Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/B_8v_ohbUeMt6wdKpLUu95YA1CQ.roa
File: B_8v_ohbUeMt6wdKpLUu95YA1CQ.roa (raw, json)
Hash identifier: IPWC9zmRTJaIiRdP1xjkkzDdQmH8pbJ7pIFk/ZPNBPA=
Subject key identifier: 07:FF:2F:FE:88:5B:51:E3:2D:EB:07:4A:A4:B5:2E:F7:96:00:D4:24
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018576CCF827E053358912F4138325C4B40B
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/B_8v_ohbUeMt6wdKpLUu95YA1CQ.roa
Signing time: Tue 03 Jan 2023 08:43:42 +0000
ROA not before: Tue 03 Jan 2023 08:43:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203704
IP address blocks: 185.124.4.0/22 maxlen: 24
185.207.144.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:76:cc:f8:27:e0:53:35:89:12:f4:13:83:25:c4:b4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 3 08:43:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07ff2ffe885b51e32deb074aa4b52ef79600d424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1d:16:ac:8f:75:a9:cf:38:42:dc:23:92:e6:
9e:b5:23:3c:20:c1:6f:fe:41:b1:48:7a:d1:74:a3:
a6:49:a4:dd:a9:86:c0:c9:77:72:bb:81:8b:64:49:
c8:45:fe:71:86:be:f3:4b:69:92:8b:7e:ac:86:6d:
7b:b9:53:5f:49:67:d7:12:da:50:4f:3e:c9:1b:ac:
9e:dc:3f:7f:6c:6e:98:a7:8b:8a:e2:b3:3f:22:b3:
f8:49:54:49:f3:25:fc:b4:fe:1c:5a:6e:b5:09:12:
81:c7:44:ca:ca:33:77:6c:e0:4e:10:54:2b:e9:1e:
40:52:a7:48:53:ea:e7:af:61:de:1d:dc:60:11:af:
12:7e:7c:3f:75:6b:bf:76:7e:9f:13:47:15:5e:b6:
14:af:1d:66:cf:ce:4b:80:2d:0e:d9:61:ff:db:04:
2c:0b:ed:4f:cf:ae:b4:35:c0:19:ee:89:52:43:07:
af:dd:d8:cc:eb:67:cb:26:aa:4a:c0:89:9c:35:70:
ff:1e:b8:27:2b:db:9d:60:df:58:80:d6:46:79:95:
a4:8e:b0:d1:9e:5e:4f:b3:28:68:0e:c9:e0:65:96:
d1:cd:0e:2e:f3:41:83:95:c4:77:1d:8d:09:14:fe:
8e:38:39:f3:80:31:60:e8:b9:26:4a:2b:de:69:6a:
58:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FF:2F:FE:88:5B:51:E3:2D:EB:07:4A:A4:B5:2E:F7:96:00:D4:24
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/B_8v_ohbUeMt6wdKpLUu95YA1CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.4.0/22
185.207.144.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:84:80:89:55:34:18:b5:ae:e8:65:2c:93:e9:4f:57:fa:ff:
95:e1:89:d6:63:45:9a:57:39:48:61:da:9d:70:de:d2:ac:6c:
9b:d8:19:6d:24:63:36:c6:6c:ca:78:63:0c:d3:97:0d:36:7e:
bf:9f:86:8f:6c:94:28:de:e2:29:dc:5d:fa:d6:8a:f0:fc:8e:
85:3a:a4:3b:62:3b:23:6f:62:cb:9a:db:37:38:64:2d:de:83:
f0:37:28:57:6d:86:33:41:56:47:03:cf:f2:ac:a5:61:9d:54:
f2:38:1d:34:25:7a:b2:32:5b:e6:73:c1:3a:03:6a:13:ef:05:
66:81:c7:6d:58:a0:34:3d:fd:33:81:27:d2:10:d2:88:44:c7:
00:6a:ec:9a:98:6a:78:19:59:83:0c:a3:5f:12:81:e4:f8:6c:
49:52:de:75:d6:0e:69:39:13:5e:cb:d4:1b:a9:7f:1b:6f:dd:
66:75:bb:97:e7:2a:cc:8c:5f:c0:b9:79:4b:06:e3:5c:68:7d:
e3:8a:c9:8a:56:78:b6:02:0c:39:d0:1f:f6:ad:93:bd:c1:77:
64:6a:d2:1c:2c:d3:ac:2e:8e:38:f8:03:b8:73:d5:3b:d8:6b:
e0:39:e6:3c:66:79:a3:b0:ef:70:69:51:32:af:71:d2:3f:09:
54:78:40:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org