Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/IvKZLz1HenfXRH9U5UTLdHKbIzs.roa
File: IvKZLz1HenfXRH9U5UTLdHKbIzs.roa (raw, json)
Hash identifier: 1xQje94zcNuLNKT+aqM/DG71mFyrh4lQrhh2fm3J8D0=
Subject key identifier: 22:F2:99:2F:3D:47:7A:77:D7:44:7F:54:E5:44:CB:74:72:9B:23:3B
Certificate issuer: /CN=943e827f66d5b3955fe6d73ba0f15fbaac8b5150
Certificate serial: 01856E6FBC149F8AC940D01D4BCC7380C0D3
Authority key identifier: 94:3E:82:7F:66:D5:B3:95:5F:E6:D7:3B:A0:F1:5F:BA:AC:8B:51:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/IvKZLz1HenfXRH9U5UTLdHKbIzs.roa
Signing time: Sun 01 Jan 2023 17:44:54 +0000
ROA not before: Sun 01 Jan 2023 17:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21212
IP address blocks: 185.153.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:bc:14:9f:8a:c9:40:d0:1d:4b:cc:73:80:c0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e827f66d5b3955fe6d73ba0f15fbaac8b5150
Validity
Not Before: Jan 1 17:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22f2992f3d477a77d7447f54e544cb74729b233b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:dc:cf:e3:53:26:13:c7:22:97:69:a7:5a:
2b:ba:0e:7d:60:8c:33:1f:04:6d:31:8a:44:53:76:
10:99:5b:37:44:98:c7:92:ec:82:28:1b:ac:d5:f8:
30:1d:79:81:32:3e:5c:ce:4d:ef:38:71:03:35:d7:
a3:6e:61:43:60:ee:dc:d4:63:8d:db:b0:13:96:86:
50:c5:9b:87:fd:64:09:67:66:8c:ce:dc:d6:30:d7:
22:fd:4c:c1:d8:c4:af:8a:14:3b:a4:b1:14:f3:40:
38:86:90:11:eb:af:e1:33:70:c5:11:3f:fc:79:be:
7f:d5:b9:2a:48:de:a9:7f:60:32:c7:e9:12:d6:66:
84:df:7f:46:33:7e:f2:78:7d:92:b3:ed:c0:d6:a3:
cd:d1:a1:8f:5f:c0:4f:0e:a5:aa:b6:3c:2c:65:05:
4b:0b:6a:29:86:77:9f:13:11:a6:94:08:90:3a:fa:
19:8c:e8:f6:99:b6:a1:64:f9:ef:e0:eb:9c:d5:7e:
8a:62:47:4c:23:76:18:b6:9e:30:84:99:4b:e3:e6:
f6:a1:24:e7:3b:cc:dd:a9:e7:8a:09:f7:2a:c6:3c:
d9:5c:8d:79:5c:7d:d2:cb:7e:f2:87:6a:dc:83:97:
a5:d2:a4:43:6f:0a:0a:55:91:47:c9:1b:53:72:ef:
02:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F2:99:2F:3D:47:7A:77:D7:44:7F:54:E5:44:CB:74:72:9B:23:3B
X509v3 Authority Key Identifier:
keyid:94:3E:82:7F:66:D5:B3:95:5F:E6:D7:3B:A0:F1:5F:BA:AC:8B:51:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/IvKZLz1HenfXRH9U5UTLdHKbIzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.137.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:8d:80:68:91:6d:98:7e:c4:2a:18:99:2a:0d:ac:8d:f4:75:
14:30:c2:2d:8c:63:61:16:19:2b:0a:25:ae:00:3b:22:af:d9:
32:dc:d9:03:ca:a0:65:03:d4:8b:e9:5f:c6:99:1a:a4:98:da:
3e:bc:9a:38:73:94:cc:08:1a:e2:c1:a6:03:b2:3a:d6:e7:11:
15:fb:14:b4:39:ca:66:88:09:2f:a3:bb:c9:2f:ad:59:e7:99:
24:53:29:53:03:93:fa:bd:22:44:1c:19:b0:26:01:d5:71:86:
52:9d:15:3a:59:bb:39:2d:6d:b9:b7:1b:da:51:15:58:08:12:
c1:db:70:3e:0b:56:a1:fa:d2:6c:ab:a5:d4:43:00:27:0a:9a:
66:51:b9:2c:18:65:01:90:d5:5a:f5:89:09:c7:be:20:ac:45:
63:c9:25:15:8f:2e:18:7b:b8:70:0f:d6:17:6c:be:0d:2b:b6:
ac:cc:07:3a:78:c8:05:a2:9f:4c:13:6a:35:ad:cc:94:d2:15:
8a:15:6f:60:12:15:07:7f:52:68:4d:61:9d:d7:d7:96:58:43:
7e:b4:18:6b:de:7f:36:b4:04:8f:ae:d9:8a:ea:f6:3d:7e:50:
c2:7a:a6:4c:c5:6d:f8:40:d9:6a:a3:4b:2c:0d:be:66:ff:f8:
4b:70:cc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:46 2024 by rpki-client on console-ams.rpki-client.org