Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/jTNnC2gAHGRwhpOD5lK4sG3LPdA.roa
File: jTNnC2gAHGRwhpOD5lK4sG3LPdA.roa (raw, json)
Hash identifier: VyXwSeBh1J0yYTkNxoeSZM9nDbI5IbRETeiBlQrpnvA=
Subject key identifier: 8D:33:67:0B:68:00:1C:64:70:86:93:83:E6:52:B8:B0:6D:CB:3D:D0
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 0185718C1D3ED8F27ECA07C03AEA36F09451
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/jTNnC2gAHGRwhpOD5lK4sG3LPdA.roa
Signing time: Mon 02 Jan 2023 08:14:46 +0000
ROA not before: Mon 02 Jan 2023 08:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 185.83.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:1d:3e:d8:f2:7e:ca:07:c0:3a:ea:36:f0:94:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jan 2 08:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d33670b68001c6470869383e652b8b06dcb3dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:32:d8:91:ba:ca:3d:bd:e4:99:95:cc:ca:97:
cc:bb:b7:ca:98:83:c7:cb:f1:1f:1d:ac:58:31:7e:
2b:89:e4:5e:51:ab:db:b3:23:a8:42:5c:10:68:7d:
9f:2c:85:3e:37:48:29:dd:d1:94:37:f2:79:41:83:
df:e7:6c:ed:60:b1:b6:3f:46:e4:8e:ba:70:f8:2c:
84:dc:67:d4:57:68:3d:22:d0:1a:3f:36:ef:3e:90:
a3:76:6a:39:80:1b:42:80:5a:99:8a:a0:9e:fe:f6:
cd:09:7b:54:75:97:f6:71:d2:3b:2a:7a:5a:0d:c1:
d0:c5:07:a3:9a:9d:20:50:1a:64:25:f2:1e:2b:56:
3c:ef:3b:e7:ae:89:21:7f:0b:11:b4:57:a8:50:62:
6a:2a:7d:6d:65:63:8b:a8:6f:99:2f:6a:b0:6a:b7:
45:96:e3:ed:24:b2:35:15:e1:e6:79:09:91:9d:7d:
ad:e9:c2:7f:85:ba:bd:c7:12:c6:31:09:c5:04:04:
a7:81:2c:c8:b9:19:6e:ae:77:8f:24:08:92:67:d8:
63:85:3d:a3:34:a6:4a:fc:7a:86:17:80:27:e8:51:
b0:0d:e0:2e:e7:db:56:98:b0:fe:91:46:c7:53:e7:
c3:d1:f5:71:e8:50:e4:e3:be:1c:eb:17:02:0f:da:
df:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:33:67:0B:68:00:1C:64:70:86:93:83:E6:52:B8:B0:6D:CB:3D:D0
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/jTNnC2gAHGRwhpOD5lK4sG3LPdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.230.0/24
Signature Algorithm: sha256WithRSAEncryption
18:25:5c:e2:4a:36:22:33:d3:05:79:7d:26:fb:99:2a:83:56:
42:b4:f8:57:ae:6f:fe:2d:44:ac:43:c1:07:a1:23:ab:e1:bf:
4e:14:54:c7:f0:f9:50:e3:11:35:7f:a9:a8:70:c6:51:a1:00:
64:96:85:40:3c:46:45:14:34:cd:f3:9b:66:f8:9f:4c:4b:3c:
e8:eb:e7:9e:60:bd:e8:25:18:33:6b:57:0c:b0:6f:65:4c:61:
50:3d:96:e0:68:c0:ae:05:f3:9b:e0:06:60:4c:7d:e7:8f:1e:
b0:0d:77:28:c1:ed:db:a0:8a:50:0b:35:e2:90:e2:35:25:49:
bd:07:e6:8f:90:c5:ee:c2:e9:82:f3:84:e4:12:97:36:78:94:
fb:69:e8:c1:33:f2:79:dc:5d:a4:b2:cd:3b:58:07:3d:30:c5:
47:c4:dc:51:ad:10:31:cd:a8:ee:b5:64:41:2b:7f:b3:b8:46:
8b:ba:76:31:8d:e7:e9:33:1b:27:bf:85:1c:44:65:ba:2f:50:
6a:2c:32:e5:34:60:7e:ef:b4:17:fb:92:81:fa:77:bb:0b:05:
02:e7:d8:9c:57:58:4d:6f:9f:e3:53:69:20:86:8d:4e:24:f4:
09:36:0e:cc:92:2f:3f:e5:29:56:01:fe:b6:e5:ac:b0:0e:24:
56:38:23:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:54 2024 by rpki-client on console-fra.rpki-client.org