Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/jlMNpyzYYs7Tp9QTjBVJ3WSnT2A.roa
File: jlMNpyzYYs7Tp9QTjBVJ3WSnT2A.roa (raw, json)
Hash identifier: TqU9Da4Dc4U0QpOjcXbOJ1K5zR372rTs8WPE0zQBPnE=
Subject key identifier: 8E:53:0D:A7:2C:D8:62:CE:D3:A7:D4:13:8C:15:49:DD:64:A7:4F:60
Certificate issuer: /CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Certificate serial: 01856C4125A0FC0E29A59249CB99FF33D682
Authority key identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/jlMNpyzYYs7Tp9QTjBVJ3WSnT2A.roa
Signing time: Sun 01 Jan 2023 07:34:46 +0000
ROA not before: Sun 01 Jan 2023 07:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206550
IP address blocks: 185.182.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:25:a0:fc:0e:29:a5:92:49:cb:99:ff:33:d6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Validity
Not Before: Jan 1 07:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e530da72cd862ced3a7d4138c1549dd64a74f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dc:9e:e9:e1:ff:17:70:8c:88:b6:e3:a8:af:
78:be:2f:e1:25:7e:10:d2:94:10:a1:21:9b:68:df:
21:6d:d3:4f:64:7e:40:c4:14:05:5a:ee:a2:ba:8f:
bd:f4:a9:4b:6d:1b:51:00:8b:ac:3a:e7:81:58:3d:
73:7b:ad:14:06:bc:94:d9:bd:a2:dc:a7:7f:1b:a4:
77:42:71:3b:01:bf:2d:e2:52:07:a9:5a:83:4e:c3:
d3:c3:e9:f9:2d:49:27:fc:ce:14:37:10:16:71:81:
0a:8a:34:8b:0d:9b:d1:c3:2d:e8:d3:96:60:09:27:
3a:ab:cb:a0:37:bf:26:c7:7a:50:5a:09:5b:26:34:
0c:17:f7:85:53:3c:fd:fb:0a:c2:35:7a:f1:8f:ad:
81:1b:10:1c:37:8a:34:24:c7:a8:a3:e5:89:c9:1a:
65:ed:22:9a:5b:69:8b:20:0e:cb:e9:a7:97:6c:57:
9f:00:5d:53:f1:8a:ac:6d:42:4f:dd:4d:2d:e3:55:
02:0e:c1:64:ed:ae:df:44:91:98:0a:c3:52:4e:06:
af:0f:5d:52:8f:db:2b:3e:2d:69:80:c9:cc:79:2d:
82:63:d4:cf:49:f1:cb:6f:54:90:27:be:3f:33:9d:
09:11:ce:96:a2:34:89:0a:40:10:77:32:68:2f:36:
88:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:53:0D:A7:2C:D8:62:CE:D3:A7:D4:13:8C:15:49:DD:64:A7:4F:60
X509v3 Authority Key Identifier:
keyid:6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/jlMNpyzYYs7Tp9QTjBVJ3WSnT2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.112.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:d7:04:92:86:34:3a:d2:af:5c:23:8a:93:59:f5:cf:fa:ab:
43:d5:2d:e6:6c:f4:5f:da:7f:0f:69:b5:86:a5:12:0c:99:63:
82:b4:79:ed:2f:e6:7e:15:1c:34:b4:71:47:1c:79:d0:b4:7d:
20:e5:c7:e6:17:95:f7:d3:8c:49:3e:30:fd:73:f9:54:50:e8:
cd:26:0e:a0:b0:f9:fe:f2:5e:02:a2:ae:68:14:70:07:f9:39:
e6:98:2f:de:46:d9:fe:b9:af:5d:67:ff:6b:6e:92:b9:c7:bc:
28:33:06:34:a9:93:79:fc:84:60:fd:26:0e:a7:1b:6b:15:49:
b0:af:09:44:27:a6:e2:b2:a9:c1:30:4f:f1:3d:d6:f7:67:7e:
1e:ad:ae:5d:bb:95:af:2d:5e:95:85:73:61:0f:46:91:2c:60:
7e:72:ea:d5:dd:53:b9:81:3b:eb:cb:d1:bb:d1:01:4e:1c:43:
41:c2:a6:a0:b8:71:0d:c9:08:06:40:62:25:03:2f:15:9f:c6:
a4:cf:54:c0:dc:f8:22:6d:b7:70:f7:b7:04:f8:c6:4a:94:58:
24:ac:b7:86:8e:5c:0f:75:ff:96:05:c8:13:61:87:d7:68:fb:
64:d5:f1:2a:98:7e:66:10:9d:e5:d8:06:3b:46:b9:6c:fb:b4:
76:76:6c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:06 2024 by rpki-client on console-fra.rpki-client.org