Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/2dGWXXNzVr1X9FvPnZzrW4p3dFM.roa
File: 2dGWXXNzVr1X9FvPnZzrW4p3dFM.roa (raw, json)
Hash identifier: 8Rp+ZwLt+PpIa8Cb+T7563X5DL4Qgb+gcJBbry5ZQfQ=
Subject key identifier: D9:D1:96:5D:73:73:56:BD:57:F4:5B:CF:9D:9C:EB:5B:8A:77:74:53
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018ACC05F5E4EEE76D94E1A2A6B593706D34
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/2dGWXXNzVr1X9FvPnZzrW4p3dFM.roa
Signing time: Mon 25 Sep 2023 11:07:37 +0000
ROA not before: Mon 25 Sep 2023 11:07:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.240.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Sep 2023 07:39:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:05:f5:e4:ee:e7:6d:94:e1:a2:a6:b5:93:70:6d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Sep 25 11:07:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9d1965d737356bd57f45bcf9d9ceb5b8a777453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:62:a9:54:0d:e6:50:83:66:64:e0:9c:0d:31:
bc:71:52:4e:7c:5c:bd:7f:e1:ec:5d:bc:58:29:d0:
e9:9b:0a:0f:39:ba:7f:8b:98:02:fb:91:65:3b:4c:
83:f9:64:3b:ec:c5:cb:ee:af:fe:74:c8:4b:1a:c2:
36:a8:7d:2c:81:2c:5b:73:aa:ef:7e:c4:17:98:aa:
9c:06:8c:9d:c8:ed:15:4f:cb:95:d5:46:20:fa:11:
76:70:74:9e:4a:8f:92:df:49:58:d5:ff:30:34:bd:
4b:e9:92:84:5d:8a:fa:ff:fe:c9:f2:86:e3:22:f3:
01:29:4c:2a:a5:0b:0c:91:8b:ed:fb:9d:6d:6e:64:
86:5f:f3:3b:81:5b:f3:8f:18:9a:59:f2:26:38:4c:
7a:cd:19:fe:97:e3:e0:1f:98:6a:c6:13:7b:a6:f1:
06:c8:d4:6f:b9:c1:b3:19:bb:a8:fc:8b:4c:22:1b:
54:82:3e:1a:a1:83:0e:87:93:59:c6:7a:ef:42:2c:
ff:30:81:2d:51:2e:cf:b1:52:81:64:a2:8e:d1:63:
89:9b:14:78:e5:be:18:bc:04:1f:be:80:dd:ed:09:
06:f5:d1:2c:94:7d:33:5f:a5:13:30:98:99:fe:87:
59:e2:87:b7:25:c7:f2:d0:47:dd:26:40:7f:e2:57:
3a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D1:96:5D:73:73:56:BD:57:F4:5B:CF:9D:9C:EB:5B:8A:77:74:53
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/2dGWXXNzVr1X9FvPnZzrW4p3dFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.132.0/24
Signature Algorithm: sha256WithRSAEncryption
60:9e:9a:29:7f:dd:1a:5f:56:c6:e6:9f:81:48:01:ba:98:2c:
73:5b:74:48:a2:41:30:9b:b2:13:ef:c8:a3:d4:91:2b:fc:89:
8b:d2:a7:c7:2a:43:72:90:74:cb:a3:51:11:ed:73:88:fd:ec:
13:83:c4:e5:a2:c3:8d:9e:f4:b8:e3:0d:8d:7f:48:f8:9e:38:
04:4e:0a:4b:e5:b1:39:38:30:3e:e8:a7:0e:38:82:52:44:95:
f6:f0:ba:51:9b:4e:41:81:0e:11:05:23:b3:dc:f5:0f:9d:4c:
be:e5:5c:de:70:03:02:fc:f2:84:24:d8:fd:f7:00:09:65:33:
e2:5a:8d:98:33:a0:ec:6a:88:e5:f9:d3:82:92:9f:21:51:63:
12:fb:a1:9b:13:6e:ca:e5:4c:0d:87:7b:6b:e1:ef:45:5b:09:
66:a6:5a:22:3a:a4:c3:66:95:1d:2e:d1:c8:7b:8c:ae:0c:99:
fc:35:25:ec:95:83:b0:a0:4a:f1:5c:31:27:6c:01:b0:cf:b1:
04:24:41:5a:28:59:b7:4d:b7:d2:e1:0c:73:5f:46:7d:3f:b2:
fa:71:cb:35:fa:96:15:d5:b1:72:68:b1:4b:cb:25:5a:18:36:
c1:a0:9f:a9:40:76:f5:a7:d9:91:5b:66:a1:76:6c:e0:25:4e:
61:45:71:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:11 2024 by rpki-client on console-fra.rpki-client.org