Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/2kZj6_7bHmvqtZ2SWcx8f-Mr590.roa
File: 2kZj6_7bHmvqtZ2SWcx8f-Mr590.roa (raw, json)
Hash identifier: 9tV9WsHvegIyFOYXsvqFmaeig6h7PVo0S0v0Zr13t0I=
Subject key identifier: DA:46:63:EB:FE:DB:1E:6B:EA:B5:9D:92:59:CC:7C:7F:E3:2B:E7:DD
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 018CC7956B67A7A0EFBFAC34F36206929CCB
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/2kZj6_7bHmvqtZ2SWcx8f-Mr590.roa
Signing time: Tue 02 Jan 2024 00:31:47 +0000
ROA not before: Tue 02 Jan 2024 00:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 185.83.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 09:43:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:6b:67:a7:a0:ef:bf:ac:34:f3:62:06:92:9c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jan 2 00:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da4663ebfedb1e6beab59d9259cc7c7fe32be7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:66:45:93:43:dd:27:73:c4:fa:6e:06:6e:20:
e7:ee:20:c2:0c:7a:c8:89:2f:d1:f0:dd:f1:19:a3:
2f:7e:92:44:58:f2:84:3f:31:c5:31:21:6f:aa:e1:
1e:be:aa:82:45:8c:f0:02:41:d4:5e:c2:2b:90:c6:
ec:78:30:12:53:58:4d:54:24:e4:c5:43:8d:1c:e7:
ba:84:24:e1:ff:d3:2f:6e:ff:8b:39:c1:fb:23:6d:
9b:ae:e9:5f:e5:6c:9b:ef:98:d4:5c:6f:ff:c7:8b:
89:5a:1f:16:92:a1:72:bb:cb:bc:2b:9b:51:10:0f:
5d:c8:c0:af:0e:86:eb:d6:47:1e:a7:bb:93:80:10:
22:97:97:d0:5a:f7:c2:90:ec:59:1a:0e:36:9f:08:
d3:f3:dc:df:4d:64:8c:a9:db:e1:b8:b2:bc:e7:96:
3c:ee:c6:bb:fc:8f:f8:2a:ae:e5:06:46:1e:2f:67:
16:87:bb:cc:d9:63:0f:f1:1e:5d:5d:0c:86:9a:5d:
ad:88:b0:83:48:fc:89:60:49:81:52:6f:fb:15:4c:
c1:5e:66:32:cc:bb:e3:28:c2:58:f1:07:20:04:e7:
ab:ef:36:60:a8:a7:67:35:6b:be:9d:68:1f:ad:e5:
b7:7c:ac:90:8a:63:d4:a1:97:d2:a9:60:47:09:02:
e2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:46:63:EB:FE:DB:1E:6B:EA:B5:9D:92:59:CC:7C:7F:E3:2B:E7:DD
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/2kZj6_7bHmvqtZ2SWcx8f-Mr590.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.230.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:72:a5:e0:5c:33:47:04:c0:1f:db:70:45:31:bc:a7:59:7a:
6a:c9:2a:1d:66:a1:80:d3:b4:50:0e:22:1b:41:11:97:ba:0e:
49:95:2b:5a:0d:73:7e:d7:f2:d3:2f:23:62:3a:84:d2:4d:2d:
3e:3d:08:b7:74:63:ec:ce:ae:2b:88:1a:76:85:a3:87:23:72:
09:37:14:c7:f2:e2:e5:e8:a6:cc:cc:2f:f0:fb:26:22:95:f3:
f0:f4:b9:e9:8d:27:69:6a:66:bd:ee:8f:1d:60:4d:f3:6f:ad:
bd:3b:39:cc:9f:b4:01:4a:10:df:5e:71:0e:8d:11:5c:30:f4:
56:43:52:24:98:8c:5b:48:9b:45:36:21:ec:c3:b4:8d:51:0b:
d7:f0:48:92:70:91:23:e5:b8:81:f6:37:8f:b5:73:44:aa:fb:
51:a2:6d:58:bc:ea:63:68:fe:30:7f:81:bf:db:7f:7f:4e:cb:
aa:07:c8:ad:7c:20:cd:b5:39:19:23:0d:78:9d:07:18:32:37:
75:40:96:a5:e9:aa:16:a8:ea:a8:b9:a6:e9:10:2e:29:90:3f:
00:0f:f7:26:f9:46:f7:56:65:32:2c:ef:9a:2a:41:6f:6f:68:
29:85:5a:87:f1:da:42:48:fa:d3:f9:27:58:a8:05:91:34:3a:
2f:6a:91:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:49 2024 by rpki-client on console-ams.rpki-client.org