Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/iQ67-h4M1U9OUrvSeIpP8-vWtJE.roa
File: iQ67-h4M1U9OUrvSeIpP8-vWtJE.roa (raw, json)
Hash identifier: kfYTS7OWSzbXsJq/+qDWIZYbaKqeksdsNe6Wt/XWqMA=
Subject key identifier: 89:0E:BB:FA:1E:0C:D5:4F:4E:52:BB:D2:78:8A:4F:F3:EB:D6:B4:91
Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Certificate serial: 018570828D8EAB06374D49119611BD7E6FF6
Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/iQ67-h4M1U9OUrvSeIpP8-vWtJE.roa
Signing time: Mon 02 Jan 2023 03:24:42 +0000
ROA not before: Mon 02 Jan 2023 03:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206678
IP address blocks: 185.181.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:8d:8e:ab:06:37:4d:49:11:96:11:bd:7e:6f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Validity
Not Before: Jan 2 03:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=890ebbfa1e0cd54f4e52bbd2788a4ff3ebd6b491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:13:ed:f0:61:fe:5d:c1:5d:2f:0d:f2:6a:81:
20:bd:69:08:80:e7:50:e8:60:75:1a:ff:09:3f:37:
04:f5:88:e7:16:44:8c:d6:c9:69:61:4f:f8:f5:ba:
9e:cf:52:8e:62:7f:f3:8b:af:33:e0:0a:e0:a7:b5:
80:84:b0:82:93:f2:45:57:87:57:44:01:f3:f1:95:
0a:f8:35:e4:64:40:e9:e4:88:01:b0:c1:d3:cd:5d:
bf:1a:4e:2b:f4:b1:76:91:aa:32:d3:8f:d4:9e:47:
9a:d4:71:85:6d:f5:e4:0e:67:53:16:71:c1:f3:aa:
9c:03:c6:31:b1:69:56:f1:45:a1:d4:25:83:8b:26:
f6:91:ef:d3:63:97:10:fc:3e:18:bc:99:39:5a:9d:
fb:40:50:86:9a:04:99:35:45:8b:9d:2a:24:a9:64:
a8:db:85:fa:b2:3e:a9:e8:e0:93:63:17:0f:4f:97:
5e:f3:01:1d:0d:7d:d5:15:6d:2d:28:f0:0f:b7:df:
17:0d:dd:d4:60:5d:4a:ea:8c:f5:1e:e4:ac:a3:6d:
c3:19:2c:c9:ba:38:8f:9d:a4:8e:03:b3:85:12:38:
a5:31:fd:e7:17:77:9d:59:5c:f8:1a:bd:ca:d8:0e:
20:e1:a5:ce:97:d6:7c:3e:87:e6:38:aa:0d:8f:94:
05:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0E:BB:FA:1E:0C:D5:4F:4E:52:BB:D2:78:8A:4F:F3:EB:D6:B4:91
X509v3 Authority Key Identifier:
keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/iQ67-h4M1U9OUrvSeIpP8-vWtJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.231.0/24
Signature Algorithm: sha256WithRSAEncryption
71:91:f3:27:b7:51:b6:a9:cb:23:53:38:5f:b9:79:8b:c9:f7:
6f:e8:5e:4b:9e:49:70:06:ad:c5:b5:aa:f7:77:24:6a:35:d4:
4c:8c:5b:24:b4:b3:0a:f8:c0:ae:9b:0b:cb:f2:e2:49:ab:02:
cb:8c:6a:35:01:02:e0:b4:4b:2d:84:88:81:d0:98:16:41:91:
43:b2:b0:fb:0b:20:3b:fb:62:9f:60:46:16:f1:34:53:0c:84:
5d:2b:2a:f1:f7:a6:74:d2:c9:62:ea:80:5d:18:b4:d0:98:9a:
b5:fb:a8:07:85:01:8e:d4:06:76:05:53:71:54:05:3a:66:6e:
7a:34:34:7d:9d:27:b8:5b:3a:8d:f3:74:26:12:63:b7:82:64:
6d:43:59:69:02:f2:55:e7:3b:fb:43:a6:cb:7a:a6:f3:fb:f6:
1b:6b:26:42:97:17:27:50:e9:55:95:d1:e2:80:4f:29:5d:47:
43:24:67:12:c6:1a:3b:79:80:7e:b1:33:fb:c2:c4:20:6c:b9:
21:58:fa:6d:44:07:47:fc:c5:b0:63:c1:9b:f4:2b:81:93:90:
ca:a2:1f:02:ea:79:a3:6a:66:c9:1c:09:de:10:02:d2:f0:e2:
e7:9a:01:3f:b0:f2:aa:d1:80:b4:c4:42:e9:fa:ff:e4:d5:54:
7d:49:e2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:31 2024 by rpki-client on console-fra.rpki-client.org