Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/yOcijyS0Yda7UmVwNot3-Lx-eBE.roa
File: yOcijyS0Yda7UmVwNot3-Lx-eBE.roa (raw, json)
Hash identifier: Jt3sJ18RmpMh+i7rTfWHNEUgavB91vF/aKcjMgK4QkA=
Subject key identifier: C8:E7:22:8F:24:B4:61:D6:BB:52:65:70:36:8B:77:F8:BC:7E:78:11
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 018648B46299B96FDE3055F9A1D7B0865822
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/yOcijyS0Yda7UmVwNot3-Lx-eBE.roa
Signing time: Mon 13 Feb 2023 02:57:06 +0000
ROA not before: Mon 13 Feb 2023 02:57:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 185.180.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 May 2023 07:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:48:b4:62:99:b9:6f:de:30:55:f9:a1:d7:b0:86:58:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Feb 13 02:57:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8e7228f24b461d6bb526570368b77f8bc7e7811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:98:01:18:1c:3b:06:76:59:5b:52:9f:23:c8:
0c:b4:91:39:f1:77:13:4c:55:63:31:3f:37:1b:ff:
55:76:8e:1a:f8:c2:a4:fa:dd:bc:b8:9f:d2:d0:33:
1b:e2:3a:65:2d:91:c9:3c:81:49:94:6d:3d:a1:57:
2a:6c:18:d0:01:05:c0:21:af:7c:19:6f:a5:08:27:
99:d4:9e:b5:fc:68:9a:e2:ad:73:2f:3c:fe:52:10:
95:80:53:18:ce:77:3b:67:4c:d3:58:a1:03:bf:b9:
df:eb:f7:65:e1:77:f0:5b:57:b5:0a:da:e7:fe:20:
61:ab:89:ac:1f:01:35:93:c7:53:5d:05:6e:8b:7a:
b1:a6:e5:52:a7:7e:32:68:e6:38:c2:bb:44:28:81:
d0:8b:30:23:2f:92:f3:52:14:1b:fa:be:5a:27:bb:
48:89:2c:80:5e:e1:99:e7:24:f4:0e:b7:b9:ec:73:
f4:ec:a0:bd:c8:28:b3:a0:24:c3:a9:59:5c:d7:9e:
ce:33:5d:30:45:67:07:2c:90:fc:28:69:0a:5d:87:
8c:ca:3e:cc:a1:6d:ba:98:19:cb:d7:9c:24:5d:36:
66:3e:8d:c6:83:f9:35:3e:57:58:dd:6f:38:89:05:
b2:58:07:9e:87:57:b3:e1:3e:95:25:04:c4:c8:39:
bd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E7:22:8F:24:B4:61:D6:BB:52:65:70:36:8B:77:F8:BC:7E:78:11
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/yOcijyS0Yda7UmVwNot3-Lx-eBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.144.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:3a:a7:d5:32:a1:92:be:ab:1f:29:f5:e6:72:63:21:d7:e9:
79:1a:00:81:ce:a2:3f:63:f6:97:9d:42:f6:79:ac:cc:16:e2:
88:27:9e:20:61:ac:5c:b6:a9:8e:47:87:81:53:04:4c:4c:2e:
2f:32:ce:ab:39:38:6c:fe:9b:2f:07:58:49:33:05:82:ad:f1:
ce:8e:2d:60:f2:9e:ce:81:3b:7e:d9:34:52:60:d7:f6:93:b6:
b4:6a:89:b2:c5:17:69:7c:45:85:cf:93:df:e1:73:fb:e9:90:
bd:81:e7:fa:db:16:c9:bc:8f:7c:1f:11:b6:af:05:19:69:f1:
e8:85:c2:15:86:2c:14:c6:95:37:de:bf:80:30:e2:ea:c9:ac:
5c:b1:02:20:ab:8c:60:e1:b5:aa:a6:69:43:ad:77:ff:f7:f6:
ef:32:7c:bd:61:8c:2f:d9:e4:5a:b6:25:c1:e9:08:16:d4:8f:
ab:a2:ca:7f:fc:2a:a9:d2:97:c1:cc:e0:69:25:63:5a:9e:68:
5e:7c:f5:11:dc:5b:e2:9e:b4:7d:0d:1a:51:06:21:52:e5:47:
ac:29:ca:92:59:b1:9f:06:80:72:f3:2b:48:bb:0b:9b:1b:b4:
8a:14:9e:9b:32:93:dc:a8:c2:37:57:5f:90:d9:84:c8:07:d0:
17:39:d3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:11 2024 by rpki-client on console-fra.rpki-client.org