Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/AeMasZ7DX7VYX-zCXggsMgs5Go0.roa
File: AeMasZ7DX7VYX-zCXggsMgs5Go0.roa (raw, json)
Hash identifier: pXdJWHuwnEN7raccYwMHAROfWaQbS6Ad+88jjRXBqUM=
Subject key identifier: 01:E3:1A:B1:9E:C3:5F:B5:58:5F:EC:C2:5E:08:2C:32:0B:39:1A:8D
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 018AB1EBE055ED7B3E597D80EB584E625DDB
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/AeMasZ7DX7VYX-zCXggsMgs5Go0.roa
Signing time: Wed 20 Sep 2023 09:29:00 +0000
ROA not before: Wed 20 Sep 2023 09:29:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210538
IP address blocks: 185.255.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:eb:e0:55:ed:7b:3e:59:7d:80:eb:58:4e:62:5d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Sep 20 09:29:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01e31ab19ec35fb5585fecc25e082c320b391a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3b:89:ba:9c:4c:16:59:6c:3c:43:24:5c:4f:
36:9f:9e:69:41:64:90:d4:e0:57:d3:96:2d:3b:cd:
f2:0d:91:39:91:7c:ef:3a:1c:dd:f0:7e:b2:87:da:
0e:0e:57:80:96:26:0a:a6:17:e2:bf:7c:9c:e1:ce:
8a:3c:60:2c:db:54:13:f4:2f:b8:77:c1:6f:b2:cc:
4e:6a:a0:93:66:ec:41:c3:cc:1b:ac:80:79:fc:58:
5f:eb:84:fb:83:8d:a2:7a:87:54:7c:b4:87:26:5e:
07:66:b7:50:22:66:cb:a8:ab:02:55:9c:2a:c8:cb:
63:12:b6:d4:2c:a3:65:f2:9b:50:92:45:b9:64:86:
b8:2e:17:75:25:9e:de:03:7c:99:be:55:04:b7:e4:
4c:9d:22:a0:33:8f:8d:c9:cb:31:2c:c2:49:a8:4a:
7e:26:ef:84:6f:8b:0c:78:e6:be:88:1c:dd:71:f1:
43:35:9d:e9:5c:c9:8f:63:ad:0c:43:4c:3d:b3:de:
f6:42:d9:b4:6e:48:e8:da:0d:94:bd:97:97:8e:0f:
69:99:e6:b8:f4:96:34:3b:40:00:10:10:25:1e:ba:
ef:78:4f:82:60:73:9c:77:9f:8a:25:b9:24:84:3b:
dd:f9:48:23:01:69:de:ba:db:b8:b2:58:4a:b0:38:
b8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E3:1A:B1:9E:C3:5F:B5:58:5F:EC:C2:5E:08:2C:32:0B:39:1A:8D
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/AeMasZ7DX7VYX-zCXggsMgs5Go0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.4.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:97:ab:92:c5:de:eb:1b:01:f8:91:c6:3b:3d:2d:f7:d1:ea:
2e:56:cc:bf:98:20:24:37:8d:e4:6e:ae:85:3f:2b:27:61:7f:
48:62:6b:6b:1b:4c:2b:b1:b7:e1:be:eb:19:3f:ff:48:21:b0:
85:6f:f9:10:bd:5e:c2:36:d7:da:22:77:e1:59:ab:3c:6b:ca:
be:61:57:ab:9c:72:47:92:cd:59:40:90:79:f2:c4:dd:7d:74:
27:2c:58:b9:79:a4:17:91:d1:be:26:7c:a2:1a:e2:cc:08:e4:
db:48:3f:74:16:1f:a0:c3:11:11:ad:81:32:6d:24:05:cb:a3:
49:e0:fc:67:4e:0f:1c:ee:91:b8:1e:26:0d:1d:57:dd:a9:ea:
4e:e2:70:3d:31:70:9c:b0:3e:fd:4c:ae:d8:37:4d:8d:dc:9a:
eb:33:03:1c:3a:52:b9:66:37:4c:9b:a3:9e:6d:08:92:ac:55:
49:77:6f:4a:aa:b9:3f:fa:0f:21:8b:0e:ed:a8:fb:26:bb:7a:
29:b7:cc:e3:2b:e3:78:62:f0:a6:c9:38:a5:fc:e2:9a:bf:20:
ca:47:ef:6b:ba:3b:e2:36:d1:52:fc:72:5c:5d:01:3c:5d:e1:
68:d4:63:c1:49:cd:e7:02:76:17:7e:0f:55:34:c5:03:b9:c9:
e6:2c:0a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org