Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/CYi01p0T94BPYenef5sCfmgQUGQ.roa
File: CYi01p0T94BPYenef5sCfmgQUGQ.roa (raw, json)
Hash identifier: taC+PwTk5hjuj6gaeptEDqRlJM2OCCvd3AOiyYOa1dM=
Subject key identifier: 09:88:B4:D6:9D:13:F7:80:4F:61:E9:DE:7F:9B:02:7E:68:10:50:64
Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Certificate serial: 01856D9D17E6B8B7AB2E71E94F8A8CECCB51
Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/CYi01p0T94BPYenef5sCfmgQUGQ.roa
Signing time: Sun 01 Jan 2023 13:54:49 +0000
ROA not before: Sun 01 Jan 2023 13:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 185.145.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:17:e6:b8:b7:ab:2e:71:e9:4f:8a:8c:ec:cb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Validity
Not Before: Jan 1 13:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0988b4d69d13f7804f61e9de7f9b027e68105064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:b0:f7:73:b1:b6:6e:fa:26:30:a0:46:1c:
ea:f8:3b:25:79:16:8f:2b:00:d1:a5:17:c8:75:85:
e3:e2:52:dc:37:35:04:8a:71:dd:cc:ab:29:cf:17:
1c:40:fb:bf:b9:39:9e:08:a0:f5:f4:18:2e:c6:1e:
5d:0e:c9:16:de:c9:e0:11:65:5b:23:2f:65:4d:4c:
d1:1e:18:31:91:af:be:57:85:9b:6a:82:47:a1:4c:
93:de:99:45:46:5b:bb:50:b0:ba:82:58:9c:32:7d:
cd:87:08:15:f0:60:9e:cc:46:95:5a:98:de:29:89:
74:d4:03:13:83:c9:bb:8f:58:19:17:c9:97:47:50:
15:c0:26:29:ee:d7:43:a3:db:03:12:aa:c6:f1:d8:
6c:66:f0:68:10:3f:19:4b:93:35:de:7b:ef:96:15:
eb:51:ca:9c:34:f8:0b:c3:62:3d:93:19:d8:6e:fa:
96:db:77:c1:c9:a2:e7:53:ea:c3:cb:69:7e:fd:ca:
9e:6e:f3:c2:84:57:d7:c6:4a:4b:92:29:4c:ec:51:
4f:9c:ca:3a:82:0e:44:a9:d2:3f:29:d7:05:8f:00:
c6:98:65:1b:57:c1:63:ad:12:14:c8:1f:0c:bb:c9:
14:ce:4f:ad:85:0b:e6:2c:41:fe:5f:2d:93:16:d1:
bd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:88:B4:D6:9D:13:F7:80:4F:61:E9:DE:7F:9B:02:7E:68:10:50:64
X509v3 Authority Key Identifier:
keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/CYi01p0T94BPYenef5sCfmgQUGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.247.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b1:d9:24:e9:3d:43:ac:d2:73:4c:9f:5a:a9:26:98:5a:4a:
73:0f:37:b5:20:fa:f7:d3:27:7d:77:d9:02:9f:bc:60:c7:84:
97:89:8d:f3:ba:1a:ef:0e:2a:23:f4:64:a0:00:f9:62:c5:ff:
f4:2f:03:eb:84:c2:f3:d2:a9:31:77:ff:f4:25:7f:28:81:79:
35:d0:08:ea:a1:9c:75:9e:7d:05:b7:d9:e8:e3:2a:5a:58:55:
5d:af:2a:f7:b4:b0:be:23:b8:4e:4f:dc:41:f2:31:80:0c:7f:
f0:8a:f6:09:ea:fb:13:c9:84:93:cf:2a:90:81:ab:54:ac:12:
3d:15:d4:7f:80:ac:44:b1:0c:72:ab:49:ee:50:88:df:13:30:
2e:86:8c:74:c3:7f:63:fd:29:54:26:71:d3:ac:fb:9e:2c:f7:
23:2c:d3:5b:96:83:b0:99:d5:e6:32:cf:04:14:eb:68:57:fa:
d6:5c:d8:09:b1:e1:af:d7:fa:9e:1a:7f:cc:0c:16:77:b8:7f:
58:52:7e:a2:d3:ce:1f:64:5f:07:5d:27:ff:c9:10:e6:b7:b9:
b7:a5:eb:b5:0d:ea:7c:e9:50:45:18:73:7f:cb:c8:a7:50:8c:
39:5f:bc:c9:26:5b:00:9c:dd:cd:09:cd:4e:00:23:03:b3:95:
71:f2:ce:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:19 2024 by rpki-client on console-ams.rpki-client.org