Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/TrBx9ruoIGM6QXjS6yJuPQnXZbM.roa
File: TrBx9ruoIGM6QXjS6yJuPQnXZbM.roa (raw, json)
Hash identifier: 8M0TwAVk9rBQUd5GEpJt4FenKB10pmNX4y1Kf8w1ZLs=
Subject key identifier: 4E:B0:71:F6:BB:A8:20:63:3A:41:78:D2:EB:22:6E:3D:09:D7:65:B3
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 0187C79536A0E847F5281A0D2898673677C5
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/TrBx9ruoIGM6QXjS6yJuPQnXZbM.roa
Signing time: Fri 28 Apr 2023 11:17:37 +0000
ROA not before: Fri 28 Apr 2023 11:17:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206495
IP address blocks: 185.188.112.0/24 maxlen: 24
185.188.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Jun 2023 12:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:95:36:a0:e8:47:f5:28:1a:0d:28:98:67:36:77:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Apr 28 11:17:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4eb071f6bba820633a4178d2eb226e3d09d765b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9a:92:a1:2f:91:21:ac:f1:35:21:c0:f8:bd:
28:68:4d:4d:1f:77:47:7a:6b:7b:3c:bf:d7:77:dc:
4c:ac:1a:ac:6b:1c:20:06:9e:9f:1b:a4:4f:3d:14:
e2:77:8f:9f:2f:fa:33:f5:c0:76:9c:75:97:2a:3b:
05:0e:f3:e4:be:55:ad:1e:08:69:08:8f:3e:09:d3:
3d:bc:69:df:fb:9a:9d:bb:de:c8:d7:d8:50:f5:04:
eb:95:b0:4c:81:36:33:fe:a0:df:32:34:a0:8a:24:
4d:97:22:2d:27:8d:23:b1:af:19:26:05:41:65:90:
dd:42:14:02:c9:0d:99:f9:24:3e:10:cb:25:b9:ec:
81:c7:c9:81:08:27:5a:91:87:4a:e8:a6:02:41:bd:
37:cf:58:15:f4:6b:4c:8d:1b:b9:25:01:f2:42:98:
59:6b:65:75:40:eb:bf:34:04:a0:31:c0:c6:15:19:
e6:47:33:ae:0d:de:f8:8e:79:61:fe:46:81:df:8d:
26:12:1b:ba:4f:e5:62:c4:a5:97:27:60:55:2c:91:
2c:9f:45:88:06:34:a9:6f:bd:0a:55:c2:3c:7a:70:
56:38:6e:2e:af:e7:7d:97:07:26:64:aa:67:0f:43:
95:2c:48:5a:cd:6a:a1:d9:24:9a:67:f0:74:e8:e3:
36:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B0:71:F6:BB:A8:20:63:3A:41:78:D2:EB:22:6E:3D:09:D7:65:B3
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/TrBx9ruoIGM6QXjS6yJuPQnXZbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.112.0/23
Signature Algorithm: sha256WithRSAEncryption
92:9a:1a:b2:8f:fa:72:e3:3e:e0:ad:df:3f:45:e8:35:b2:f1:
8b:88:db:ce:cb:10:0a:41:0a:07:89:9d:b0:2e:ac:20:81:db:
52:ef:dc:70:83:2f:3c:eb:fb:cf:f7:e7:23:17:72:8d:de:95:
fb:f1:19:9b:29:9c:41:2b:dc:92:de:d8:c1:d4:49:77:34:26:
e2:b6:25:50:6e:20:2a:dd:4a:b4:e3:c3:4a:38:16:be:a7:8a:
90:7e:b4:f4:6a:1d:62:44:38:c4:bf:0a:0f:e6:5d:7c:49:06:
02:36:41:68:8c:f5:98:16:50:96:26:47:a4:88:42:c3:6f:82:
3f:3f:e9:f3:08:be:68:e1:74:7b:0c:3a:c7:17:5b:11:50:27:
71:bb:4d:0e:2b:6a:6d:cb:46:fb:26:ea:9e:80:ba:14:cc:4b:
d2:83:f4:7a:06:fc:75:f0:ee:f8:28:4a:a2:e8:0a:71:2d:c4:
c1:c4:0e:3f:0f:4f:85:46:38:16:b1:3f:bb:36:32:f2:de:1e:
b4:ca:0e:0d:80:5f:ed:b9:19:80:19:01:d9:01:85:be:1e:04:
a2:f1:67:13:6b:24:2a:5d:cf:90:b1:8c:f1:6b:2f:a9:84:36:
28:52:31:72:8a:94:3b:7e:11:15:68:db:17:cd:fd:34:cc:46:
4b:54:75:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:45 2024 by rpki-client on console-ams.rpki-client.org