Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/ssmC1k4BL1u-Ouhr-RXbRlxx_NE.roa
File: ssmC1k4BL1u-Ouhr-RXbRlxx_NE.roa (raw, json)
Hash identifier: Pmp6VJS5NY1BnReh0D6aW+zHNEBCFCbwjJdbSlSiEsI=
Subject key identifier: B2:C9:82:D6:4E:01:2F:5B:BE:3A:E8:6B:F9:15:DB:46:5C:71:FC:D1
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 01871E4315C9BEC20274978A8AF54F7A7EA1
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/ssmC1k4BL1u-Ouhr-RXbRlxx_NE.roa
Signing time: Sun 26 Mar 2023 14:12:05 +0000
ROA not before: Sun 26 Mar 2023 14:12:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20853
IP address blocks: 185.113.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Jun 2023 13:35:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1e:43:15:c9:be:c2:02:74:97:8a:8a:f5:4f:7a:7e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Mar 26 14:12:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2c982d64e012f5bbe3ae86bf915db465c71fcd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:4d:73:67:cf:f1:ec:34:90:40:13:9d:1d:
0c:94:a8:cc:49:0e:92:b3:d1:dd:e7:c8:94:bc:0e:
9d:3f:c9:37:4c:9f:1f:e1:4e:06:3b:1a:97:fd:b0:
6e:f4:96:c6:fa:ea:93:f7:6a:88:5a:2d:50:76:fa:
00:bb:dc:30:64:f7:20:a1:b0:69:f5:2b:be:ab:e1:
a2:fb:32:29:32:88:51:f3:a3:b2:2d:61:10:26:df:
87:41:32:92:e6:a4:8f:1a:cb:04:d1:c0:b6:52:d7:
ca:38:54:ee:10:0b:62:88:91:b8:bf:67:af:e4:16:
e9:48:8c:31:6c:dc:e5:27:40:8a:48:a9:5f:0b:cb:
e4:4e:7c:41:c0:f3:52:fb:ec:8c:46:60:9b:21:de:
5c:df:cd:83:8a:44:33:f8:aa:01:d1:d1:9a:10:ed:
6f:2c:c9:65:fc:03:35:d8:34:80:64:25:e6:f5:04:
bf:19:63:fb:c1:4f:5b:43:5f:be:37:12:62:7b:ec:
11:2e:50:6e:57:a6:30:28:00:4f:3e:e3:93:34:81:
68:cb:f5:e5:46:f9:6c:9d:17:ea:6a:74:0c:4e:da:
96:94:e1:d4:f2:be:8a:e5:c1:d5:26:79:84:95:3c:
a9:49:1d:51:60:78:12:dd:27:da:74:43:bf:8e:cc:
09:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C9:82:D6:4E:01:2F:5B:BE:3A:E8:6B:F9:15:DB:46:5C:71:FC:D1
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/ssmC1k4BL1u-Ouhr-RXbRlxx_NE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.8.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:46:fa:42:14:3c:28:f3:ba:5e:a9:69:70:fe:c0:30:e1:ca:
44:88:e8:57:1c:c5:35:d3:21:23:69:b3:7c:fa:67:2d:da:d7:
bd:52:11:16:8e:2f:6c:ee:fe:87:69:26:de:20:13:e6:3c:93:
45:37:19:42:ee:49:c5:5c:94:60:7e:3a:97:02:f5:36:b5:d2:
e1:9b:ba:15:e5:de:50:61:08:ce:6f:96:67:26:fb:4a:e8:c8:
fe:45:29:a8:58:1d:6d:e2:43:4f:4c:23:62:11:7c:c3:6d:12:
ba:37:97:a1:10:ed:54:03:05:32:d9:16:84:a1:e2:d7:e7:c2:
e9:9f:b3:e8:07:3d:62:3b:d2:03:4e:4d:5e:98:07:08:e2:7f:
47:a5:47:5f:05:99:86:aa:1c:9e:d8:0c:f5:a8:b1:81:3b:ac:
41:b5:c4:07:67:29:7b:8f:80:f6:9e:6f:4e:c2:cf:b2:68:70:
51:48:6d:ae:b2:da:84:b4:9b:1c:2b:80:4b:2e:da:8e:73:5b:
44:07:d6:43:38:ce:9a:4f:c9:31:12:a1:95:9c:01:0b:6c:59:
7f:ee:7c:c5:24:91:6c:31:8d:08:14:72:3c:07:e5:fc:64:d1:
b6:25:dd:60:b0:5b:1c:cb:d0:4c:df:04:17:33:93:c0:30:a3:
80:78:20:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:10 2024 by rpki-client on console-fra.rpki-client.org