Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/41mngM73tX6uKi9o3gCqcJFLs9I.roa
File: 41mngM73tX6uKi9o3gCqcJFLs9I.roa (raw, json)
Hash identifier: 606yONur0W18D0zaQUBDMxodlrmFO2bc9aiY3OH5P7o=
Subject key identifier: E3:59:A7:80:CE:F7:B5:7E:AE:2A:2F:68:DE:00:AA:70:91:4B:B3:D2
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018BCF84EE24CB6B4C1E2117D1905B11381D
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/41mngM73tX6uKi9o3gCqcJFLs9I.roa
Signing time: Tue 14 Nov 2023 20:27:57 +0000
ROA not before: Tue 14 Nov 2023 20:27:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215997
IP address blocks: 185.244.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cf:84:ee:24:cb:6b:4c:1e:21:17:d1:90:5b:11:38:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Nov 14 20:27:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e359a780cef7b57eae2a2f68de00aa70914bb3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:09:0a:0d:31:3f:06:8d:20:89:6e:8f:cb:0b:
96:f4:a9:e9:89:34:70:56:56:47:ef:33:d6:40:45:
a1:09:63:b3:12:46:ce:83:36:a1:8c:19:7a:fa:a3:
03:32:47:36:db:b5:6c:9b:81:a0:c5:c8:a1:78:34:
ee:82:fe:b5:03:5a:dc:d4:b0:69:3f:ca:f5:04:af:
42:60:0d:bc:50:11:70:cd:eb:65:00:85:1b:be:b5:
2b:1c:79:0e:00:25:9c:9f:11:79:3d:aa:78:4f:cd:
09:31:ef:ff:eb:fa:b2:df:6a:10:c8:d3:32:f4:1b:
6a:39:2e:d1:4f:da:e0:41:c2:5f:66:1d:af:80:39:
4d:3f:bf:ea:b1:07:4d:82:eb:da:a2:13:75:f1:5f:
57:24:f3:41:bd:6d:c3:ce:fb:11:84:36:f0:9a:14:
88:56:7e:4e:1b:e2:33:68:07:9e:9a:f3:72:ee:b0:
a5:ac:6b:30:1f:ef:13:f9:63:c6:29:da:27:a2:fe:
50:5f:32:60:5c:49:ae:11:25:e8:26:0e:07:97:a0:
ec:89:92:32:1b:88:5e:49:a4:ec:fb:35:3f:2b:65:
ce:68:b7:a4:ee:40:ed:df:94:f3:da:01:83:ed:63:
30:7e:c8:cc:7b:52:a1:62:bc:ac:2b:6d:5f:31:d1:
60:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:59:A7:80:CE:F7:B5:7E:AE:2A:2F:68:DE:00:AA:70:91:4B:B3:D2
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/41mngM73tX6uKi9o3gCqcJFLs9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.174.0/24
Signature Algorithm: sha256WithRSAEncryption
54:98:3b:57:77:54:97:93:49:6c:4b:44:0e:4b:56:c1:05:b6:
a7:01:4e:e5:78:09:4a:f1:cd:44:f1:1c:c9:c1:ba:29:83:7f:
19:cc:d4:45:7b:72:4e:c5:b6:31:40:81:e1:61:15:40:74:5f:
ac:84:67:9f:ec:38:90:5f:ac:1a:43:db:cd:d9:8e:77:77:9d:
37:7a:f4:fd:db:a0:6c:38:96:aa:9f:4d:69:22:0b:9e:d4:e2:
d9:9a:b4:85:2d:d6:94:f2:00:4d:b6:9e:a4:89:da:87:61:a6:
3d:14:1b:9b:0f:14:4c:7a:63:84:10:df:92:12:1e:4b:8f:3b:
7a:88:7b:25:f3:ad:47:e1:43:c2:91:d4:e7:2c:ad:ae:57:dd:
15:3e:9c:88:e1:1e:dc:6a:e3:19:34:f8:1d:a2:68:92:73:8e:
52:e6:0b:b6:5c:9c:05:e7:60:71:1e:13:ad:ac:98:96:b1:71:
68:aa:d4:cc:3f:cc:74:dc:b7:ab:e0:98:1b:32:07:83:a6:38:
92:63:ab:e6:88:86:b3:d9:aa:6c:8c:69:83:12:59:c6:71:d1:
0f:60:8b:b1:6a:30:a7:8e:2e:26:88:0e:e0:94:ee:88:92:34:
28:b1:d8:62:88:38:5d:5f:07:5d:ca:78:d2:cb:0d:6f:35:41:
4d:62:3c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org