Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/btRItrVMlF-aXN79EqbUhAI1908.roa
File: btRItrVMlF-aXN79EqbUhAI1908.roa (raw, json)
Hash identifier: aZhLwyDxH/Yb89NU/NsdPxpOkQbGEQmsAuHEJ37jC5g=
Subject key identifier: 6E:D4:48:B6:B5:4C:94:5F:9A:5C:DE:FD:12:A6:D4:84:02:35:F7:4F
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 018CC79512CEAE5FB46B62F4D88F5947831E
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/btRItrVMlF-aXN79EqbUhAI1908.roa
Signing time: Tue 02 Jan 2024 00:31:24 +0000
ROA not before: Tue 02 Jan 2024 00:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209817
IP address blocks: 185.253.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 09:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:12:ce:ae:5f:b4:6b:62:f4:d8:8f:59:47:83:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Jan 2 00:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ed448b6b54c945f9a5cdefd12a6d4840235f74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5e:fe:c5:ee:c8:c0:d8:96:b6:8c:6b:ae:d5:
9d:1b:32:e6:dd:62:8d:73:2c:cb:e4:35:e1:bf:2b:
ae:0e:4c:11:67:73:1b:94:d5:88:8f:6e:55:a0:17:
ba:70:14:fb:6e:39:21:f7:0f:92:41:30:46:7c:34:
21:c4:35:fa:73:c4:b5:50:2a:38:d0:6d:84:a2:94:
ba:da:42:f2:08:1b:aa:f8:bd:f1:58:c9:7a:11:41:
2d:9d:c2:34:87:ef:f6:9a:f6:49:63:72:55:d3:e2:
73:71:6e:e9:5a:e4:60:62:2c:4c:8f:17:d1:6e:10:
e4:76:10:b2:9c:0e:34:0a:36:71:9e:99:9d:dd:c4:
dd:bb:1a:5f:5f:5c:4b:ce:0f:99:72:3f:1e:cb:f7:
fa:17:0a:78:90:2a:7f:3f:62:5c:49:d6:82:88:69:
bc:fd:d6:5d:d0:eb:69:94:06:a9:99:97:96:b1:93:
56:14:87:fb:c3:86:cf:8d:7f:0a:c1:99:09:a8:1b:
cf:ea:f5:14:e0:52:d3:c6:17:79:62:81:b1:b0:a5:
48:4d:49:85:fd:1c:12:7f:80:c9:5b:8f:3d:20:59:
ef:46:99:ec:3d:bd:8a:67:d6:b9:50:98:9e:3d:7a:
e1:a7:49:c1:f2:32:21:f2:cf:94:dd:68:43:d2:d7:
b0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D4:48:B6:B5:4C:94:5F:9A:5C:DE:FD:12:A6:D4:84:02:35:F7:4F
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/btRItrVMlF-aXN79EqbUhAI1908.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.235.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:04:12:9c:f2:ab:f6:63:1d:21:b0:bd:2f:cf:d3:e5:07:c3:
5e:54:40:fc:29:07:f4:0c:97:1b:d8:71:2f:2d:13:a4:79:c0:
09:81:70:6f:13:f0:5c:11:bb:11:ff:21:b8:94:e0:70:a8:7b:
dc:83:15:27:3f:11:ff:b5:17:35:0c:b3:80:92:51:15:61:cf:
db:ee:00:f7:71:84:c4:78:1d:91:43:0d:e5:f6:21:cb:56:31:
49:57:21:fc:67:6f:79:3f:05:27:70:2d:38:87:f8:ac:37:18:
00:54:e9:96:8d:32:7d:e2:04:ae:4d:c2:6f:61:f4:85:0a:4b:
52:24:7e:2e:43:db:d5:2f:f9:85:5a:a8:c0:cb:f6:b8:0c:43:
43:db:04:0f:1a:d0:a6:c9:78:24:da:cd:44:bc:6b:61:2b:22:
bf:52:df:29:bb:af:e2:51:ae:0b:8c:4e:e2:a1:75:a4:9f:90:
04:d2:2b:90:90:16:7e:9d:07:6d:1a:48:68:7a:d9:6e:c2:7b:
04:ec:06:3d:a5:60:ab:e6:ed:65:1e:d4:32:f0:70:ee:4f:b7:
ed:37:05:49:fa:f1:e4:f8:b6:81:47:b1:29:05:a1:9f:64:d4:
eb:3d:a4:1b:13:28:98:00:14:87:07:d8:f2:45:41:a5:15:71:
41:49:fc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 11:52:10 2024 by rpki-client on console-fra.rpki-client.org