Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/6yBxhLzGKNyRIbHVHJB-Lxtko4g.roa
File: 6yBxhLzGKNyRIbHVHJB-Lxtko4g.roa (raw, json)
Hash identifier: 10DOErahBX/ef+G/Yu0NMvkEAhaEaNpe8zpSQCuquBo=
Subject key identifier: EB:20:71:84:BC:C6:28:DC:91:21:B1:D5:1C:90:7E:2F:1B:64:A3:88
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185737AD92517A4EB945930778A81A0A495
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/6yBxhLzGKNyRIbHVHJB-Lxtko4g.roa
Signing time: Mon 02 Jan 2023 17:15:08 +0000
ROA not before: Mon 02 Jan 2023 17:15:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209034
IP address blocks: 185.240.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:d9:25:17:a4:eb:94:59:30:77:8a:81:a0:a4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 2 17:15:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb207184bcc628dc9121b1d51c907e2f1b64a388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:4a:bd:4d:99:02:35:bc:a2:a6:ee:8f:84:
62:ed:79:9c:0c:2c:6d:8e:ab:1c:3b:7f:0d:d2:7b:
a9:94:ec:e2:a2:80:c4:59:4b:1e:e2:14:1a:8e:c7:
87:e6:11:a9:13:3b:ce:a8:4d:73:b7:5b:fe:ac:6b:
fb:b8:70:42:1e:a8:10:47:f2:00:48:31:cb:17:db:
59:6f:43:44:11:1a:4e:df:e3:db:58:38:2f:74:c7:
d7:f0:11:4d:df:48:1f:ba:76:6b:2d:fc:5b:7c:39:
1a:2a:7d:f0:5c:f7:9f:64:19:2c:3e:b5:6c:69:55:
82:e6:b1:ec:a4:a8:68:9f:61:b5:57:46:f4:33:85:
55:5a:c7:04:72:ae:f3:74:34:4a:6c:5c:1e:71:b5:
73:b2:97:cc:0a:d4:5a:a9:71:4a:5b:04:58:db:cf:
df:20:7c:85:3d:31:e9:b8:6e:e2:86:9d:ad:70:8b:
0f:ec:78:e3:5b:a3:f9:00:49:b9:96:9f:66:4e:ff:
ac:41:10:b8:7f:da:4f:66:01:07:af:2b:d8:9b:8e:
8f:c3:6b:fa:56:3b:dc:91:66:77:b5:d1:84:54:72:
cb:78:8e:7b:4b:c3:cf:06:34:a9:fb:e0:11:10:b5:
41:8d:d0:21:fa:9b:28:b4:b2:6b:ae:92:b4:f1:9a:
fc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:20:71:84:BC:C6:28:DC:91:21:B1:D5:1C:90:7E:2F:1B:64:A3:88
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/6yBxhLzGKNyRIbHVHJB-Lxtko4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.44.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:be:fb:15:51:a0:2d:3b:07:fa:3c:ac:aa:6b:f9:74:72:34:
72:b4:b7:48:07:73:8e:a4:92:45:a6:34:07:f1:a2:51:fc:fd:
b7:42:82:b3:af:52:3f:fb:14:23:fa:ff:af:c2:d3:cf:fa:ac:
27:6a:9f:f2:81:86:c1:fa:f7:92:95:32:84:aa:75:44:d5:1d:
3c:17:f0:67:fd:35:88:4f:15:8b:eb:9c:3c:e3:13:61:b7:59:
a7:60:ef:b2:f3:37:17:da:40:d4:f2:c4:22:cd:0e:e3:1b:61:
8c:ed:e8:ee:98:97:4f:a1:10:f7:23:ea:11:db:78:bc:0b:53:
c0:29:bf:e1:fe:f8:1c:14:d8:93:59:7f:9c:ad:4f:05:75:dc:
f0:2f:f9:76:64:35:a6:a3:d2:cd:a1:f9:b1:f6:8b:48:9d:6d:
2c:e0:90:82:aa:29:21:f1:dc:0f:96:8f:68:0b:12:d4:4b:10:
e6:5c:4c:e2:12:cf:f8:ab:ed:52:01:1f:21:e0:81:43:41:c6:
70:1e:21:77:d2:87:07:de:a0:3c:9a:d9:dd:0d:e8:bc:18:b0:
e1:e1:26:43:c3:f1:91:af:be:68:14:b7:f2:56:32:5f:c9:57:
f0:1d:f7:83:e7:de:ea:ae:08:f5:65:b2:95:47:24:f6:99:5c:
5d:0f:b4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org