Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1f4SYizQ0lAG8DTHlLdLiEENhF8.roa
File: 1f4SYizQ0lAG8DTHlLdLiEENhF8.roa (raw, json)
Hash identifier: 5IVFA65FlQPEdIVk1P/ecbk7jWa8P2s/tJkj2ISAE7Q=
Subject key identifier: D5:FE:12:62:2C:D0:D2:50:06:F0:34:C7:94:B7:4B:88:41:0D:84:5F
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C53F7304484E083FD44A32A9020D6BB
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1f4SYizQ0lAG8DTHlLdLiEENhF8.roa
Signing time: Sun 01 Jan 2023 07:55:20 +0000
ROA not before: Sun 01 Jan 2023 07:55:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48115
IP address blocks: 185.133.72.0/24 maxlen: 24
185.166.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:f7:30:44:84:e0:83:fd:44:a3:2a:90:20:d6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5fe12622cd0d25006f034c794b74b88410d845f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:16:d9:ed:1b:d2:82:b6:97:71:fa:a0:de:
7a:95:64:d8:ff:09:74:16:b0:82:bc:1e:bf:04:22:
62:3c:83:04:68:3b:6c:20:b5:f7:db:8e:7c:7f:8e:
00:44:92:cd:1e:71:cf:f1:7c:16:d1:96:79:22:0f:
5e:14:73:bb:d8:9c:22:fb:89:f5:4b:c9:a7:b0:44:
e7:b6:7a:20:86:bb:2d:19:3f:33:80:b2:57:94:36:
61:0d:49:ce:56:9e:71:8b:f7:0e:8b:71:9a:1e:ce:
84:bd:fd:52:ba:94:48:5c:5b:33:a5:24:05:b1:9d:
de:87:c0:17:80:33:9b:4d:8e:52:67:c9:a5:6a:18:
81:20:03:ef:82:20:36:d8:6e:fd:28:7c:2f:1a:51:
12:e4:08:4d:5b:d1:37:1b:59:e0:60:dd:d4:11:db:
4f:3f:6f:e2:cc:d3:e3:96:2a:af:03:f7:cd:1b:96:
30:07:bf:a7:22:7b:79:fc:d9:46:0e:f8:45:fd:dd:
19:54:3c:5c:9b:63:b6:0c:0b:13:4f:d9:57:87:43:
a7:58:d7:29:66:43:95:b9:de:62:a2:0d:53:cb:12:
bc:a9:6f:c4:71:81:32:fa:ac:f4:76:de:65:47:5c:
d2:95:15:02:a9:ae:15:0d:da:1d:2d:13:a7:43:17:
d3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FE:12:62:2C:D0:D2:50:06:F0:34:C7:94:B7:4B:88:41:0D:84:5F
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1f4SYizQ0lAG8DTHlLdLiEENhF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.72.0/24
185.166.238.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:97:9c:bd:95:5b:a6:a7:f0:55:62:35:a9:cc:5f:2c:1a:70:
d2:28:fd:97:e5:1e:f9:5d:e1:7a:bb:3b:1f:f8:3b:d7:f3:09:
9d:1b:d6:19:46:52:95:34:03:ad:0b:87:76:44:88:e0:e0:e9:
0b:b0:99:49:22:c3:60:79:e3:57:a3:c8:57:60:5f:c3:a5:66:
a7:99:49:49:f1:5d:b3:0f:ba:42:3c:42:8e:8b:ce:2d:3d:7c:
e7:ed:f8:78:4e:96:4a:90:99:30:98:e9:a4:89:2d:8f:34:59:
47:d0:81:2b:da:01:53:79:74:5e:11:4a:24:ff:88:9c:18:6c:
03:28:c2:7d:47:1f:36:5a:67:5e:ed:7c:fb:bf:7a:3a:5e:4d:
5a:89:fc:10:35:17:1f:5d:21:93:c4:37:24:58:25:50:3e:51:
db:52:23:50:33:69:91:f4:08:b3:91:02:23:6f:7e:d7:a7:0e:
ca:b8:2f:99:21:f2:4b:fd:e9:7d:a5:37:45:1e:62:98:6e:5a:
4e:04:0d:e9:85:fd:d9:6f:ff:0e:08:67:47:ae:92:6a:d0:e9:
e3:e4:c0:21:6a:c5:5d:69:32:45:4f:6b:d1:b4:8d:b7:1d:de:
64:fc:19:5e:dc:4f:87:b9:a3:90:1c:80:d4:67:ea:ac:c8:20:
56:84:bb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:32 2024 by rpki-client on console-ams.rpki-client.org