Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/tQcGmxnJNHAmYoxrIQemof-L8ZY.roa
File: tQcGmxnJNHAmYoxrIQemof-L8ZY.roa (raw, json)
Hash identifier: 2MYJxpnsugpl/iC9ZA2ynUe+1HDjOCwbCnIjKl+K8U0=
Subject key identifier: B5:07:06:9B:19:C9:34:70:26:62:8C:6B:21:07:A6:A1:FF:8B:F1:96
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186AB3FA83EF5FE258F0F70C017E0F301E9
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/tQcGmxnJNHAmYoxrIQemof-L8ZY.roa
Signing time: Sat 04 Mar 2023 06:12:01 +0000
ROA not before: Sat 04 Mar 2023 06:12:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 185.9.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 12:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ab:3f:a8:3e:f5:fe:25:8f:0f:70:c0:17:e0:f3:01:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 4 06:12:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b507069b19c9347026628c6b2107a6a1ff8bf196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:c6:33:3b:85:4f:5a:7d:f3:a8:b2:58:96:
85:67:63:00:ae:cc:5d:68:63:d3:dd:64:ee:9e:13:
94:4e:24:83:a0:7f:be:ef:0e:d0:29:85:90:27:82:
38:65:15:8f:b3:b8:c4:b3:32:90:f2:94:ee:a3:62:
44:b6:f7:03:d3:17:5a:0a:37:74:8e:3d:07:b2:e1:
ff:9c:fa:8e:6d:a1:df:ae:9e:94:bf:30:3d:7b:4a:
3b:5e:d1:6c:83:a2:c5:65:3f:05:34:22:e8:1a:84:
f3:25:c3:70:5c:cf:4e:16:5c:a2:1a:85:0c:85:1f:
f3:d6:d0:11:40:39:5f:b5:c7:f1:e3:80:26:d5:99:
2f:03:8b:11:44:88:c1:27:47:94:d8:77:b6:74:53:
7c:85:95:75:ff:ee:f1:72:64:7a:33:00:25:2e:5b:
0f:f4:d3:91:8c:d5:8a:d1:5a:37:8e:c9:6e:a1:5e:
1f:a7:9b:22:c8:c7:ad:62:7f:b6:ad:48:ae:5b:21:
e3:94:cc:d8:48:dc:14:b3:ab:6d:ad:7b:76:f0:73:
21:18:c7:20:fa:17:53:0d:0a:9a:37:4e:4c:d4:3c:
2b:c6:d9:ed:ac:94:fd:ca:f0:36:cb:93:6d:97:c2:
c2:38:85:52:e9:35:b2:c1:35:9f:83:61:94:aa:50:
cc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:07:06:9B:19:C9:34:70:26:62:8C:6B:21:07:A6:A1:FF:8B:F1:96
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/tQcGmxnJNHAmYoxrIQemof-L8ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.54.0/24
Signature Algorithm: sha256WithRSAEncryption
86:18:27:76:bb:e8:d6:63:69:6c:50:60:35:fb:12:80:f4:e0:
e3:0a:84:5b:12:c2:25:65:04:65:99:50:16:1c:c0:62:52:54:
b3:62:70:ed:67:71:6c:e8:2a:95:2e:e9:71:2f:ca:2c:5b:05:
7f:a8:76:f8:22:f1:56:aa:9f:c9:23:cf:2a:26:99:07:60:69:
70:e7:49:77:fa:24:ab:1c:0a:c0:f5:09:5d:6b:e9:e8:54:79:
de:c2:74:f9:1c:68:5a:fa:8e:18:82:0a:fa:7a:f7:54:76:05:
51:e3:b9:7f:9e:f4:f8:6d:44:4d:16:2c:fa:5b:d3:d4:ea:9e:
4e:9d:4e:08:90:0e:eb:d7:7c:2f:73:06:df:94:56:9e:41:f3:
13:f7:d1:b1:2a:47:23:c3:21:3a:ca:81:66:97:d2:be:94:e4:
c1:e7:63:b6:8a:09:69:6c:72:60:94:da:81:1c:f8:c0:f5:e0:
c0:ca:8b:44:20:4a:fc:76:b0:63:0c:aa:71:00:d9:fb:bb:fd:
12:9e:f4:64:23:83:d2:ea:9b:f6:f4:11:4d:2a:a2:57:e2:2e:
8a:0f:fb:8d:7c:b0:ab:15:27:51:59:f6:94:42:a0:35:cf:ad:
09:4a:c1:70:87:3e:c4:6e:7a:e9:24:54:46:20:00:f3:bb:76:
fe:cf:19:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:48 2024 by rpki-client on console-fra.rpki-client.org