Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/rHttTXpM381WZEkaHow5uz3-DKA.roa
File: rHttTXpM381WZEkaHow5uz3-DKA.roa (raw, json)
Hash identifier: +aRf5G1CqntSMH7fscn22mveSJu3/4hIPaGCFPhD1fg=
Subject key identifier: AC:7B:6D:4D:7A:4C:DF:CD:56:64:49:1A:1E:8C:39:BB:3D:FE:0C:A0
Certificate issuer: /CN=ba99d4db12e4f0b002f60e92cc533e6f882d1508
Certificate serial: 01856FF95069ED1E4739C35B75FFD2E11081
Authority key identifier: BA:99:D4:DB:12:E4:F0:B0:02:F6:0E:92:CC:53:3E:6F:88:2D:15:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upnU2xLk8LAC9g6SzFM-b4gtFQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/rHttTXpM381WZEkaHow5uz3-DKA.roa
Signing time: Mon 02 Jan 2023 00:54:48 +0000
ROA not before: Mon 02 Jan 2023 00:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.69.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:50:69:ed:1e:47:39:c3:5b:75:ff:d2:e1:10:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba99d4db12e4f0b002f60e92cc533e6f882d1508
Validity
Not Before: Jan 2 00:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac7b6d4d7a4cdfcd5664491a1e8c39bb3dfe0ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:9d:2f:90:55:3a:2e:52:f6:44:77:4b:bc:
79:9c:da:e9:01:85:76:c9:f9:61:98:28:e1:ce:5c:
d0:f2:35:6f:6f:61:94:d2:8e:7c:de:cd:4c:56:ba:
09:04:6a:28:91:e3:16:fe:55:aa:7d:71:2a:0e:6e:
22:2c:dd:6d:05:76:06:77:9e:25:e6:fe:ca:0a:8f:
9b:df:60:cb:0a:f6:d3:63:e1:5d:6a:4e:0c:03:bf:
c7:2c:4b:fd:cb:3f:ed:ff:c4:57:d0:db:ee:c8:27:
6b:2d:53:e3:c8:39:5d:0d:22:bd:58:d8:df:53:db:
1c:ff:3e:af:cc:db:20:9d:f2:71:95:e4:21:ce:af:
22:83:6e:91:ae:a6:fa:2e:41:29:8c:2d:22:e8:55:
19:dd:2c:3f:63:ff:be:f4:33:c0:c5:21:89:e9:5b:
82:c4:af:48:42:26:a6:af:69:23:a9:a7:6b:64:8b:
4b:9e:50:f8:bb:a8:70:b7:6c:d4:99:e9:a0:a1:95:
c2:47:f3:e4:fa:fa:ee:e9:d5:63:43:6e:c8:dc:64:
0f:cf:27:35:ee:ad:2f:7f:7a:24:8e:fd:96:64:31:
49:55:b8:40:9e:d9:d7:b6:6d:ae:7e:d7:c4:43:07:
fb:11:b9:04:2c:3c:d4:93:4b:3e:5f:9a:18:0a:1e:
f9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7B:6D:4D:7A:4C:DF:CD:56:64:49:1A:1E:8C:39:BB:3D:FE:0C:A0
X509v3 Authority Key Identifier:
keyid:BA:99:D4:DB:12:E4:F0:B0:02:F6:0E:92:CC:53:3E:6F:88:2D:15:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upnU2xLk8LAC9g6SzFM-b4gtFQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/rHttTXpM381WZEkaHow5uz3-DKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.1.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:70:ee:f0:eb:90:ea:0b:07:3d:b0:c8:03:fd:2d:f9:b1:e4:
13:11:09:a2:a0:1f:87:a7:82:76:e4:7a:5b:97:57:d6:14:20:
69:3e:3c:6e:d5:59:d9:05:f1:95:b9:ba:61:d9:87:3d:3c:0f:
55:e2:7c:ed:10:45:2d:7c:e5:9d:ca:cc:73:f2:b2:3d:10:4a:
0e:28:f7:e8:da:a7:3b:98:67:01:a0:c4:00:75:cf:8e:dd:90:
80:b6:42:db:96:05:61:4a:65:47:9d:14:c1:3f:64:cc:75:db:
bd:be:d3:af:47:08:46:4f:f3:96:3b:9b:9f:3f:44:9d:67:51:
58:9c:f1:ad:82:a7:1d:5d:61:bf:bc:c9:8a:9d:e3:c0:72:4b:
bb:25:34:77:36:8a:d6:2e:c2:05:29:f7:73:40:fd:91:86:53:
65:83:8f:0a:4f:a8:25:2e:30:be:27:b8:fa:2f:9d:8b:3e:9e:
16:6c:f2:bf:de:81:27:fc:ee:25:75:b0:9b:b2:91:4f:68:1c:
ae:86:77:d4:1d:8a:03:da:b5:c6:f7:54:a4:c9:b9:be:87:e7:
00:d0:b6:46:60:1d:5e:20:cf:ea:87:2b:ec:d6:dc:d0:93:cd:
09:fe:e8:40:89:f0:f3:60:f1:b8:63:43:c1:2c:1d:7e:a0:fd:
46:e9:91:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:13 2024 by rpki-client on console-ams.rpki-client.org