Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/CKS5Yneu9mVn1R__T93yx7UP584.roa
File: CKS5Yneu9mVn1R__T93yx7UP584.roa (raw, json)
Hash identifier: I3gUvbH7X/b81kOaKcsjFgC3g+xmB+nXf/kg8Vb5drg=
Subject key identifier: 08:A4:B9:62:77:AE:F6:65:67:D5:1F:FF:4F:DD:F2:C7:B5:0F:E7:CE
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 018B6FBD8FB2B53F5C039F4988ED808F897D
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/CKS5Yneu9mVn1R__T93yx7UP584.roa
Signing time: Fri 27 Oct 2023 06:06:15 +0000
ROA not before: Fri 27 Oct 2023 06:06:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.144.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Nov 2023 03:08:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6f:bd:8f:b2:b5:3f:5c:03:9f:49:88:ed:80:8f:89:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Oct 27 06:06:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08a4b96277aef66567d51fff4fddf2c7b50fe7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b4:7a:99:2d:0b:69:73:94:18:fb:8a:3a:a8:
14:ec:29:f4:20:39:19:86:2f:17:f3:71:54:09:83:
11:9f:9a:c9:11:e1:45:0e:a1:e5:e9:fe:4e:b1:9c:
5e:5d:e8:ea:60:7c:6a:02:9c:7d:3e:c1:e3:c0:1e:
93:06:53:60:0b:76:a0:b4:f3:da:bf:a3:52:83:02:
31:7c:40:85:6b:a7:21:a4:46:9a:2f:1b:1f:e1:68:
9b:9d:73:9e:9b:bd:9e:49:11:ee:cd:e1:f0:39:9b:
a6:c5:5b:82:0b:b9:8b:34:94:3c:95:11:0a:79:bc:
8b:01:d3:83:c1:63:86:18:ed:68:14:d0:d7:b4:d9:
87:88:c4:48:06:ca:6e:04:2a:fa:c2:42:27:fe:6d:
b1:60:90:5a:24:52:17:55:d6:8b:4c:4e:df:d4:57:
c5:07:81:00:7f:e8:90:b2:16:77:9f:15:d4:d8:d1:
96:9d:1c:3b:9a:fa:25:ad:70:72:4a:f3:de:22:c3:
22:02:0d:c2:fb:6c:fe:e2:21:0d:14:d0:b1:a1:5b:
dc:a8:d3:66:86:f7:8e:60:c3:ee:bf:bf:b2:08:6c:
a3:b0:ff:f9:2f:d6:57:71:ea:08:93:ac:56:46:88:
09:f0:37:db:eb:51:bb:88:f8:00:cd:25:af:8b:b7:
ae:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A4:B9:62:77:AE:F6:65:67:D5:1F:FF:4F:DD:F2:C7:B5:0F:E7:CE
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/CKS5Yneu9mVn1R__T93yx7UP584.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.12.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:57:31:5b:73:11:f3:ed:5f:6c:5a:b0:e8:f3:0d:30:75:be:
f1:6a:0f:f5:67:2f:b4:92:f2:4f:ba:d9:ff:33:13:ee:71:aa:
37:d8:50:e7:38:d4:0e:01:39:d1:79:bc:27:68:f6:d3:cd:52:
34:a0:d2:f5:77:7c:7b:0b:1a:c5:5d:80:55:43:d1:77:cb:23:
9f:3a:09:53:e5:d0:d7:02:3f:d2:4b:52:87:5d:a3:b1:ee:f2:
f3:1c:1d:40:05:43:d1:d3:44:cf:8e:87:73:99:53:30:86:93:
9a:db:b2:cd:82:b1:cc:c7:96:39:6c:da:b2:0f:c3:0a:a4:fa:
d2:e7:6a:67:de:ca:b6:ab:a0:fc:ab:53:33:b5:0f:7e:bb:d7:
f9:bf:bf:0f:9b:b5:d2:d5:41:2c:94:c1:6d:46:5c:4e:76:7a:
a0:12:a0:19:ee:e2:c7:b4:22:0b:a0:7d:4c:9f:61:92:84:18:
66:d6:16:55:e0:f6:b7:cd:33:f6:86:8c:36:66:f8:b4:a2:ff:
b2:61:27:b4:72:37:f6:67:6d:b7:d2:89:ce:03:ab:f4:31:94:
f2:3c:68:87:00:b4:de:a2:19:46:1f:f0:08:8e:f2:70:20:8e:
34:93:ab:33:8c:48:00:8a:be:78:d4:fd:bf:d4:51:98:72:8d:
c5:3c:fd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org