Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zl9cA0aTQRjjG6Ktj8eeFyScrIM.roa
File: zl9cA0aTQRjjG6Ktj8eeFyScrIM.roa (raw, json)
Hash identifier: dlhDcXuxgfBw2r5EKRNi5dVBkNhtajq1PfsqLzB3L08=
Subject key identifier: CE:5F:5C:03:46:93:41:18:E3:1B:A2:AD:8F:C7:9E:17:24:9C:AC:83
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01916F1661B00CA3F018D9CEF7733F908CE9
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zl9cA0aTQRjjG6Ktj8eeFyScrIM.roa
Signing time: Tue 20 Aug 2024 09:20:23 +0000
ROA not before: Tue 20 Aug 2024 09:20:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 185.246.113.0/24 maxlen: 24
193.8.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 15:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6f:16:61:b0:0c:a3:f0:18:d9:ce:f7:73:3f:90:8c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 20 09:20:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce5f5c0346934118e31ba2ad8fc79e17249cac83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:15:3c:a4:43:e9:8f:e4:ba:c3:24:96:c3:
24:84:ce:52:d8:e3:91:fb:2e:aa:06:20:48:bb:44:
e9:93:d6:c4:1d:c2:08:cb:dd:00:a1:7f:13:8a:57:
69:f5:c6:2b:f6:29:db:98:b3:c9:19:02:29:a1:76:
83:30:5f:84:74:49:49:6f:74:03:32:e6:50:a1:f7:
97:49:13:7b:a5:6d:84:fc:4f:cd:5e:43:2f:cc:2e:
05:07:e6:ab:b8:df:de:71:b2:d5:a0:ef:09:13:5d:
46:30:2b:80:23:e4:df:b3:20:01:0f:7f:3f:05:db:
cc:ce:cc:ac:9a:3c:58:22:2e:88:64:73:66:4d:a2:
c7:38:50:be:70:83:5a:1a:9b:0e:6c:72:8f:88:d1:
e9:65:8c:d6:74:d8:fd:45:6a:9c:92:f0:e3:b3:d9:
35:c5:b3:32:79:85:57:f6:13:b8:e1:d9:71:f4:d2:
07:cf:f9:c7:20:fb:34:6c:d9:48:1c:99:73:c3:0e:
e4:d4:b5:80:5b:af:a0:30:df:b0:4a:77:2e:6a:d7:
d2:74:4b:91:62:05:09:66:91:c2:9a:66:b4:e4:d7:
45:8d:36:4d:d1:a5:23:5a:7a:d2:d4:b0:f9:16:aa:
cb:ff:f3:97:ee:41:fe:6e:d8:6f:dd:9a:a6:e2:11:
aa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5F:5C:03:46:93:41:18:E3:1B:A2:AD:8F:C7:9E:17:24:9C:AC:83
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zl9cA0aTQRjjG6Ktj8eeFyScrIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.113.0/24
193.8.113.0/24
Signature Algorithm: sha256WithRSAEncryption
33:25:61:93:09:33:57:52:fb:31:6e:a4:a8:18:1c:49:83:8b:
a7:ef:02:77:95:65:d6:fe:66:d3:8c:f8:ba:2b:22:75:48:b0:
c3:67:d3:41:80:fd:5c:75:42:9c:b4:ca:b4:4e:fa:41:c9:68:
ac:06:bd:ce:ff:d2:a7:e8:75:63:81:76:04:ca:48:46:23:15:
28:e8:c5:50:bb:59:6d:43:d9:b6:9c:b4:e2:83:6a:6e:b8:b1:
9c:3f:c4:15:96:23:51:71:e0:03:c2:ff:1a:74:06:65:1e:0d:
ca:1e:37:4b:b3:37:26:24:dd:ce:ba:ee:a4:2e:48:0a:2f:7d:
75:eb:ea:b8:4c:2d:c5:d5:c2:2e:ad:f4:83:64:fd:ee:ad:c9:
50:7a:ce:53:64:46:21:49:1f:b8:79:5d:32:78:2a:02:a4:06:
3b:89:98:c2:5a:e3:1a:4a:98:ea:1a:09:d9:02:04:ba:0f:da:
a0:cb:c3:c1:b5:f0:c4:dd:78:7a:a0:82:26:ad:46:6b:6c:61:
34:ad:40:23:ce:c9:78:e6:89:3e:2b:04:61:3b:10:f8:85:3b:
5b:8d:bc:a7:fe:aa:cc:e6:ac:ed:2c:28:00:75:ee:77:fa:90:
16:0e:91:c6:3f:a0:0c:32:72:41:7e:8b:da:be:1c:9f:20:14:
6a:f3:ea:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 18:41:22 2024 by rpki-client on console-fra.rpki-client.org