Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/JDvaABoxo3h2X8Zojqerqa8ydS4.roa
File: JDvaABoxo3h2X8Zojqerqa8ydS4.roa (raw, json)
Hash identifier: rJ7ROskoGR/1O0u14ebo9QVhtKjY6qoQAQdDapuezTY=
Subject key identifier: 24:3B:DA:00:1A:31:A3:78:76:5F:C6:68:8E:A7:AB:A9:AF:32:75:2E
Certificate issuer: /CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Certificate serial: 01856FA718F1262674DFAF311BC4CE417F73
Authority key identifier: 74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/JDvaABoxo3h2X8Zojqerqa8ydS4.roa
Signing time: Sun 01 Jan 2023 23:24:59 +0000
ROA not before: Sun 01 Jan 2023 23:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203960
IP address blocks: 185.69.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:18:f1:26:26:74:df:af:31:1b:c4:ce:41:7f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Validity
Not Before: Jan 1 23:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=243bda001a31a378765fc6688ea7aba9af32752e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:10:d1:14:77:1d:ee:06:ec:f5:8a:7c:29:ef:
8d:bb:63:8d:ed:0c:63:06:16:89:e1:c8:89:38:4a:
f4:07:74:4d:9d:e9:2b:b7:03:cd:4c:e2:c9:2b:33:
41:ec:83:2c:96:31:6e:6e:b1:0c:ee:da:a6:fd:55:
4b:dd:0a:c9:d3:29:f5:9d:63:53:43:00:5c:10:c1:
90:69:67:5d:90:1a:59:c2:4f:33:a4:ad:2e:e4:f7:
98:7a:0a:03:cf:a5:d7:40:39:29:3a:18:32:35:6d:
9b:44:75:b3:7b:9f:d0:10:ef:a9:8d:46:4a:45:e4:
51:eb:df:0d:f5:de:fa:5a:01:60:f9:32:2e:ec:bc:
87:aa:c5:8f:ac:b4:8e:75:c9:a2:e2:4f:b7:1f:fb:
4a:43:b0:d2:be:f5:bd:b6:11:ea:0a:47:dc:dd:94:
cb:84:9a:bf:b4:e3:57:61:ca:3a:4b:48:eb:29:b6:
95:3f:23:7a:54:66:93:31:7d:4e:a7:58:f3:57:e4:
9e:cb:e5:dd:ee:bc:1b:31:8d:ed:dc:e2:83:02:c3:
ad:3f:77:d2:4d:89:b4:a1:b1:c7:42:32:0c:0c:3d:
82:9a:d3:df:0e:b4:49:4c:2e:d4:29:c8:c5:0b:7d:
26:60:a9:1b:76:09:32:dc:a8:ed:bd:7d:76:be:37:
79:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3B:DA:00:1A:31:A3:78:76:5F:C6:68:8E:A7:AB:A9:AF:32:75:2E
X509v3 Authority Key Identifier:
keyid:74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/JDvaABoxo3h2X8Zojqerqa8ydS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.241.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:3b:7c:6f:f4:d9:b6:c5:e2:6f:6b:a9:15:03:bc:5e:05:1f:
4a:c5:f2:a2:99:97:c1:34:3b:6e:1f:ef:8a:45:5b:15:95:45:
64:37:f4:99:79:a2:09:4b:50:af:d3:aa:2e:b1:19:6b:99:6c:
47:b6:7d:7a:16:47:63:bb:77:c9:2a:4b:43:45:34:d3:84:21:
f4:8f:d1:b0:fb:e6:66:57:87:0c:dc:1f:38:39:f3:e8:97:d9:
33:8c:dd:ed:8f:76:b7:5a:69:7a:5d:c1:2a:01:91:75:42:01:
4d:9a:80:b3:21:6f:52:24:dc:24:30:57:ac:37:3a:4d:d7:2b:
64:6f:84:69:16:09:91:9f:57:df:af:a8:50:68:6c:16:01:42:
75:76:f2:61:ea:64:0b:61:11:49:02:6b:c5:d2:79:e7:26:c1:
21:9c:26:62:35:8b:f8:d1:9d:7d:1b:58:a6:dd:90:3f:03:69:
95:75:cb:8c:78:80:c3:77:de:c8:9a:be:89:7a:b6:8e:e9:b4:
f0:73:d9:49:ee:4a:d8:14:d3:48:1a:9a:6b:71:0d:be:d2:38:
54:51:f6:ef:58:a6:d0:70:dc:4d:5a:f6:e6:2f:17:be:a3:67:
88:61:25:73:94:80:d2:54:dd:09:89:8c:ee:12:50:e3:c0:0d:
bc:4d:ba:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:49 2024 by rpki-client on console-ams.rpki-client.org