Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/X9X2EgRNC-H1FUhl4gWCslF2nIE.roa
File: X9X2EgRNC-H1FUhl4gWCslF2nIE.roa (raw, json)
Hash identifier: QCw5mIUbUM9srRW5b0FlEuSAz9U/aOaheXoeu7Y3eRQ=
Subject key identifier: 5F:D5:F6:12:04:4D:0B:E1:F5:15:48:65:E2:05:82:B2:51:76:9C:81
Certificate issuer: /CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
Certificate serial: 01856FC266750F5BA5DA854C22CFBC479E6E
Authority key identifier: C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/X9X2EgRNC-H1FUhl4gWCslF2nIE.roa
Signing time: Sun 01 Jan 2023 23:54:49 +0000
ROA not before: Sun 01 Jan 2023 23:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199643
IP address blocks: 185.7.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:66:75:0f:5b:a5:da:85:4c:22:cf:bc:47:9e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
Validity
Not Before: Jan 1 23:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fd5f612044d0be1f5154865e20582b251769c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:48:ac:35:80:59:f1:4e:60:89:34:dc:10:76:
1c:59:b4:35:14:c6:e3:97:b2:8b:e4:80:f7:b8:5a:
b3:d7:fc:b9:a0:91:8d:cd:ff:e0:c4:78:91:26:bf:
be:04:78:73:87:93:e0:df:1e:f2:23:fa:92:e6:09:
ab:e1:80:3d:7f:41:e6:78:7e:ac:bd:03:8a:b4:fa:
37:7f:7a:d4:d5:35:f7:ec:de:f4:85:fa:ee:0a:df:
a6:ab:21:8e:df:25:5d:bf:10:8d:c9:fe:2c:15:e6:
4c:0f:03:c0:59:2b:8c:9b:34:f5:6b:e8:2e:a7:0a:
c1:be:0e:d3:43:d5:5b:c9:da:ac:fc:55:03:cb:af:
c7:22:b9:91:92:fd:6e:ae:b5:32:4d:ff:4f:f9:67:
6b:05:d2:3b:b7:89:f5:e9:d5:69:2c:2c:0d:19:14:
37:96:1a:a8:7d:ef:49:4a:98:ae:90:fa:47:77:9b:
32:f2:41:23:6b:f3:49:7c:9b:70:6e:d9:1e:15:8b:
72:54:d6:f1:02:66:6b:91:c7:23:df:d6:5f:7b:13:
84:a1:31:e6:7b:b3:c6:ee:59:4c:53:9f:52:c5:52:
e6:5c:42:10:0a:25:ea:c3:fd:ae:9c:e6:ef:96:46:
6c:e7:2c:06:c9:84:08:cf:2d:28:78:1a:c0:89:e2:
ef:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D5:F6:12:04:4D:0B:E1:F5:15:48:65:E2:05:82:B2:51:76:9C:81
X509v3 Authority Key Identifier:
keyid:C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/X9X2EgRNC-H1FUhl4gWCslF2nIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.128.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:85:1b:d0:47:bd:c1:a4:4e:8f:8d:85:c1:b9:8d:b4:ac:8e:
1d:70:e0:99:dc:97:dd:1b:16:66:67:ed:b5:43:07:24:69:79:
19:27:e1:36:c6:ba:09:46:ef:e4:c6:7b:aa:60:e7:70:a6:58:
b7:4d:c4:2a:3a:87:f5:fe:74:97:01:34:f6:8c:ba:48:ce:c9:
5e:8b:6d:95:c6:90:24:0b:b2:b1:b9:25:21:6c:15:53:5d:b7:
37:f5:2e:0e:fe:d9:58:2d:bf:0d:28:c2:c1:fa:18:16:ed:07:
93:07:2d:1e:dd:c5:66:d4:98:16:d9:f7:ca:61:80:8f:c8:83:
64:32:b8:9c:a1:41:63:ab:24:64:c6:5a:50:63:c8:92:87:07:
df:8b:c4:5e:47:e1:f0:78:14:e4:4d:f2:c4:e3:b8:94:42:4e:
b7:6b:f1:de:db:e8:2c:ab:19:5b:4f:71:af:68:90:54:5d:a5:
eb:0d:a9:89:dc:44:25:0d:1a:9f:63:62:1e:c6:6b:ec:b0:69:
2f:01:b5:a6:53:c7:9f:80:ad:d1:96:c0:1e:c9:9e:6e:b5:4c:
60:d9:49:a3:f8:18:01:d6:2b:0b:1e:ee:66:91:50:3b:60:15:
38:d0:ad:54:ec:e7:69:ac:65:73:97:f7:ef:e1:e6:8f:bd:c6:
04:54:06:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:13 2024 by rpki-client on console-ams.rpki-client.org