Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/sf-5UpUlsVtiyFOtGWjWal1z8NA.roa
File: sf-5UpUlsVtiyFOtGWjWal1z8NA.roa (raw, json)
Hash identifier: K0fzdN34IW/MFeWZpIexN0B5n7tRJyJh4GFaZH77ukI=
Subject key identifier: B1:FF:B9:52:95:25:B1:5B:62:C8:53:AD:19:68:D6:6A:5D:73:F0:D0
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 01915152167F113C5D15F57F6773BBECD82C
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/sf-5UpUlsVtiyFOtGWjWal1z8NA.roa
Signing time: Wed 14 Aug 2024 14:36:59 +0000
ROA not before: Wed 14 Aug 2024 14:36:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 185.110.62.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 24 Sep 2024 04:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:51:52:16:7f:11:3c:5d:15:f5:7f:67:73:bb:ec:d8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Aug 14 14:36:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1ffb9529525b15b62c853ad1968d66a5d73f0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:00:48:d1:95:46:6a:28:7f:a2:66:96:36:
d4:2b:d9:09:a5:6f:03:67:1a:76:39:c3:4d:28:ee:
a0:0b:96:e2:16:5d:d1:e1:95:b8:84:83:ce:2c:a9:
0e:35:16:55:bc:a1:de:90:fa:d1:d0:a7:51:fd:a1:
5a:09:aa:a0:43:6a:e9:cb:fe:74:35:2d:7a:8d:8e:
52:a2:ee:eb:a5:02:79:99:09:42:4e:51:fa:cd:ad:
7e:2b:a4:52:ee:f4:49:04:58:b7:3d:85:a4:22:31:
9a:a4:f1:e3:3d:24:88:68:b8:c9:04:6f:ea:22:76:
c8:33:f9:86:12:71:de:bf:44:ed:94:13:09:15:e5:
78:b3:6f:d1:a4:21:44:5d:2b:cc:38:5a:40:f6:bd:
c6:8a:78:d2:60:86:2a:3c:29:8c:f9:dd:b1:19:ee:
33:2b:b8:c4:7a:69:85:44:69:61:f7:ee:ab:bb:60:
3e:ff:65:6c:e4:7e:89:9f:75:01:27:3e:86:4f:b6:
28:c2:24:9d:e2:89:06:95:33:a0:9d:cb:c7:ca:aa:
b3:a8:d7:28:12:a5:04:83:60:fb:69:a3:d6:43:fd:
ee:dd:ba:55:fe:11:c5:89:d9:7a:3c:ad:c4:53:b6:
16:f1:e0:ee:5f:9c:30:0f:27:4a:5d:54:a2:e3:e3:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FF:B9:52:95:25:B1:5B:62:C8:53:AD:19:68:D6:6A:5D:73:F0:D0
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/sf-5UpUlsVtiyFOtGWjWal1z8NA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.62.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:e4:f6:e5:9a:0c:9b:a4:34:0d:6d:84:94:dd:cb:2a:4a:e1:
a8:fb:b7:4e:3b:d6:bb:1b:29:af:6c:26:d6:65:0a:3e:ad:97:
85:6c:3b:2f:26:0d:5e:a4:b6:61:5e:3c:4e:36:35:06:24:fa:
84:ad:d1:fb:41:ea:54:47:9b:69:64:04:e9:13:4e:f9:7d:06:
0c:35:1f:23:55:52:c9:d3:6a:59:73:80:15:f8:07:55:78:d8:
f2:1b:1c:84:30:c7:4d:8b:f3:76:d9:13:7c:d9:ff:fe:23:5e:
2d:5e:8d:f2:60:14:25:ad:c5:09:ed:23:c4:3b:ec:82:fc:98:
27:64:02:d5:89:f0:74:43:12:6d:a3:54:8a:16:29:4f:88:ba:
27:d9:eb:31:9c:e6:cf:56:43:27:39:05:4d:f5:d4:65:81:38:
50:37:7d:ef:7e:17:22:1c:72:3c:c9:e5:c3:be:ca:ea:01:d4:
07:2d:16:b0:94:5f:d8:90:40:bd:4e:93:12:43:60:b8:de:48:
53:7f:8e:fe:e6:b8:68:76:de:d2:06:59:6e:ab:e4:74:2d:29:
15:71:9d:44:10:75:0c:c7:1a:fe:86:e6:e5:b5:6a:a4:4b:3e:
80:9c:10:ff:18:62:b4:15:1e:92:36:af:7b:46:49:c6:70:a5:
3f:cd:32:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 07:59:17 2024 by rpki-client on console-ams.rpki-client.org