Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/MaxVK87BB4Ut1KA-ziPueb5uBdA.roa
File: MaxVK87BB4Ut1KA-ziPueb5uBdA.roa (raw, json)
Hash identifier: KAixWEAY5g6Er+m0sXy0y/k9T6zA9RIY18zv2V3pwDU=
Subject key identifier: 31:AC:55:2B:CE:C1:07:85:2D:D4:A0:3E:CE:23:EE:79:BE:6E:05:D0
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 0188ED49319F3624F4F6FA0B9F5460376C1B
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/MaxVK87BB4Ut1KA-ziPueb5uBdA.roa
Signing time: Sat 24 Jun 2023 12:02:57 +0000
ROA not before: Sat 24 Jun 2023 12:02:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206495
IP address blocks: 185.188.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ed:49:31:9f:36:24:f4:f6:fa:0b:9f:54:60:37:6c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Jun 24 12:02:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31ac552bcec107852dd4a03ece23ee79be6e05d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:6b:08:74:a8:d9:13:40:fb:56:3a:6f:15:
84:71:1b:8e:c2:19:ec:15:aa:af:f7:e8:32:45:65:
8e:53:c7:26:6e:dd:12:e0:a0:47:08:b7:a3:39:0a:
8c:7f:3f:fe:bd:38:d1:f7:94:67:32:97:4b:d8:51:
5c:da:a2:84:d1:49:70:fc:44:02:73:0a:d7:8a:ad:
d8:ef:82:53:11:ea:7b:de:e8:49:5d:1c:9e:57:ae:
6b:d9:fe:51:ef:69:38:cf:49:f0:ed:13:5f:8e:46:
43:57:f5:05:72:b4:d3:f1:e8:40:31:0b:d4:10:4e:
4b:81:06:84:5f:4c:8a:25:23:dc:52:3f:ce:4c:03:
92:fe:a4:d7:f9:61:5f:6c:dd:85:71:36:17:d7:f9:
fd:6d:02:17:79:a4:bf:83:de:77:9f:11:e9:af:e0:
aa:57:7f:96:ea:c7:b8:02:3b:d2:ac:b1:b1:86:57:
01:0c:19:6e:1f:e7:a4:37:ee:ca:f8:15:36:40:d9:
6e:ca:c7:c5:02:e9:10:7c:9d:da:f1:11:04:b2:38:
43:f4:14:bc:c0:10:59:07:4b:4e:52:76:0b:e9:ad:
e5:e5:c7:c5:82:e1:fe:a6:59:06:7e:74:3e:0d:8c:
00:41:8f:e5:d9:ae:32:0e:d0:a0:01:1b:6c:d0:05:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AC:55:2B:CE:C1:07:85:2D:D4:A0:3E:CE:23:EE:79:BE:6E:05:D0
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/MaxVK87BB4Ut1KA-ziPueb5uBdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.113.0/24
Signature Algorithm: sha256WithRSAEncryption
38:49:47:1a:16:3a:4e:63:ff:46:8e:6a:d5:ed:b8:ab:2e:45:
4d:55:56:14:64:45:14:72:84:39:c1:a2:ff:09:fb:12:3b:0f:
32:83:97:3b:d6:0d:1c:80:f4:63:1b:04:68:05:1c:e4:c7:63:
3d:b9:25:b4:9c:f7:ac:68:04:e2:23:ec:18:2b:9f:2b:92:3c:
8f:66:17:b1:3e:1f:6d:f3:7f:71:50:5e:62:3b:24:1b:4f:2d:
69:28:22:45:68:46:63:81:aa:43:dc:02:65:2c:63:74:20:a9:
b1:48:4e:39:6e:41:d0:4f:99:74:e6:15:9d:03:5a:a5:64:1b:
17:23:22:a1:a9:b5:e2:68:a9:d5:3a:08:c3:3f:a0:db:c2:2d:
48:60:2f:89:83:ac:f6:1f:f4:1f:ad:b5:fd:9f:83:90:7d:a0:
c3:ef:fa:d7:46:66:67:f9:8f:ab:d2:40:2a:c4:a3:cb:d8:55:
95:2d:21:ba:ea:fd:85:c9:e9:49:ee:d2:4c:04:93:e9:77:3b:
35:c1:fa:2e:46:32:a2:ff:bb:d1:5a:21:d1:d7:43:24:1a:e3:
f2:f8:4e:b7:f2:09:a2:d3:07:21:39:88:9d:c4:47:8c:62:e0:
eb:de:fc:e8:47:b0:e1:2d:c8:42:bb:44:28:c0:35:6c:16:de:
ae:f4:27:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:45 2024 by rpki-client on console-ams.rpki-client.org