Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/p9fWXmHS8IQ_CJX70iEkYAbvGbI.roa
File: p9fWXmHS8IQ_CJX70iEkYAbvGbI.roa (raw, json)
Hash identifier: cCzsBpFinm3o1JmlUgZQBciY2uyJNRcOSPMoU7SUM5w=
Subject key identifier: A7:D7:D6:5E:61:D2:F0:84:3F:08:95:FB:D2:21:24:60:06:EF:19:B2
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C1FF14AD6DE11275E098D8FE4C085
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/p9fWXmHS8IQ_CJX70iEkYAbvGbI.roa
Signing time: Mon 02 Jan 2023 05:54:58 +0000
ROA not before: Mon 02 Jan 2023 05:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48940
IP address blocks: 185.128.106.0/23 maxlen: 23
185.229.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jan 2023 16:57:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:1f:f1:4a:d6:de:11:27:5e:09:8d:8f:e4:c0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7d7d65e61d2f0843f0895fbd221246006ef19b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:6d:e0:b6:70:c6:26:5d:07:2d:d7:d9:9d:
c9:26:0d:fa:00:b5:b0:b8:26:a0:bc:5c:7b:36:51:
1e:7e:88:9e:a3:f8:cf:d1:0c:38:7b:25:f5:bd:f1:
f4:ab:1d:e2:2a:7c:d2:35:4c:62:08:60:83:69:a1:
e5:1b:a2:b4:e0:34:12:bc:0f:77:5d:58:8c:9e:ce:
1b:3c:c9:87:f1:88:12:15:11:4f:db:9c:2b:00:f1:
0c:a9:bb:92:de:01:2c:63:01:f0:76:4b:30:99:a5:
a7:0c:98:f7:dd:44:cd:a8:70:e1:99:32:bf:1f:1b:
92:37:f4:83:0a:08:c6:f0:8a:8f:0c:be:d0:81:6b:
58:c1:0a:22:8a:f5:12:81:9c:74:20:47:e4:cf:7f:
a9:f4:f2:24:27:92:c8:93:7d:d6:d4:f9:eb:b6:6e:
cf:04:b1:80:ae:4e:05:bc:1c:f5:32:3a:2a:14:52:
5e:fe:c3:0e:a2:9d:42:94:6f:2b:e3:5a:25:57:b0:
af:83:9a:88:5a:b0:0d:03:2e:29:eb:ba:06:40:ff:
be:0b:b6:07:73:38:f7:30:7e:61:23:02:21:fd:f6:
da:50:48:dc:7b:69:d8:28:0b:5b:9a:16:a9:b8:f9:
85:24:1e:77:5c:bf:f0:0a:f2:73:d0:99:4e:57:83:
6b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D7:D6:5E:61:D2:F0:84:3F:08:95:FB:D2:21:24:60:06:EF:19:B2
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/p9fWXmHS8IQ_CJX70iEkYAbvGbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.106.0/23
185.229.64.0/24
Signature Algorithm: sha256WithRSAEncryption
60:9d:b0:d3:d1:70:69:3d:25:7b:66:65:cf:21:1c:eb:d4:05:
77:ef:98:ed:cb:e1:16:c5:79:9c:ff:5d:64:6b:2d:cb:dc:5e:
bf:fe:f5:b8:48:4e:b3:13:38:33:a0:09:8d:98:e1:a4:31:15:
48:ad:18:7c:d5:63:e9:6d:10:cf:ef:00:2c:33:23:1f:87:b0:
86:60:03:88:df:ec:ef:a4:a9:91:a7:6d:ad:51:0a:31:49:3d:
a5:eb:43:1e:b4:e3:cb:60:74:32:8a:68:fd:f5:91:1d:4e:6f:
8e:31:a9:e5:76:cc:e5:c4:a8:0d:77:39:10:f8:50:d8:96:e0:
01:0a:52:80:da:20:9b:15:02:6f:62:5a:c1:5e:70:e1:c0:d6:
4f:5e:8a:bf:28:f1:04:f3:a8:20:4c:ee:39:86:39:4b:46:75:
1b:96:7a:f6:b3:88:a1:9f:4b:24:d2:13:22:36:9c:ef:ec:a9:
88:fe:c9:52:b2:c4:7a:73:41:7b:7e:eb:2b:a0:b0:3c:17:48:
bb:c2:43:12:fe:57:2b:2b:d9:1b:c3:55:8c:da:33:d3:d8:d9:
69:fb:e2:cd:5a:b3:1d:a2:2b:2b:48:e4:ad:ea:6d:01:1e:96:
6d:0b:ca:8d:9c:e3:95:e4:a9:2a:57:52:b0:88:01:99:7f:96:
d7:9b:49:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org