Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/K8LF-VTdejoewbpcleRfRe83Y9o.roa
File: K8LF-VTdejoewbpcleRfRe83Y9o.roa (raw, json)
Hash identifier: pxoRDiIQFLRByYCBzcXKBRoqI42KSqE62clFO9cOaIw=
Subject key identifier: 2B:C2:C5:F9:54:DD:7A:3A:1E:C1:BA:5C:95:E4:5F:45:EF:37:63:DA
Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial: 0187A39015B424A7B63F7C27E535A6D6B4C7
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/K8LF-VTdejoewbpcleRfRe83Y9o.roa
Signing time: Fri 21 Apr 2023 11:25:41 +0000
ROA not before: Fri 21 Apr 2023 11:25:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.155.232.0/24 maxlen: 24
185.155.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 May 2023 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a3:90:15:b4:24:a7:b6:3f:7c:27:e5:35:a6:d6:b4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Validity
Not Before: Apr 21 11:25:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bc2c5f954dd7a3a1ec1ba5c95e45f45ef3763da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2a:01:02:03:8b:4d:77:a9:5b:ad:d7:3d:de:
1a:f7:83:ad:97:77:08:7d:04:f6:20:56:ed:04:7d:
86:33:68:06:df:8c:f9:66:3a:be:2f:35:5c:e3:a5:
0a:dc:21:3a:ad:f1:6a:e7:51:3a:1e:48:bb:fe:dd:
81:61:dc:c8:1c:c9:0e:d3:37:cd:48:49:31:0b:5e:
f2:49:a5:bb:7a:8d:21:5b:77:a8:14:52:f0:04:a4:
57:d7:ad:fd:f7:fd:a1:4f:8b:0b:0b:3d:d3:e8:cd:
2d:89:eb:10:e9:60:75:81:08:cb:dd:57:32:e3:0a:
f4:08:b4:71:95:0b:08:39:07:70:5d:e0:e2:e6:ac:
4b:ea:4e:96:3f:92:a0:a5:db:a2:c7:89:16:30:b0:
52:e2:a3:a4:91:06:2d:d2:1f:08:ce:bd:e5:13:af:
64:d8:ff:fc:56:28:8d:58:32:a1:9a:d1:4a:d9:7c:
10:04:9e:76:fe:b7:22:76:71:75:02:ca:b7:f9:68:
33:10:c8:22:f2:76:95:19:87:19:0e:69:6e:ba:14:
fa:09:f3:4a:f3:62:18:f8:ed:bf:dc:7e:e9:89:2a:
c0:74:1c:e7:63:b7:09:2b:78:fa:08:62:5a:30:06:
c7:5d:38:e9:23:c8:49:58:0f:e5:f2:aa:f4:6e:79:
85:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C2:C5:F9:54:DD:7A:3A:1E:C1:BA:5C:95:E4:5F:45:EF:37:63:DA
X509v3 Authority Key Identifier:
keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/K8LF-VTdejoewbpcleRfRe83Y9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.232.0/24
185.155.235.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:87:3b:0d:74:06:ac:f7:31:d9:c5:9e:89:05:4e:28:c3:2a:
55:d7:55:a0:74:98:57:16:32:fa:81:16:9f:8a:42:ff:5f:6a:
8d:f9:f6:1a:65:d4:42:92:3a:59:9a:39:b5:2e:48:dd:b9:f7:
b8:bd:b8:3f:74:3a:a1:c8:33:46:3e:5e:a1:23:ce:79:01:c2:
fd:e5:48:a4:d8:8e:f1:85:b4:f5:b1:0b:85:cf:77:f0:b5:52:
68:59:e3:71:2b:69:09:ae:3b:b2:80:ac:50:b5:95:12:36:1a:
55:d9:ec:42:81:4b:17:fe:b8:45:e6:60:32:14:43:18:df:7b:
72:df:b5:ae:11:b8:43:fb:ac:6c:ab:9e:39:e2:28:d1:fe:8e:
64:4a:bb:73:41:50:bd:cc:77:6b:e8:7f:1b:e2:65:59:79:6b:
8f:57:46:47:d8:a9:6d:06:a9:35:04:a2:e1:47:ac:4c:dc:77:
33:ac:87:cc:80:d7:58:a0:dc:e1:a9:62:1f:9b:15:ba:22:0f:
2d:84:64:f8:4b:22:2d:a6:3c:70:ae:3c:63:ed:3f:a7:a8:de:
18:14:96:fb:8c:f7:c6:c6:4c:bc:23:3d:6d:e4:3d:bf:38:d6:
88:31:6a:13:90:35:a9:18:3b:73:09:72:b9:e4:ea:4a:0c:74:
8f:e4:55:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:02 2024 by rpki-client on console-ams.rpki-client.org