Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/2ZtzNlPGQvvDAGKv6bBsFL-GdoQ.roa
File: 2ZtzNlPGQvvDAGKv6bBsFL-GdoQ.roa (raw, json)
Hash identifier: u8Hew0M8NBBMOhS+EojhbvhK7XLZxR6qbT/rnTHLIh4=
Subject key identifier: D9:9B:73:36:53:C6:42:FB:C3:00:62:AF:E9:B0:6C:14:BF:86:76:84
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 018A4038CFEB17E2A56018488B2E9EC7E411
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/2ZtzNlPGQvvDAGKv6bBsFL-GdoQ.roa
Signing time: Tue 29 Aug 2023 07:36:19 +0000
ROA not before: Tue 29 Aug 2023 07:36:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206408
IP address blocks: 185.130.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:38:cf:eb:17:e2:a5:60:18:48:8b:2e:9e:c7:e4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Aug 29 07:36:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d99b733653c642fbc30062afe9b06c14bf867684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:aa:66:51:ee:1e:8c:66:cf:98:27:af:e7:
11:07:5f:93:54:62:60:af:6a:41:bb:30:19:64:a7:
9e:37:46:1a:ff:d6:02:dc:a2:67:6b:7a:1b:73:4f:
1d:02:39:41:98:12:c2:ab:05:32:96:ca:03:be:d9:
d8:f6:43:e3:0e:c7:66:26:1c:bf:8f:fa:d9:6d:92:
c4:d5:f5:3d:db:e0:b3:60:96:25:73:e6:f2:77:b5:
cd:f7:bf:6a:a6:ab:cb:6c:89:70:94:a4:4d:01:f8:
e5:3a:73:dd:33:78:93:44:0a:b3:e4:88:15:e0:5c:
72:fc:af:f0:aa:30:fb:27:50:87:76:f6:d1:b2:f8:
65:b7:6c:01:6c:8c:3e:79:95:4c:40:8d:bc:87:1b:
14:4e:67:2b:ad:ae:2b:f2:21:13:11:26:1d:92:7b:
77:53:6a:e9:dd:a7:b8:4a:86:7d:6a:08:8f:35:2d:
6e:47:4a:79:ab:4f:f8:c5:41:43:70:d9:56:29:48:
c9:06:66:3c:b2:dd:15:7f:1e:20:a3:96:de:72:80:
6b:84:ad:cc:6a:e3:0c:12:c5:e9:e5:d1:0b:34:d2:
4b:f4:83:5f:c3:19:64:7e:47:53:f6:4e:cb:ec:8a:
c8:52:42:2b:24:ab:55:15:fe:f6:33:db:50:35:e4:
8e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9B:73:36:53:C6:42:FB:C3:00:62:AF:E9:B0:6C:14:BF:86:76:84
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/2ZtzNlPGQvvDAGKv6bBsFL-GdoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.0.0/24
Signature Algorithm: sha256WithRSAEncryption
17:9e:98:0f:43:6f:13:75:f8:ae:0f:9a:57:97:5c:74:88:ce:
c7:bf:23:4e:64:31:25:bb:2a:90:2c:37:ef:72:ae:bb:0f:9b:
73:0a:8b:73:7d:66:bf:29:e1:18:04:1b:42:5e:f2:c9:db:63:
5f:fb:76:23:87:06:87:3a:5d:b3:42:55:d7:fc:37:af:b4:ed:
53:1f:db:63:1d:b4:b4:7b:f4:78:1d:12:2d:78:9b:45:81:49:
af:36:1f:42:82:57:02:07:6d:bd:cb:55:1c:c7:45:29:75:a1:
49:28:63:3e:45:99:47:5a:06:6a:b6:bc:61:e6:8d:79:fb:e2:
11:26:2e:e2:e9:2e:43:bf:11:a1:ab:79:d6:6b:09:f4:aa:6e:
43:03:69:21:43:bb:de:ad:65:6f:64:6b:1a:8c:36:ae:03:ee:
3d:2b:50:a4:ac:3e:1b:fb:3e:81:6a:3d:bf:91:a8:29:99:d9:
82:3f:d3:d2:12:2c:f9:48:89:4e:18:8d:f8:d9:9b:56:02:18:
0f:46:9c:d2:52:67:84:c8:65:28:47:a7:d3:d6:ef:d9:b7:eb:
71:85:0e:e0:d5:ce:31:cd:7e:58:ac:1c:2d:58:e6:01:6d:4b:
c8:ea:70:9f:f7:77:7d:71:a6:6b:bb:f1:fa:54:f8:41:21:e9:
6a:be:33:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:38 2024 by rpki-client on console-ams.rpki-client.org