Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/jW8Fcmvvm7nkNJDgRxnO43q3IyI.roa
File: jW8Fcmvvm7nkNJDgRxnO43q3IyI.roa (raw, json)
Hash identifier: 1o54VgLqpf+ej/wmqY1IOen+GiZ/LSiPYO1lRwovz38=
Subject key identifier: 8D:6F:05:72:6B:EF:9B:B9:E4:34:90:E0:47:19:CE:E3:7A:B7:23:22
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018CC2DB651556A84F2BC83A934C76F903B2
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/jW8Fcmvvm7nkNJDgRxnO43q3IyI.roa
Signing time: Mon 01 Jan 2024 02:30:07 +0000
ROA not before: Mon 01 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 185.192.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 16:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:65:15:56:a8:4f:2b:c8:3a:93:4c:76:f9:03:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d6f05726bef9bb9e43490e04719cee37ab72322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e3:d3:b6:20:c4:da:74:17:68:25:1b:b5:e6:
6f:f7:ea:a4:5d:51:ab:a0:dc:67:e3:f3:55:10:ff:
f8:00:5d:f1:b1:0d:30:f2:f1:be:a1:6d:1a:17:36:
96:30:16:b2:25:43:5f:77:a3:49:7c:91:24:53:d8:
3b:23:07:ad:3a:a5:a9:f4:2a:1a:86:a4:36:a3:2e:
80:ba:88:b6:26:95:2a:02:ca:f4:1f:32:58:bb:b9:
21:52:9f:4f:73:78:bb:c3:a6:81:3a:93:39:a7:e4:
ad:78:86:d7:4e:d7:a0:22:df:d3:fa:43:26:1f:3e:
6d:23:75:a4:9a:32:a5:f0:ae:7c:21:c3:3f:03:90:
de:59:e3:82:70:d1:2b:19:f1:17:98:2c:93:75:44:
a9:0f:03:75:b0:e7:62:de:0f:15:80:f6:e8:68:4c:
23:7c:44:a6:f1:db:8c:d7:be:a9:a1:ed:91:7c:c2:
bd:1c:7c:dd:00:d2:f5:13:1b:98:83:2b:4a:69:c5:
fd:3a:a2:e8:bc:25:47:8b:b9:29:99:60:66:b2:b3:
54:e7:aa:08:ac:dd:e0:a2:70:3f:82:0d:1c:f7:5b:
1f:2a:bd:80:8f:c7:9f:53:92:24:27:a6:57:20:09:
ac:ae:eb:64:9c:a0:3f:87:72:ef:90:d7:ba:09:66:
65:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6F:05:72:6B:EF:9B:B9:E4:34:90:E0:47:19:CE:E3:7A:B7:23:22
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/jW8Fcmvvm7nkNJDgRxnO43q3IyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.246.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:3a:58:8f:91:cf:d1:06:9f:00:87:98:85:4b:7d:f7:41:a3:
0a:f6:d8:eb:9b:df:15:0b:e3:e9:82:d8:d2:0b:0a:ce:08:be:
a4:f6:b0:2f:09:80:7c:68:98:42:df:02:8a:bc:49:a6:58:e8:
0b:2e:cc:29:44:67:38:7c:ec:40:98:ce:08:48:1a:0a:92:e6:
13:64:02:6a:41:50:79:0d:fe:f7:6e:f6:ae:bf:3a:95:f5:1a:
40:49:a5:c7:bf:7f:ba:b7:b6:ce:c2:d7:6e:73:34:b2:7d:80:
8e:09:d8:cf:3f:b3:cd:f4:c2:84:a9:51:af:8f:29:c4:f8:da:
0d:b7:54:12:f2:2a:fb:d7:05:43:0f:28:fd:05:8c:5c:c0:a0:
6c:44:15:02:49:0a:46:0e:44:ed:ef:ff:7f:68:a3:e8:4f:04:
fb:9a:15:e5:2b:a4:69:7e:6e:66:e9:fc:bb:d9:bb:5e:84:ca:
8f:75:4a:d7:81:9f:5c:11:a2:55:d9:8a:ca:03:2d:79:a3:c1:
5d:b4:c2:b8:3b:71:02:7e:92:90:55:c4:50:9a:5e:a4:63:2c:
4c:1d:9f:11:cd:93:7b:43:af:24:94:2a:58:b0:ca:cc:2d:d0:
26:98:ad:1c:6c:64:92:1a:b7:5b:bb:e0:7c:09:2e:5f:04:62:
ba:bc:f5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 19:59:50 2024 by rpki-client on console-ams.rpki-client.org