Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/8jjxeILM-OqZMTUxhqk29uxJgMQ.roa
File: 8jjxeILM-OqZMTUxhqk29uxJgMQ.roa (raw, json)
Hash identifier: wdD9RHfLNa/vSpjRRWXGPreCcNwUXezGFHri49WtxMg=
Subject key identifier: F2:38:F1:78:82:CC:F8:EA:99:31:35:31:86:A9:36:F6:EC:49:80:C4
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01916511102D53BA673DF07013D979B5A167
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/8jjxeILM-OqZMTUxhqk29uxJgMQ.roa
Signing time: Sun 18 Aug 2024 10:38:22 +0000
ROA not before: Sun 18 Aug 2024 10:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 185.210.168.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 19 Sep 2024 10:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:65:11:10:2d:53:ba:67:3d:f0:70:13:d9:79:b5:a1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Aug 18 10:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f238f17882ccf8ea9931353186a936f6ec4980c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:e9:99:db:d6:dd:a3:6a:a7:3c:80:48:34:
aa:7e:33:e6:e4:a8:a9:3d:2e:1d:b9:ea:a6:63:5b:
64:7c:a3:ca:93:fd:69:4a:6c:71:30:3e:50:91:9f:
ad:e5:50:3f:3e:94:c0:aa:95:5f:ad:66:db:f6:88:
99:7a:76:d0:e6:9f:ce:18:88:60:44:ef:23:70:6f:
f5:7e:de:3e:07:e6:b0:ab:82:61:59:d2:1d:28:6c:
a3:0d:fe:9c:93:00:5b:36:09:d0:35:4a:11:a3:d9:
25:ab:97:11:98:09:70:2e:8f:cf:12:a3:d4:b5:45:
cf:59:88:81:65:a2:bc:77:83:63:cd:26:02:be:79:
c9:60:49:71:15:8a:6f:fc:6a:d2:f8:67:c2:a0:bb:
33:3d:ab:f9:f2:a5:b1:02:59:92:0b:df:a0:66:c5:
86:41:59:c5:13:7a:9c:76:03:56:31:bf:9c:4a:39:
ea:6b:b2:96:79:5d:0b:fe:a9:69:18:36:f8:05:1e:
33:40:a9:0a:38:26:79:3c:c5:97:26:21:68:27:70:
9b:e4:a5:6a:a3:f5:a3:4f:ad:74:26:05:fe:62:4c:
59:2d:77:12:3e:0b:4f:4b:cd:a7:71:d8:b3:93:cd:
12:8b:fb:04:3b:08:a1:1b:3e:db:d3:33:48:f3:24:
51:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:38:F1:78:82:CC:F8:EA:99:31:35:31:86:A9:36:F6:EC:49:80:C4
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/8jjxeILM-OqZMTUxhqk29uxJgMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.168.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:20:cb:eb:e3:94:47:38:88:da:2e:5f:69:16:ee:f4:ff:3b:
30:09:7a:b6:3b:0e:af:96:4a:ca:86:1c:16:11:d2:fd:68:cc:
a6:eb:8a:1e:ca:90:a6:1d:12:ea:25:80:1c:02:1c:f6:d5:74:
ad:99:a8:b6:f3:ed:51:41:37:f1:2a:3c:ef:35:03:67:2f:d9:
ff:00:d6:40:fa:77:e7:b2:dd:b8:fd:7e:06:f5:15:e5:a8:13:
d2:2a:90:15:34:08:fe:b6:7f:50:36:80:ff:4c:1c:8d:f0:5f:
3c:b1:38:04:4b:4e:c4:ec:b3:04:bb:18:db:41:82:3b:8c:f4:
87:bf:bc:57:9d:d5:0e:31:53:50:c5:d1:e0:44:71:dd:5c:fe:
e8:46:cb:e6:fe:97:0a:ba:9a:4d:a7:ce:3f:11:65:8a:f4:ae:
da:4e:a6:df:21:ae:d2:63:fe:65:96:38:1f:a5:c5:a3:0c:46:
e9:63:8a:4d:80:94:9b:e3:9c:5c:16:2e:7a:13:0e:f2:e7:e0:
0f:d8:04:ac:2b:dc:ad:14:f7:35:d4:58:9e:15:7e:26:d8:09:
3e:e4:08:c8:7b:38:b0:50:c8:60:6e:9c:d8:8e:09:67:b3:e9:
e4:33:f2:f3:e8:ef:af:c1:fd:17:5e:d9:7f:b5:f1:9c:8c:c4:
0a:17:d5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:07 2024 by rpki-client on console-fra.rpki-client.org