Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/J-Et-W0yOcW3wxsljGT5PTYlOTg.roa
File: J-Et-W0yOcW3wxsljGT5PTYlOTg.roa (raw, json)
Hash identifier: xZMEOSLJ8gQx5L3CfAWQIo3FmoGuQvC2jmebUI/A+UI=
Subject key identifier: 27:E1:2D:F9:6D:32:39:C5:B7:C3:1B:25:8C:64:F9:3D:36:25:39:38
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 018F9A65A88814A6766D2CC892170DCF7A6C
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/J-Et-W0yOcW3wxsljGT5PTYlOTg.roa
Signing time: Tue 21 May 2024 09:05:04 +0000
ROA not before: Tue 21 May 2024 09:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.183.244.0/23 maxlen: 24
185.183.246.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 May 2024 12:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9a:65:a8:88:14:a6:76:6d:2c:c8:92:17:0d:cf:7a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: May 21 09:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27e12df96d3239c5b7c31b258c64f93d36253938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:47:08:4f:19:1c:4a:9e:17:55:09:4a:b3:60:
d9:84:18:10:54:26:54:3b:ff:45:c6:bf:97:43:09:
6d:60:c9:4a:6d:2b:36:42:51:a4:87:d8:2c:5c:32:
61:c3:65:23:e2:75:3f:69:14:57:77:82:c8:ce:aa:
d5:d9:2f:11:f7:a2:49:d3:d1:03:9d:d6:37:03:ed:
b2:b0:91:81:2b:9a:62:42:8c:23:8b:f5:3d:ca:4d:
3b:d1:66:e6:15:6a:18:2e:6f:8a:41:cf:b2:65:70:
5a:d8:d5:2a:47:5c:0a:6e:9c:f4:a7:49:9a:82:f6:
f5:5b:bc:e7:73:7a:03:84:c0:bf:34:b1:ab:ad:50:
c5:c7:54:1e:99:db:c4:78:ec:d9:61:43:d9:20:6f:
29:8a:7d:74:3f:6c:12:bf:6b:7c:1a:d8:75:40:7e:
46:5f:a1:81:43:8e:c2:6b:35:7d:3c:1b:80:13:74:
96:4d:c2:a8:cb:5f:ae:d3:de:97:bb:e7:39:cb:fc:
5d:ac:e5:0a:1b:5e:1d:da:74:73:1e:a7:e2:47:5c:
bd:41:79:d7:ae:7c:63:44:ee:0d:75:c7:c9:d5:70:
2b:82:33:fa:cd:63:9c:74:e1:6d:5b:cf:3e:2a:88:
5e:1c:3e:8c:2c:55:c9:e1:ac:87:6b:fa:9e:50:a5:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E1:2D:F9:6D:32:39:C5:B7:C3:1B:25:8C:64:F9:3D:36:25:39:38
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/J-Et-W0yOcW3wxsljGT5PTYlOTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.244.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:1a:9b:bd:7f:cd:4d:e5:5b:ea:6b:fc:25:58:c6:06:9f:41:
7f:c1:74:a0:a0:a8:0c:65:06:da:78:ff:b7:88:e5:21:87:b7:
3b:10:01:a1:3d:f3:a4:dc:b4:0a:ba:46:6b:89:aa:a4:4f:94:
27:84:e9:ff:d8:55:b4:a2:8a:9d:67:16:bf:4f:39:bb:fc:fc:
53:12:b5:1b:2b:f8:b0:bc:99:4c:c8:f8:24:40:c0:d9:1c:98:
30:99:f0:55:0e:35:bb:af:8d:6d:b7:ab:df:7a:7f:08:09:d6:
3e:5d:c8:d2:97:0f:da:c7:6b:eb:51:09:7f:7a:f7:da:41:8c:
5d:31:6a:5d:0c:16:7d:62:b6:86:55:63:c3:c8:56:d4:93:07:
ef:2c:ea:ad:6a:8a:51:b2:1b:c3:67:a5:58:9c:c1:04:4a:dd:
6f:7f:44:2e:c4:84:69:25:3f:71:23:27:5c:17:9e:e2:24:9d:
b3:8a:4e:34:63:dd:bc:f6:64:d3:fc:3a:d2:10:9f:16:3c:83:
f5:a7:5d:d1:d8:41:a1:58:67:86:43:f4:ea:f6:6d:aa:c3:51:
4d:d1:56:77:30:3a:d8:d3:2d:4c:03:a0:72:48:66:a5:62:b0:
a8:1f:a5:69:88:a5:e3:5b:d6:d1:02:77:38:d2:e3:dc:85:6a:
18:54:0a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:15 2024 by rpki-client on console-fra.rpki-client.org