Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/2jAC2J8PwPRlzbQ2IPQ2Min5Pvs.roa
File: 2jAC2J8PwPRlzbQ2IPQ2Min5Pvs.roa (raw, json)
Hash identifier: o2KEESrRXxNA1dzL+Rmsk8z33Dde7y2E8yXRDz/bMII=
Subject key identifier: DA:30:02:D8:9F:0F:C0:F4:65:CD:B4:36:20:F4:36:32:29:F9:3E:FB
Certificate issuer: /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial: 01863FBFEDDA2735D7B01154FB1A713D0ED0
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/2jAC2J8PwPRlzbQ2IPQ2Min5Pvs.roa
Signing time: Sat 11 Feb 2023 09:13:07 +0000
ROA not before: Sat 11 Feb 2023 09:13:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 997
IP address blocks: 185.243.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3f:bf:ed:da:27:35:d7:b0:11:54:fb:1a:71:3d:0e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Validity
Not Before: Feb 11 09:13:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da3002d89f0fc0f465cdb43620f4363229f93efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5b:8f:fc:93:24:4b:a4:7e:40:39:b9:81:d9:
c9:6c:53:98:98:8c:52:6a:d9:25:08:6f:bf:5f:82:
94:5c:95:21:aa:78:b4:64:46:c1:74:a7:40:45:47:
c0:b7:87:db:db:44:e3:66:6a:d0:2f:48:43:16:30:
aa:45:ed:30:75:98:60:7a:64:6c:99:dd:1a:7a:7b:
ca:25:b2:9e:be:ce:86:bb:4b:09:88:39:b4:61:2d:
31:fc:2c:c6:50:03:e4:a6:af:3c:61:30:7d:ed:31:
7b:40:d3:c5:de:44:1d:02:b0:fc:92:a8:ba:1d:e3:
64:30:58:9c:b9:39:66:d5:96:97:70:5f:7d:bc:7f:
16:2f:bb:d4:f4:e2:9d:4a:e9:36:ba:09:11:16:35:
5a:bb:1d:ce:9a:02:28:82:7a:a1:b6:e8:55:24:b7:
5e:04:5a:c1:b3:c8:36:54:67:cf:8d:2c:20:9a:32:
92:19:b0:03:2b:e1:de:7f:e6:11:d1:bc:4e:19:6d:
a9:11:15:1a:21:04:ca:fa:af:f7:42:37:23:59:58:
7a:51:03:2b:5a:78:73:69:82:d4:a4:2d:a3:bc:c0:
7c:25:70:02:6b:71:3c:40:f2:12:67:21:a5:cc:b2:
f2:bc:6e:1e:7d:62:7d:a2:36:3e:f8:e6:18:79:c7:
cb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:30:02:D8:9F:0F:C0:F4:65:CD:B4:36:20:F4:36:32:29:F9:3E:FB
X509v3 Authority Key Identifier:
keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/2jAC2J8PwPRlzbQ2IPQ2Min5Pvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.42.0/24
Signature Algorithm: sha256WithRSAEncryption
26:72:37:4a:01:53:b8:1a:9b:da:34:57:c1:4a:67:4b:5c:bf:
69:1f:43:6a:62:e7:5c:2a:32:84:40:73:83:5b:89:35:32:fa:
dc:b5:e2:2c:9d:27:c6:b4:7d:f1:06:69:2a:2f:87:5c:f8:d8:
54:99:3e:3c:71:e2:92:3b:8a:ac:58:25:0d:2f:40:78:9a:0e:
0b:84:90:06:be:8e:8e:cc:73:eb:6c:e0:9d:ba:02:41:bc:15:
45:32:24:4d:f4:93:9c:ed:ca:7e:57:b1:77:49:87:13:ee:f9:
f3:5e:59:ea:b9:a5:d9:ad:35:93:14:8f:64:28:c6:c2:ab:13:
fd:75:e6:33:cd:67:e3:35:9c:cc:bf:71:3c:b9:00:9b:e2:20:
48:fd:1f:6e:fe:c3:4b:0e:9d:81:81:d7:0c:ce:6a:00:b8:6c:
ae:9b:a7:12:de:e8:01:70:69:04:35:03:2f:22:af:f5:9e:f7:
84:61:9b:56:95:fa:4a:d5:5e:65:83:83:81:98:24:d8:6c:d2:
b8:86:75:74:3c:e3:67:6f:d8:35:24:48:7d:7d:ad:f0:7a:c8:
21:22:f8:c2:e5:df:0b:9d:62:0e:ed:e9:52:70:08:cf:36:cf:
40:5b:31:07:78:38:00:84:8f:c1:47:62:8f:78:16:40:06:75:
63:04:a9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:18 2024 by rpki-client on console-ams.rpki-client.org