Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/7nI4TKN-sGUv7-_-X_5kie-vDp4.roa
File: 7nI4TKN-sGUv7-_-X_5kie-vDp4.roa (raw, json)
Hash identifier: DVYZFTlgls7VkWZzzU59PH8tyA918bv/Q66+Xqh0zQs=
Subject key identifier: EE:72:38:4C:A3:7E:B0:65:2F:EF:EF:FE:5F:FE:64:89:EF:AF:0E:9E
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C255C8ADF83B1FD33E4810A6B3492
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/7nI4TKN-sGUv7-_-X_5kie-vDp4.roa
Signing time: Mon 02 Jan 2023 05:54:59 +0000
ROA not before: Mon 02 Jan 2023 05:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56630
IP address blocks: 185.232.168.0/24 maxlen: 24
185.117.117.0/24 maxlen: 24
185.40.5.0/24 maxlen: 24
194.53.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Nov 2023 16:59:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:25:5c:8a:df:83:b1:fd:33:e4:81:0a:6b:34:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee72384ca37eb0652fefeffe5ffe6489efaf0e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:52:b5:8d:4d:39:43:33:62:d6:21:39:f8:
08:f7:fd:fb:e5:d2:34:4c:be:3d:1a:66:62:56:54:
30:0e:53:f5:02:19:07:c3:d3:47:43:bd:32:06:12:
be:d2:6f:a2:a9:af:c7:2d:ae:cd:37:21:aa:b2:d4:
a1:cb:25:f4:dd:b2:f3:26:f9:2e:1b:58:ef:48:43:
3a:a0:a6:51:1f:61:87:a2:22:99:8e:0d:3f:a6:52:
3b:2a:2a:b0:44:ec:7d:ac:ce:90:76:f1:95:35:11:
2f:04:f7:6a:e2:e6:3a:c1:4c:8e:2a:7d:84:79:1b:
9f:48:12:00:c9:1d:07:40:72:dd:1c:c4:93:c0:17:
f9:81:67:cf:6f:7a:8b:49:0d:af:0d:13:e1:4f:8f:
41:a6:33:67:92:f7:68:29:2d:22:75:e8:9c:3a:02:
d1:9e:c9:a5:eb:c8:de:56:6a:78:f9:b8:f1:85:8e:
64:c9:8a:ea:70:4e:18:78:84:08:23:38:87:2d:04:
58:a6:bd:d5:f3:20:56:25:22:e9:b5:f4:27:7e:25:
df:fa:2b:38:c0:76:95:47:c4:61:9c:4c:0d:6e:1a:
9f:db:bb:8c:f3:48:35:c5:03:41:99:ea:44:9b:4b:
62:3c:42:58:99:a4:b9:b0:2f:f8:f5:b2:e8:fb:c5:
24:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:72:38:4C:A3:7E:B0:65:2F:EF:EF:FE:5F:FE:64:89:EF:AF:0E:9E
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/7nI4TKN-sGUv7-_-X_5kie-vDp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.5.0/24
185.117.117.0/24
185.232.168.0/24
194.53.55.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:5d:c1:f9:e6:92:e0:0e:a3:ca:3e:2b:88:13:f4:dd:55:6b:
16:38:81:81:c6:a8:65:f0:e3:9f:9b:1b:6f:32:30:17:d9:dd:
14:fb:de:24:0d:57:b2:51:6f:88:44:da:83:48:3d:01:12:f0:
94:90:5b:9a:cc:48:15:b8:f5:d4:0c:50:17:c0:09:a8:46:09:
e5:ac:71:66:3d:03:a9:dd:8c:25:10:89:1b:31:0f:08:59:70:
0a:cb:44:6e:95:79:f9:c9:be:6d:8d:47:95:9b:ed:bf:19:67:
d1:49:af:00:ed:9d:88:24:d1:e8:0e:38:06:d9:c7:3e:c2:6c:
a9:64:49:ce:42:6d:7f:f1:12:97:a5:ff:df:5a:0d:af:55:b9:
1a:bd:76:63:d2:f5:02:77:b9:76:e9:db:a0:00:a6:31:c2:21:
84:7d:80:81:5e:6b:6c:97:7a:21:42:1b:1c:ae:46:77:08:80:
03:27:90:ac:24:37:02:f4:03:6a:4b:1e:f5:71:7c:c0:4c:ed:
71:60:f0:8d:b5:68:12:76:2f:c3:79:29:be:29:b0:68:4a:7f:
b4:b0:a5:4b:48:ca:81:1c:79:bd:55:71:0e:ab:77:f1:35:43:
b7:27:9d:74:40:46:6c:e4:19:65:e9:ef:10:e4:a6:fb:b3:d5:
ef:2b:f5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org