Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/a8CsVEdBjXh1SrOWW79XNuPKOwQ.roa
File: a8CsVEdBjXh1SrOWW79XNuPKOwQ.roa (raw, json)
Hash identifier: yvkIY2CiOPwgNAWa2SJTabCx0wsUWSMT+zeG+Hx/R0g=
Subject key identifier: 6B:C0:AC:54:47:41:8D:78:75:4A:B3:96:5B:BF:57:36:E3:CA:3B:04
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 01856EC23508486D335E5677ADAE08AFD3AF
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/a8CsVEdBjXh1SrOWW79XNuPKOwQ.roa
Signing time: Sun 01 Jan 2023 19:14:59 +0000
ROA not before: Sun 01 Jan 2023 19:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50941
IP address blocks: 185.172.51.0/24 maxlen: 24
185.172.50.0/24 maxlen: 24
185.88.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:35:08:48:6d:33:5e:56:77:ad:ae:08:af:d3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jan 1 19:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bc0ac5447418d78754ab3965bbf5736e3ca3b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e8:a7:eb:49:a0:0c:f8:32:d0:f3:94:37:73:
68:70:ed:9c:fb:4a:92:95:8f:4a:c0:a8:b3:45:65:
52:34:c6:42:b3:25:bd:8a:97:5b:ac:41:eb:f2:42:
ba:b4:3c:70:6c:f5:10:e9:d0:bf:ff:6e:c7:80:7d:
55:74:bd:41:a0:d0:fe:b3:7b:fb:79:f3:9a:e4:4d:
34:6d:78:bd:29:84:02:ea:e5:7d:bb:ef:a4:de:dc:
ef:c9:2e:8f:18:b2:02:a5:69:b1:6a:70:88:bd:d2:
e7:ce:fe:bb:14:f6:3c:0d:d0:6d:94:64:fa:e9:2e:
89:be:7f:0a:76:d2:64:4c:32:a6:31:a8:34:ba:b0:
85:82:0a:de:46:e7:18:bd:3d:37:94:bf:45:0f:33:
b5:b2:5f:d4:49:65:43:36:e3:db:16:7c:4c:e0:d4:
c0:ca:f7:b7:f5:ad:55:30:12:2b:cd:60:e8:48:54:
8f:19:6e:53:01:ee:a6:ec:b3:3b:12:84:6c:4f:5e:
a1:70:e8:60:48:36:82:92:8e:dd:68:7a:56:16:ce:
a9:7e:35:0c:c2:d1:75:93:46:a4:cb:60:44:a9:c4:
ae:48:39:e4:19:a0:94:d8:02:ab:cf:f0:bf:51:24:
24:a8:a3:80:d6:9e:2e:07:ce:11:ec:ae:ff:ea:61:
a2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C0:AC:54:47:41:8D:78:75:4A:B3:96:5B:BF:57:36:E3:CA:3B:04
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/a8CsVEdBjXh1SrOWW79XNuPKOwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.135.0/24
185.172.50.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:a9:3c:10:c1:94:c7:fc:96:0c:44:1d:90:36:ad:b4:a7:f4:
03:2f:a8:17:d9:44:2f:67:b0:13:0d:70:e1:90:5c:25:05:7f:
04:16:49:48:b1:14:23:06:73:58:b0:9c:75:59:cf:ad:93:96:
cb:67:34:2e:15:ed:4e:14:97:0b:42:0d:73:ea:b1:7a:ea:20:
18:0a:7b:31:82:3a:53:fa:28:8d:de:59:67:4f:1e:c5:3e:74:
42:46:ea:3d:66:4e:a5:59:d6:6d:15:c9:2d:5f:2d:df:ee:8d:
bf:67:af:51:88:69:84:43:32:74:79:45:7c:7e:b6:89:c3:ec:
e4:20:da:db:d2:98:10:b5:71:76:17:65:8b:c7:f2:9e:71:66:
e2:50:16:95:4c:bf:b4:d7:3a:b6:af:44:19:5b:91:8b:95:e2:
b6:36:af:2e:50:1e:53:f1:b4:a5:6b:09:fd:43:50:1f:a4:70:
ec:b4:f6:14:fd:e2:2b:65:6c:a4:d7:57:d6:6c:e3:89:cb:29:
1d:aa:0a:26:4a:ce:64:ce:7a:da:31:9a:ca:b6:b0:96:6e:5f:
39:4c:cc:b4:58:a4:8f:ef:7d:77:5d:5c:ea:c1:74:6e:9f:81:
6a:86:07:ac:1e:cb:bd:cd:49:36:b7:a9:d7:ac:16:02:cb:33:
a2:ae:67:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:08 2024 by rpki-client on console-ams.rpki-client.org