Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/kucNP4nS07fJDZ8NWgtye7Ift8g.roa
File: kucNP4nS07fJDZ8NWgtye7Ift8g.roa (raw, json)
Hash identifier: rwWBDZgcCCRsUGOTkT/vmAS4HTbgJSu3XLeEKYT6FWE=
Subject key identifier: 92:E7:0D:3F:89:D2:D3:B7:C9:0D:9F:0D:5A:0B:72:7B:B2:1F:B7:C8
Certificate issuer: /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial: 018571A3DBC95E1C3457D3B76A9883B57B4B
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/kucNP4nS07fJDZ8NWgtye7Ift8g.roa
Signing time: Mon 02 Jan 2023 08:40:42 +0000
ROA not before: Mon 02 Jan 2023 08:40:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209286
IP address blocks: 185.233.219.0/24 maxlen: 25
2a10:4e40::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a3:db:c9:5e:1c:34:57:d3:b7:6a:98:83:b5:7b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
Validity
Not Before: Jan 2 08:40:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92e70d3f89d2d3b7c90d9f0d5a0b727bb21fb7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:12:61:a3:5c:56:27:0d:f2:d8:85:0d:93:b3:
64:3f:47:e2:c8:3a:0a:46:5f:f0:fd:46:dc:92:99:
ac:2c:cb:09:96:21:f1:93:c4:56:3d:f8:ea:79:07:
b0:6c:b5:c0:5e:49:3c:69:31:1a:ae:30:7f:ba:e2:
b7:d2:63:47:35:2a:5e:ea:11:e9:0e:05:ad:a5:2b:
68:ee:e5:80:93:0d:52:6e:d4:04:2b:4a:ed:a0:b3:
94:fd:32:f2:93:c7:45:2a:ea:bf:da:93:41:67:92:
bd:fd:34:60:ec:66:60:8b:b9:36:dc:9d:d5:38:77:
64:46:29:04:44:0a:53:37:87:73:80:93:43:7b:5f:
52:fb:dd:8b:20:3e:0e:b2:3b:52:67:04:04:78:05:
8b:96:f5:9c:a4:a8:42:75:80:a8:4f:d8:64:62:05:
6e:1c:01:34:b2:8d:05:fc:c1:27:10:53:e7:82:c9:
c2:d2:b4:6f:f3:d3:f8:7e:e0:21:00:15:57:fe:2e:
54:47:86:53:8c:4e:2a:df:24:1a:5e:9e:58:1d:26:
ea:08:4b:6e:9b:fc:67:bf:b5:b9:03:a3:b8:75:23:
4f:53:41:62:dc:c8:7b:5f:4f:3c:65:25:c0:be:42:
36:09:6a:e2:3d:fa:49:dd:48:57:2c:f4:52:99:ab:
2b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E7:0D:3F:89:D2:D3:B7:C9:0D:9F:0D:5A:0B:72:7B:B2:1F:B7:C8
X509v3 Authority Key Identifier:
keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/kucNP4nS07fJDZ8NWgtye7Ift8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.219.0/24
IPv6:
2a10:4e40::/48
Signature Algorithm: sha256WithRSAEncryption
b6:3a:f7:28:ee:96:dd:f4:76:f8:3d:65:c7:27:5b:ab:30:83:
96:4a:a7:d2:61:70:fd:90:d7:62:93:14:9e:aa:40:e4:f8:cb:
12:3a:e0:2a:43:42:88:68:18:95:b2:b3:22:68:bc:e2:97:a3:
ec:df:84:e9:33:e4:68:5c:b8:c9:02:f7:fe:d9:af:ce:e0:9b:
ab:81:90:9b:84:96:25:57:39:98:f7:63:ca:76:47:00:c7:d2:
72:ee:e2:0e:65:77:87:91:a2:4f:e5:dc:22:99:8c:66:2b:5e:
c3:8f:6e:12:e4:7d:a6:7b:52:86:68:74:9e:68:81:dd:a9:69:
5a:f0:4e:ef:dd:05:fc:66:6f:f8:9c:cf:dd:8a:f3:a8:aa:e7:
e0:8f:9a:f6:cb:75:58:93:b0:1f:71:44:02:5a:b9:67:28:06:
1e:83:01:e6:2e:81:20:96:03:ee:8c:99:9f:29:6c:a8:25:f7:
e2:e3:eb:b2:b2:0c:68:af:46:e1:98:2a:99:88:a1:24:f0:b4:
fa:44:01:5f:bd:43:37:dc:15:99:63:bd:fc:57:69:31:54:cd:
e4:9e:02:e6:05:35:d3:5a:3b:57:ce:26:b6:e8:1a:dc:e9:3c:
77:4e:a2:a4:12:93:39:70:c8:8b:11:0a:25:4c:68:98:a3:18:
1d:9a:21:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:53 2024 by rpki-client on console-ams.rpki-client.org