:a4:0b:1a:58:
64:ea:e7:b3:a3:f4:ca:9c:52:51:40:c8:9b:11:f3:82:6b:22:
8d:f3:45:12:17:7c:b6:ca:a7:d8:1d:d0:dc:8e:fe:27:9d:8d:
56:bc:0a:33:5b:ae:89:e9:36:e2:a5:ad:41:aa:f6:d0:3a:de:
c6:b4:a1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:12 2024 by rpki-client on console-ams.rpki-client.org