Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/KcbsbXshGnUI7xfb9qNSk4GtApk.roa
File: KcbsbXshGnUI7xfb9qNSk4GtApk.roa (raw, json)
Hash identifier: EGKIWHfDG3AGbujxmYQP1nHeLXFddTaLhaqoH02fg1k=
Subject key identifier: 29:C6:EC:6D:7B:21:1A:75:08:EF:17:DB:F6:A3:52:93:81:AD:02:99
Certificate issuer: /CN=613d23f2121327d917d708d8fe153382455959a8
Certificate serial: 01856D9D43D2FD79B6BBFFAD87EDBAE27F82
Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/KcbsbXshGnUI7xfb9qNSk4GtApk.roa
Signing time: Sun 01 Jan 2023 13:55:00 +0000
ROA not before: Sun 01 Jan 2023 13:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 185.209.208.0/24 maxlen: 24
185.209.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:43:d2:fd:79:b6:bb:ff:ad:87:ed:ba:e2:7f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d23f2121327d917d708d8fe153382455959a8
Validity
Not Before: Jan 1 13:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29c6ec6d7b211a7508ef17dbf6a3529381ad0299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b1:4c:fb:e7:f5:b5:8f:16:ca:34:5f:a5:9d:
cb:24:44:ad:49:7a:0c:43:27:02:ae:36:0a:9b:b8:
4c:53:9d:9f:64:56:4a:e5:67:39:19:87:86:fa:7d:
97:b1:a6:39:af:aa:00:0c:a8:47:fb:66:ed:95:fd:
09:23:d0:a6:bb:0e:d0:84:b8:d5:58:41:96:81:21:
b5:e4:bd:4a:77:94:a7:0b:0d:c2:be:bd:ac:b0:2a:
d4:f9:75:f6:1c:02:75:55:1c:d3:b1:04:2c:fe:33:
da:65:bb:a6:63:c0:8b:13:2f:f1:da:a5:a4:7d:a3:
9c:8c:46:77:8e:74:b2:df:4c:6c:44:38:92:48:f2:
3e:8a:18:d7:ef:d4:fc:cb:42:24:3e:25:bb:ae:fb:
24:b7:eb:c6:22:16:f6:63:0a:0e:7a:36:31:c3:b6:
08:64:46:6a:f4:dc:de:f1:2b:5e:e2:55:5b:20:2f:
d7:a3:ae:c1:21:7f:61:eb:15:49:3a:12:0a:5f:f1:
17:5d:35:6d:5a:99:c5:6a:0d:df:d3:8f:ae:66:d1:
97:a7:f1:ce:06:51:76:12:43:97:2b:a5:c6:b9:89:
ae:e3:37:28:b8:0c:34:86:a9:bc:70:8e:f4:91:c4:
21:29:9f:d0:f3:72:7c:52:12:f1:cd:55:2a:62:f8:
56:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C6:EC:6D:7B:21:1A:75:08:EF:17:DB:F6:A3:52:93:81:AD:02:99
X509v3 Authority Key Identifier:
keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/KcbsbXshGnUI7xfb9qNSk4GtApk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.208.0/23
Signature Algorithm: sha256WithRSAEncryption
24:3e:37:bb:9c:f2:75:84:d0:ca:2d:38:b4:c8:ef:ca:8a:a9:
2c:e4:29:6c:1b:8d:bb:bf:a7:93:65:d5:da:7a:3c:ed:a9:b2:
96:1f:43:4a:fa:26:b6:c5:ef:41:24:e5:8e:98:3c:3a:a9:a1:
51:9c:44:7e:8f:73:75:3d:0e:91:f1:53:9e:5e:cd:91:b7:dc:
ab:38:6f:9d:e0:17:9a:69:0f:a4:25:2c:dd:86:9b:d0:c3:76:
74:9c:60:21:09:88:75:55:69:12:28:95:2d:34:6a:14:d6:b0:
40:fb:d5:4d:b5:bd:af:9e:f6:be:44:20:95:86:c0:87:d6:b7:
63:54:c0:da:ae:1d:24:b6:82:11:18:c9:62:e0:04:1e:a8:1d:
75:47:69:68:4f:db:33:c9:49:22:22:0f:37:e9:00:c6:d3:33:
c1:c2:a7:f9:6b:f8:6b:2c:73:e1:0f:3b:5d:84:28:19:fa:4d:
7f:24:78:6d:df:07:bc:ec:07:43:55:2b:55:13:41:71:93:a7:
1b:2e:91:6e:9f:3f:4c:c9:c2:69:b2:6d:89:48:e6:ca:8d:a6:
ab:b7:0d:7e:16:ba:d6:7f:05:d1:57:bb:c8:24:5a:52:eb:9a:
25:f6:fc:2c:54:d8:e8:0b:3b:74:db:63:8b:f1:f3:b6:b8:f3:
90:6a:d2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:18 2024 by rpki-client on console-ams.rpki-client.org