Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/XuIPYp6B9FgHvptmjJqQWEMq__8.roa
File: XuIPYp6B9FgHvptmjJqQWEMq__8.roa (raw, json)
Hash identifier: mY8j/W3lzCUw2q0OJLwRWbEnWPWxtMNInkdZVSh82tM=
Subject key identifier: 5E:E2:0F:62:9E:81:F4:58:07:BE:9B:66:8C:9A:90:58:43:2A:FF:FF
Certificate issuer: /CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Certificate serial: 018572280CBAF1580EDB42C2B8598B755676
Authority key identifier: 9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/XuIPYp6B9FgHvptmjJqQWEMq__8.roa
Signing time: Mon 02 Jan 2023 11:05:05 +0000
ROA not before: Mon 02 Jan 2023 11:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41960
IP address blocks: 185.246.30.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:28:0c:ba:f1:58:0e:db:42:c2:b8:59:8b:75:56:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Validity
Not Before: Jan 2 11:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ee20f629e81f45807be9b668c9a9058432affff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:9f:b1:c0:07:77:a5:2d:8e:f6:3a:ee:19:
01:c4:2d:50:fd:3e:0d:0d:ad:41:60:e4:46:eb:db:
d8:62:ad:f0:9b:51:8c:31:c1:96:cc:52:8d:6c:cd:
26:a7:b9:52:84:23:ab:90:98:e4:25:3b:0a:d2:b5:
f6:f1:35:d8:03:ae:1a:c1:fe:84:07:23:e6:f5:18:
f6:8e:0a:91:24:66:c9:e4:6d:d3:4b:5d:5e:60:cb:
71:c3:20:10:6b:51:d8:ad:aa:f3:70:8b:eb:6c:26:
7d:94:4f:05:16:8f:89:b0:af:16:0d:92:83:1f:b4:
b4:1f:f5:40:1b:21:83:35:b2:45:0b:9a:d3:e9:2b:
9a:2f:a6:08:c8:28:35:8d:01:dc:60:ab:53:ef:bd:
53:68:85:ac:33:76:2c:28:a7:2c:74:ca:52:17:e1:
f1:7a:7b:e7:c6:e8:2c:f9:8f:8f:0c:65:89:e4:95:
f9:4b:5d:94:3a:7b:e5:12:a1:11:b8:24:e3:5f:e4:
1c:51:36:2a:a3:f1:e1:b2:8d:cf:74:c9:87:16:61:
05:f2:1c:8e:ae:30:2b:c8:58:da:f5:73:74:c1:e3:
3b:e2:88:f5:26:51:33:0f:69:27:06:e4:ca:1e:3c:
1a:06:f4:2b:6f:73:f2:f5:ad:75:82:e1:f8:63:a8:
d7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E2:0F:62:9E:81:F4:58:07:BE:9B:66:8C:9A:90:58:43:2A:FF:FF
X509v3 Authority Key Identifier:
keyid:9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/XuIPYp6B9FgHvptmjJqQWEMq__8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.30.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:40:c7:45:de:a5:df:45:ff:87:0b:a3:39:2a:75:94:08:3e:
da:76:98:ec:99:0b:ce:1d:da:84:78:e2:47:99:90:7f:99:ea:
29:16:09:f0:cd:1f:3f:23:54:1e:d6:df:78:3b:41:de:8a:9c:
8f:ed:95:48:5e:c3:67:f9:14:05:12:d0:f9:ab:8c:3a:46:8f:
ac:ff:39:c3:b4:96:5a:68:8e:15:45:30:de:70:74:2a:ba:30:
77:93:a4:6a:20:68:49:1a:ac:ea:b9:d3:eb:8e:b7:55:b2:44:
8c:7d:27:2e:a8:5d:fb:bd:5a:66:d8:b6:a0:8f:e5:11:27:95:
6c:91:b6:21:66:4c:ee:b0:60:06:8c:bc:49:d0:87:22:4c:18:
f5:70:a2:88:78:f8:93:f0:26:2a:1d:69:59:aa:bb:78:a3:68:
3b:57:22:6a:2e:4b:f1:c2:01:76:56:91:04:8f:11:f0:54:8c:
41:d3:87:18:2f:07:7b:94:ab:06:d6:2f:ab:47:78:97:5f:ef:
4e:1d:dc:f4:cf:e5:e1:10:3f:89:4e:15:2d:40:8c:b2:b8:d1:
c5:54:a7:5e:40:0d:04:2c:e2:e9:ed:30:a5:74:fd:1f:d1:d7:
d9:7a:bc:f8:d0:49:8d:3e:34:aa:a5:8c:63:e3:43:07:19:7a:
63:8c:7a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:42 2024 by rpki-client on console-ams.rpki-client.org