Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/rDZJat2ZQPjPCIct0A6UrluoSDU.roa
File: rDZJat2ZQPjPCIct0A6UrluoSDU.roa (raw, json)
Hash identifier: G2UgHo61H85LRca1IuIwXg1LXMW81hyECBXtPjxO+/U=
Subject key identifier: AC:36:49:6A:DD:99:40:F8:CF:08:87:2D:D0:0E:94:AE:5B:A8:48:35
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0192BECAD6E3D8972101DCCDEF5773CB07D8
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/rDZJat2ZQPjPCIct0A6UrluoSDU.roa
Signing time: Thu 24 Oct 2024 13:50:17 +0000
ROA not before: Thu 24 Oct 2024 13:50:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 185.121.122.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 06:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:be:ca:d6:e3:d8:97:21:01:dc:cd:ef:57:73:cb:07:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 24 13:50:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac36496add9940f8cf08872dd00e94ae5ba84835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:7d:34:be:60:81:80:51:e2:8a:5f:52:3e:
65:0b:28:4d:55:0a:f6:c0:d7:b7:6c:d5:b0:52:60:
f3:48:ec:73:5d:da:d7:21:3a:bf:ec:6f:c2:7b:a5:
4c:9c:4b:57:e1:8f:ce:a2:94:fe:3f:07:f5:82:6e:
9c:61:15:3b:cd:af:81:32:86:b5:76:9c:5f:a5:74:
80:46:cc:3f:dc:d9:58:a9:01:76:be:b7:41:76:3d:
7d:1c:ec:67:b4:ab:49:21:04:47:68:54:75:e6:d0:
37:08:0c:fc:67:bf:0c:35:a1:a2:83:a9:c5:25:64:
9c:87:eb:35:bb:bd:c8:3c:19:16:97:3e:d1:5c:f1:
c6:32:29:49:53:61:85:c6:32:54:ad:86:6c:12:75:
e2:5e:48:43:5f:24:76:cd:d6:7c:03:00:d7:bc:b1:
7e:03:d7:0b:45:f3:9b:1d:e4:47:f4:6a:11:07:6d:
ca:76:6c:c4:65:97:a4:97:f5:93:e1:7d:4f:e2:80:
a5:3f:82:1a:22:d8:f3:61:e5:34:c9:68:f9:a2:91:
8c:63:e2:d5:0c:c5:dd:df:97:59:5b:99:c2:cc:1f:
61:83:d5:bc:9c:fd:e2:30:d7:78:86:f6:6d:15:6d:
34:3f:2c:0b:18:c0:45:a8:f4:72:49:b9:a4:f1:77:
f8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:36:49:6A:DD:99:40:F8:CF:08:87:2D:D0:0E:94:AE:5B:A8:48:35
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/rDZJat2ZQPjPCIct0A6UrluoSDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.122.0/23
Signature Algorithm: sha256WithRSAEncryption
19:dc:5f:a0:ec:a5:09:c2:b8:8b:b5:1c:54:3c:a6:6d:dc:8f:
f4:d7:c1:2d:68:89:2d:a5:0e:1c:88:bb:0b:f8:62:25:1a:75:
1c:da:f0:81:b2:5e:89:d6:02:ea:1f:20:51:7b:85:8b:76:71:
b4:c3:fe:1f:58:c9:39:6b:ea:45:0f:8c:5b:05:8a:fc:1a:15:
df:c7:6d:f2:8f:6f:ee:b2:58:38:37:e2:f9:b3:b1:85:1d:6b:
2a:30:57:33:b8:aa:a0:b5:97:15:c4:ae:2d:b4:14:f3:d9:8a:
a2:c0:1d:3e:68:e0:ab:84:b0:39:51:a7:70:43:8f:c9:e3:07:
e9:28:8d:97:4a:21:00:6a:1d:18:93:ae:99:10:91:0e:e7:05:
00:55:19:6f:75:1e:9b:97:98:f5:b5:6e:03:06:b2:99:eb:87:
f6:fd:16:c8:5f:2b:ba:44:d3:81:f0:6b:25:2b:74:1c:9c:9f:
4d:d9:a6:c1:58:32:d9:11:c8:21:2d:aa:72:26:48:19:83:05:
bf:c0:a2:7a:6b:4e:d9:69:1e:36:de:93:72:f2:01:39:f1:b8:
46:bf:fb:90:6b:10:3f:fa:88:fd:82:6b:9e:72:32:95:88:61:
50:c2:a3:ab:5e:8d:a6:00:d6:38:fb:ac:d6:26:43:d9:0b:ed:
4a:a8:6f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 08:56:18 2024 by rpki-client on console-fra.rpki-client.org