Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/Tk8AXeYu6VYv_G40F1n1uku_S4g.roa
File: Tk8AXeYu6VYv_G40F1n1uku_S4g.roa (raw, json)
Hash identifier: 8PoW5o0KI/fXJDtobFQm9DVzL+i+EdDBj2MVON1TOa0=
Subject key identifier: 4E:4F:00:5D:E6:2E:E9:56:2F:FC:6E:34:17:59:F5:BA:4B:BF:4B:88
Certificate issuer: /CN=99ea05fe601cb6801af83793e063f79e3940f030
Certificate serial: 0190B84B340D58B68AE18DB33C3BABE3C066
Authority key identifier: 99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/Tk8AXeYu6VYv_G40F1n1uku_S4g.roa
Signing time: Mon 15 Jul 2024 21:27:34 +0000
ROA not before: Mon 15 Jul 2024 21:27:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58010
IP address blocks: 185.98.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jul 2024 06:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b8:4b:34:0d:58:b6:8a:e1:8d:b3:3c:3b:ab:e3:c0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ea05fe601cb6801af83793e063f79e3940f030
Validity
Not Before: Jul 15 21:27:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e4f005de62ee9562ffc6e341759f5ba4bbf4b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:72:23:00:32:6f:63:07:97:90:03:41:db:
73:b2:16:0f:77:cb:06:8b:bf:0e:95:99:18:e8:cc:
df:bb:ce:98:f1:d4:68:4e:13:61:fe:29:73:76:33:
19:ff:92:0f:3b:85:a8:a4:b3:de:b7:cc:a5:68:51:
07:66:63:85:17:6b:91:13:09:da:e4:90:7c:3b:08:
93:93:95:6b:09:00:2f:25:a7:95:38:e9:70:de:ab:
b0:ff:2c:ea:4f:df:20:38:e6:20:89:68:74:70:c2:
f5:92:7d:1f:ca:a8:91:4c:bc:2d:85:7e:18:26:71:
9b:18:39:9b:bf:e2:87:76:8b:65:c4:17:55:c7:19:
7f:f3:d8:55:6c:3d:d5:45:29:ee:98:57:dd:3b:34:
10:f9:15:ec:5e:bf:28:2e:29:bd:03:1d:14:4f:ac:
aa:ee:ab:5d:05:6f:fe:6f:96:a4:a4:79:14:cd:0b:
6b:6f:90:7f:d5:cc:ee:d3:d7:9c:77:cc:90:e0:b8:
eb:95:69:ae:c9:2e:6c:80:ab:75:f0:19:97:41:4b:
d9:d6:53:6e:7c:81:87:50:49:84:61:c9:b0:25:0e:
ea:24:44:4e:16:0a:d6:95:b0:d6:3b:c5:49:13:73:
35:89:4e:2c:a9:af:64:c9:75:46:f1:97:8c:d2:be:
57:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4F:00:5D:E6:2E:E9:56:2F:FC:6E:34:17:59:F5:BA:4B:BF:4B:88
X509v3 Authority Key Identifier:
keyid:99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/Tk8AXeYu6VYv_G40F1n1uku_S4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.186.0/24
Signature Algorithm: sha256WithRSAEncryption
27:2e:70:56:0e:4c:cb:c5:85:af:d1:8d:d1:93:30:4b:06:06:
de:f0:15:a8:7c:47:db:a8:63:35:7e:a1:b2:5f:cf:2b:79:0d:
e6:b3:40:af:ea:39:7b:3e:5c:e2:54:44:9c:a0:96:1a:b2:58:
9a:e7:d9:9a:c2:a7:79:b9:eb:d0:ac:8d:8d:8f:fa:5c:86:89:
13:95:8f:20:5b:57:52:72:db:c3:25:17:5e:2a:3a:b7:a2:06:
37:e7:fe:c1:70:49:78:9b:50:8b:72:0f:a4:57:d1:97:5b:4c:
e7:77:16:4a:ab:77:9d:54:d8:ce:98:32:1d:54:ea:36:52:c5:
6a:12:d6:82:52:71:c1:0b:dc:ac:11:1b:47:4a:28:9e:de:f1:
da:d9:96:30:33:d2:2b:96:5a:c7:fb:89:62:a9:25:20:f7:bd:
44:bc:b6:60:a4:c3:5e:9f:1a:b6:98:99:fe:36:34:47:22:ce:
78:ba:16:7d:2c:f1:f9:b1:68:cc:5a:f4:94:18:c1:ac:c2:8c:
43:0f:3e:df:56:6c:fa:c5:b6:d8:07:02:98:1b:3b:c7:38:16:
a6:b9:b2:5b:14:1e:46:f5:f9:ca:6b:31:29:1a:01:ad:13:4e:
e6:21:05:30:26:36:7b:7a:f1:90:15:0e:61:b0:6b:93:01:a9:
93:9a:d3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:41 2025 by rpki-client