Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/P3WxBeUTIsV9Nm2CYkKd0LAp78g.roa
File: P3WxBeUTIsV9Nm2CYkKd0LAp78g.roa (raw, json)
Hash identifier: KpPNplGNFNOGVQTvwK4JPsMhCzIHQ0JX5+dDOJl1KV8=
Subject key identifier: 3F:75:B1:05:E5:13:22:C5:7D:36:6D:82:62:42:9D:D0:B0:29:EF:C8
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 01926790B0E69293700717EADA8D69194AE9
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/P3WxBeUTIsV9Nm2CYkKd0LAp78g.roa
Signing time: Mon 07 Oct 2024 15:19:48 +0000
ROA not before: Mon 07 Oct 2024 15:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 185.129.208.0/24 maxlen: 24
185.129.209.0/24 maxlen: 24
185.129.210.0/24 maxlen: 24
185.129.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 09:44:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:67:90:b0:e6:92:93:70:07:17:ea:da:8d:69:19:4a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Oct 7 15:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f75b105e51322c57d366d8262429dd0b029efc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:cb:1b:ce:e3:24:eb:cc:67:17:f3:cb:83:
8b:b4:71:b1:f3:b4:fb:c5:be:7a:da:6b:02:b4:45:
fe:18:63:af:73:95:15:4a:52:d4:c3:23:dc:f3:ce:
07:18:32:32:d7:89:f0:83:87:3f:a8:ab:2a:ad:66:
06:9a:ed:d7:14:e2:24:a5:9a:88:ac:8d:b9:29:f8:
68:6a:8c:ca:11:b9:a3:e9:2d:1e:fe:75:44:89:f2:
82:44:46:6a:08:27:ad:a3:25:1d:4e:11:87:14:74:
d8:96:7b:d8:c2:28:9a:ca:a2:b0:8e:b1:78:5a:eb:
2d:ff:46:74:28:a9:e9:a8:74:d9:08:8e:a5:38:e3:
6f:b3:59:28:1a:75:4f:81:10:55:60:e0:54:7c:f2:
bd:f8:0f:31:6c:5c:97:fd:ae:ea:bd:28:ca:52:72:
eb:ea:5e:01:6d:54:23:fc:fb:b9:66:84:ad:5a:fc:
04:57:12:57:67:2f:d0:ef:1e:cc:3e:86:10:f6:f8:
b9:21:de:69:31:bb:0e:35:84:9e:e9:ca:eb:4f:ec:
56:19:db:22:62:ff:80:07:47:60:ae:82:53:ce:d6:
bc:78:15:a5:82:fe:e6:d0:c6:6a:17:69:fd:c3:c4:
02:2e:47:6c:8c:bb:1d:03:65:4f:c7:a3:89:1b:11:
6e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:75:B1:05:E5:13:22:C5:7D:36:6D:82:62:42:9D:D0:B0:29:EF:C8
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/P3WxBeUTIsV9Nm2CYkKd0LAp78g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.208.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:c4:ff:2c:70:f6:9b:a0:24:1c:4b:cf:fc:91:8f:cf:02:4a:
1c:e8:5d:0b:3c:17:5c:a3:aa:c9:c1:39:2c:3b:c0:06:f8:09:
6a:43:79:4d:ab:38:94:ce:fb:f0:62:94:cc:90:f7:31:57:c8:
7f:c9:9c:a6:12:59:8a:54:ec:d1:c1:65:5e:ea:a9:97:48:3a:
c1:18:6f:e7:6c:42:0a:b4:54:f0:e5:17:a8:c5:01:66:d7:4f:
fd:26:d7:e1:42:17:62:3c:c6:f4:3c:fc:0b:ed:9f:fe:3f:48:
1d:5d:e0:f7:42:0d:6f:03:a8:40:02:e2:09:bd:ce:0c:c4:b0:
b7:da:32:11:ad:2a:e3:24:8c:74:05:e8:f4:eb:d6:2b:ce:da:
44:48:59:51:c9:35:5b:ad:76:1f:17:74:62:30:a0:c2:7c:fb:
d3:1e:36:c9:96:8d:25:2f:eb:05:f3:84:d7:60:48:d0:c5:f5:
b8:41:92:fd:d0:76:9b:91:1c:99:a4:09:7a:21:3d:e4:6a:fc:
70:d1:1c:30:8e:61:8e:a6:1d:eb:6a:da:99:2e:97:63:c7:43:
3f:1d:7a:b6:b6:40:ba:9d:45:32:5c:7b:d2:2c:fd:77:8b:3a:
29:81:22:72:ad:5d:e0:d1:46:9c:ae:ba:e5:81:3c:23:36:68:
e3:4f:d7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 12:18:00 2024 by rpki-client on console-ams.rpki-client.org