Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/9tLMZSXCIGmsrNx-IELrLeMXPM0.roa
File: 9tLMZSXCIGmsrNx-IELrLeMXPM0.roa (raw, json)
Hash identifier: uyxarwHn6FFV4DOwjHHnECz4qOwVkiZHOsySMgeUjBA=
Subject key identifier: F6:D2:CC:65:25:C2:20:69:AC:AC:DC:7E:20:42:EB:2D:E3:17:3C:CD
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018C7E1D1CD0801808B84B02CFE5B768B349
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/9tLMZSXCIGmsrNx-IELrLeMXPM0.roa
Signing time: Mon 18 Dec 2023 18:08:06 +0000
ROA not before: Mon 18 Dec 2023 18:08:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213250
IP address blocks: 185.177.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7e:1d:1c:d0:80:18:08:b8:4b:02:cf:e5:b7:68:b3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Dec 18 18:08:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6d2cc6525c22069acacdc7e2042eb2de3173ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:86:17:16:b3:82:75:18:df:05:7a:08:ce:
52:b1:27:5b:83:5c:6d:56:f2:1e:a9:63:87:88:48:
f0:42:63:ea:78:a5:96:6f:f5:95:64:39:fa:87:9a:
1c:05:66:98:89:ed:af:d5:05:df:83:d1:1d:c9:d6:
ed:e6:d8:63:96:f8:1c:f8:9c:4e:51:a9:97:e1:79:
3f:8a:79:7c:cb:d3:b5:7f:62:eb:9e:61:60:bf:5a:
8f:bc:ee:44:4c:e7:0e:44:5d:0e:73:2b:a8:81:9d:
66:53:44:f1:e7:6b:04:9a:6b:f8:97:c6:c2:25:05:
41:37:29:06:34:44:9e:3b:e3:6d:96:0c:12:cb:7b:
a1:5b:57:25:30:94:90:40:b0:76:c2:35:16:8b:f6:
e7:19:ce:af:c4:0f:43:a2:8c:6d:9c:99:a4:f8:89:
6a:bc:65:4a:ff:9d:0f:ee:40:ca:0e:de:db:8c:27:
16:8b:56:fe:b7:20:bf:7a:d4:18:04:52:a6:50:8e:
9c:20:a4:21:58:92:e6:d6:40:fd:42:25:1b:aa:52:
72:af:d0:35:fb:61:2a:aa:74:50:ca:fd:c1:ae:e6:
bc:cb:7a:4c:49:10:b6:d1:84:e1:2c:af:f9:1f:a7:
1d:c7:ba:1e:07:aa:bd:7d:45:f4:55:ca:d4:c2:4a:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D2:CC:65:25:C2:20:69:AC:AC:DC:7E:20:42:EB:2D:E3:17:3C:CD
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/9tLMZSXCIGmsrNx-IELrLeMXPM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.24.0/24
Signature Algorithm: sha256WithRSAEncryption
67:51:4a:a8:11:02:f1:fb:4b:11:76:4f:d3:e7:32:f1:28:8f:
2e:82:9c:bb:e6:6f:79:49:69:18:ce:33:66:fb:d6:c4:ec:e2:
c1:c4:8e:fb:ba:8b:06:4a:01:04:62:fe:b7:2b:3a:d5:04:24:
2f:30:c8:02:15:7b:70:43:e0:01:46:46:95:3b:e8:45:a3:79:
be:d0:0e:15:07:c8:77:a1:5a:02:58:8a:20:48:7a:b4:d7:b2:
ef:0f:f6:f3:78:c7:6a:21:e3:75:9e:78:b7:f0:86:73:a1:9a:
a6:bf:0c:12:2c:f8:43:dd:48:26:cb:6a:05:79:7b:f1:32:bd:
c7:40:37:da:24:a6:34:f9:d5:7c:c7:45:ef:c0:6e:88:9c:55:
57:0f:8b:c0:40:fb:15:a3:7c:52:d1:70:2f:a4:88:f4:d5:f0:
8e:d6:d2:4c:60:30:30:9f:a8:f0:11:40:a6:b0:ff:62:c0:02:
97:d4:57:b9:2b:cc:bc:ca:ca:56:b6:90:2c:6e:60:06:20:09:
96:1e:15:07:8a:eb:b7:81:0f:b8:8a:13:2d:30:e0:1e:4a:93:
1f:10:75:2d:f9:70:58:95:bc:97:f7:c8:9f:fa:bf:a8:ab:3b:
57:3c:11:a8:1b:11:a4:20:7d:4a:98:c7:5e:c8:9d:ee:95:36:
44:ed:05:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org