Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/Ie4KjKv6mjZuPf3fPugOTpgb2EY.roa
File: Ie4KjKv6mjZuPf3fPugOTpgb2EY.roa (raw, json)
Hash identifier: bkN/fuLwgsKDJzpcWarRUJcvGQ9kuv32RBrydqmX8Y4=
Subject key identifier: 21:EE:0A:8C:AB:FA:9A:36:6E:3D:FD:DF:3E:E8:0E:4E:98:1B:D8:46
Certificate issuer: /CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Certificate serial: 01857203516CF3A7FAE94EC8B1DF0AB45FAB
Authority key identifier: 9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/Ie4KjKv6mjZuPf3fPugOTpgb2EY.roa
Signing time: Mon 02 Jan 2023 10:24:58 +0000
ROA not before: Mon 02 Jan 2023 10:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205732
IP address blocks: 185.208.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:51:6c:f3:a7:fa:e9:4e:c8:b1:df:0a:b4:5f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Validity
Not Before: Jan 2 10:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21ee0a8cabfa9a366e3dfddf3ee80e4e981bd846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:75:4e:b9:c4:a0:22:8e:87:34:ac:6c:bb:b2:
33:99:3c:68:9c:05:c7:6e:1f:b2:53:32:f7:ca:4d:
03:fa:16:99:29:b1:68:7a:0c:0d:3a:6b:bf:82:bd:
d5:ba:1e:95:f7:12:56:70:c5:2b:11:93:2d:08:fe:
e2:ef:af:69:2e:f8:aa:78:ce:89:26:72:fc:12:c8:
2e:44:dc:5d:9d:37:3e:b8:a5:31:f5:be:18:fe:66:
f5:ef:3d:bf:cb:10:be:09:c6:37:fc:70:90:b0:11:
b2:ce:b0:c9:e8:f9:1f:63:52:28:fb:6f:a0:84:3e:
8f:f7:d6:28:4b:5d:80:c7:2c:9f:2d:53:1a:d2:48:
a1:6c:db:4d:a6:11:87:c6:4d:d0:62:ff:61:37:37:
29:47:e1:a3:89:b5:39:5e:8c:ec:9f:48:70:80:7a:
54:d5:0a:14:cb:c7:6c:cc:f6:0e:6e:70:44:23:7b:
fb:45:98:c8:8f:8a:c2:1e:76:49:14:55:80:25:ba:
83:b1:d4:55:63:b3:56:1a:60:62:ed:29:d4:2e:68:
e4:3f:ec:ba:44:ac:dc:1a:77:fc:fd:3d:58:89:af:
9f:84:e5:a8:56:8e:b2:e8:b7:27:06:e5:92:1c:ce:
d2:e4:ea:8d:3f:cf:1b:ca:19:99:23:85:0a:34:34:
16:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EE:0A:8C:AB:FA:9A:36:6E:3D:FD:DF:3E:E8:0E:4E:98:1B:D8:46
X509v3 Authority Key Identifier:
keyid:9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/Ie4KjKv6mjZuPf3fPugOTpgb2EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.105.0/24
Signature Algorithm: sha256WithRSAEncryption
81:20:d0:e8:83:ad:8d:cb:c3:8c:c6:b7:ec:b1:12:3a:2d:b5:
71:4d:ac:f8:62:e9:1d:d7:bf:33:0e:c3:94:68:5d:c4:fb:13:
aa:4a:27:52:42:10:aa:86:be:88:52:ea:38:d9:fc:1f:cf:69:
3c:3e:b9:82:4e:45:39:7e:c8:cb:88:0a:04:7f:de:29:d2:27:
1e:2f:d1:f0:13:04:42:c3:db:4b:cc:2f:8f:40:ad:29:d7:d0:
06:f4:6a:28:41:a4:2f:e1:c5:39:09:5e:ac:a4:66:1a:73:19:
fa:02:75:3b:99:c9:04:62:6c:9c:91:4e:b1:68:ce:cf:49:b9:
1c:52:79:f2:28:03:51:3b:da:20:18:fa:7c:50:5e:ad:33:c0:
99:fe:fd:28:1a:b4:79:35:a5:fd:38:51:4e:c2:c5:63:8e:ab:
27:b4:f4:23:e8:e7:e3:4d:3b:fc:ea:97:2b:72:31:45:bf:d4:
6b:8a:3c:af:31:fc:a8:82:82:77:4f:b8:d7:de:7d:16:d8:7d:
2a:b0:3d:eb:2c:c3:29:ed:60:83:86:fb:17:a7:c9:24:e2:4b:
26:34:0b:8e:49:d9:20:5a:3d:f1:66:81:02:de:8c:dc:99:3c:
32:e1:93:56:94:9d:2c:fb:81:85:86:1c:81:da:df:fa:31:31:
70:90:fb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:17 2024 by rpki-client on console-ams.rpki-client.org