Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/cff1JuG2hENrDm1FEJsRykOsjxg.roa
File: cff1JuG2hENrDm1FEJsRykOsjxg.roa (raw, json)
Hash identifier: BIzF5XF499HGdTSMny0pVY0Kk3pOsrC93s1UlooaxfY=
Subject key identifier: 71:F7:F5:26:E1:B6:84:43:6B:0E:6D:45:10:9B:11:CA:43:AC:8F:18
Certificate issuer: /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial: 01856BF7ED7AF90CEAC8DAA9C49CAD7FEDDE
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/cff1JuG2hENrDm1FEJsRykOsjxg.roa
Signing time: Sun 01 Jan 2023 06:14:48 +0000
ROA not before: Sun 01 Jan 2023 06:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59853
IP address blocks: 185.156.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:f7:ed:7a:f9:0c:ea:c8:da:a9:c4:9c:ad:7f:ed:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
Validity
Not Before: Jan 1 06:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71f7f526e1b684436b0e6d45109b11ca43ac8f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:ad:64:14:c5:b8:b4:24:d4:80:9d:d3:1d:
14:61:29:47:9c:78:7c:9c:18:f4:fd:a4:b1:c4:82:
bd:74:8c:50:50:c7:da:a5:10:ce:a5:23:ad:50:1f:
4a:b3:4b:8c:51:b7:06:b9:cd:a6:db:d2:fc:ef:18:
93:c5:2b:9e:f4:44:5b:c5:02:9d:f9:72:a0:37:f9:
6c:16:79:a8:a8:09:81:d7:d9:aa:64:41:9a:a5:21:
b1:3b:c0:64:6c:f3:83:51:2b:93:0b:bd:7a:bc:20:
62:81:0b:e1:70:8d:8b:2c:e0:39:8b:15:95:0e:6c:
3d:a6:b7:71:2b:40:b9:eb:2a:0d:d5:59:3b:e7:9e:
6b:1c:7e:2f:0e:6f:62:bd:57:c2:e0:e7:95:66:5b:
90:0d:31:ea:c5:42:b3:5d:a7:d6:1b:28:6c:6d:90:
e0:4a:9d:bf:29:1a:d3:e6:5c:08:c2:5a:d3:bd:a8:
c6:30:cd:3e:3f:f0:48:fa:92:e1:28:fa:bb:86:a6:
46:09:48:59:bd:14:a2:74:38:ca:00:ad:ca:d5:b8:
0d:a9:a0:34:40:11:9d:68:38:ea:b2:45:3c:4c:2b:
09:7e:de:df:cc:68:7e:fb:b4:85:59:78:98:5a:0a:
81:d0:5e:c3:13:ad:77:74:00:91:24:ec:fc:db:f1:
2d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F7:F5:26:E1:B6:84:43:6B:0E:6D:45:10:9B:11:CA:43:AC:8F:18
X509v3 Authority Key Identifier:
keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/cff1JuG2hENrDm1FEJsRykOsjxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.27.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e0:1d:a5:8a:7b:53:8e:41:bb:cc:bc:94:13:27:27:83:43:
fe:ee:28:0d:b9:0e:2c:95:c1:94:3d:cd:20:13:2c:09:c8:9d:
07:47:07:45:1d:06:4a:30:e0:c4:23:c2:57:e0:12:ff:09:da:
6d:e8:ce:46:26:81:12:eb:73:a3:a3:e4:a3:07:21:1c:0c:62:
8e:90:a2:a4:c5:1b:d9:92:a2:76:6e:af:2c:ac:19:ed:35:4a:
b0:7d:22:ea:94:92:d2:b3:56:f0:c1:37:01:4d:e6:7a:f8:02:
e3:d6:b9:1c:ba:1a:47:6d:f3:5b:14:4d:28:54:f2:67:fd:41:
83:69:07:3a:b6:b5:7c:23:73:c4:82:35:99:b5:e2:a0:68:48:
9c:5f:b8:2e:af:a9:f2:80:a7:70:75:90:5b:c4:2b:53:17:fc:
c1:12:48:7b:57:70:b9:55:40:47:c4:0c:e8:2a:60:01:01:2d:
ee:92:ec:bd:a1:12:c4:ad:7d:3f:b3:f4:00:03:31:e2:df:57:
8b:e1:57:2e:fd:7a:06:3b:4a:dd:63:fb:aa:b3:89:82:80:54:
63:14:cd:b6:c3:09:1f:31:1a:bf:b2:52:f4:37:65:2a:92:50:
33:ae:3a:b5:1a:ef:f0:7e:b4:21:6f:18:33:3b:41:65:40:70:
d5:1c:4d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:49 2024 by rpki-client on console-ams.rpki-client.org