Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/XQdN3zcMW6OJvrhBQjPjZ5ajt-w.roa
File: XQdN3zcMW6OJvrhBQjPjZ5ajt-w.roa (raw, json)
Hash identifier: a5bBO2cZmTIjHam5RTBIBVHIHCVjpdTN78E5k4TDRws=
Subject key identifier: 5D:07:4D:DF:37:0C:5B:A3:89:BE:B8:41:42:33:E3:67:96:A3:B7:EC
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 01856F5497D7763DF6F03B292F7F07D21BE3
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/XQdN3zcMW6OJvrhBQjPjZ5ajt-w.roa
Signing time: Sun 01 Jan 2023 21:54:52 +0000
ROA not before: Sun 01 Jan 2023 21:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62140
IP address blocks: 185.24.139.0/24 maxlen: 24
185.24.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:97:d7:76:3d:f6:f0:3b:29:2f:7f:07:d2:1b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Jan 1 21:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d074ddf370c5ba389beb8414233e36796a3b7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e7:0b:3f:f0:f4:80:90:7a:bb:ef:64:59:0f:
7c:fd:6b:0d:97:a9:b5:ad:aa:53:5b:83:68:9a:8c:
aa:33:00:b0:dc:26:54:74:93:3d:5c:19:1c:2e:c0:
70:7c:64:7a:4a:cf:fd:26:75:78:19:99:67:1b:a8:
04:74:fd:6e:20:b7:58:3f:06:0d:8e:f1:2d:91:8a:
6d:7d:ed:ab:76:3c:06:d7:93:15:f3:26:57:f6:94:
1e:21:59:be:3c:55:d1:17:6c:7d:c5:62:ab:06:23:
b0:5d:cd:c6:00:bc:8b:5e:96:d1:0f:af:c4:cd:79:
a0:02:cd:ab:2f:2f:cf:93:c5:8e:9d:e7:fa:e0:39:
77:ad:df:7b:22:c0:5e:f6:b6:a6:3c:7b:34:6b:c7:
d3:32:5c:79:ee:94:a7:3c:3d:d1:e4:a9:3e:5b:1e:
a4:ca:ca:a6:c1:68:3c:b5:77:90:20:c6:1d:8d:c3:
75:3f:78:76:08:4c:23:ee:11:a1:18:45:1f:31:a9:
2f:ae:12:d2:75:dc:62:7c:f6:ca:4d:1b:ba:38:c2:
00:68:5f:1e:3e:56:3c:45:34:08:4e:f7:3e:10:8b:
db:65:65:c2:da:03:d5:4b:52:53:f8:58:3d:9a:f8:
d7:6e:23:d9:d2:4a:88:db:13:08:3c:ff:23:71:81:
44:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:07:4D:DF:37:0C:5B:A3:89:BE:B8:41:42:33:E3:67:96:A3:B7:EC
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/XQdN3zcMW6OJvrhBQjPjZ5ajt-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.138.0/23
Signature Algorithm: sha256WithRSAEncryption
22:ee:15:9b:07:62:bc:6a:db:d1:19:c9:44:1d:c5:f0:b2:76:
34:8b:29:d9:bc:a2:d7:56:e6:7b:f3:c3:b5:76:de:f1:b0:c6:
26:78:8e:02:12:4b:1e:ae:b9:5c:df:e0:01:6a:4b:34:d1:66:
44:bd:43:15:38:90:0a:03:01:f8:1f:cd:1e:15:1a:a8:89:88:
af:b5:2d:3f:39:51:51:9c:91:5d:3d:76:96:c1:fa:96:fa:8b:
7c:26:10:39:41:44:27:4d:b1:d8:08:ca:7e:3e:9a:d0:a5:f9:
92:87:7e:87:82:c7:4c:a4:1e:2d:59:9b:3b:fc:da:c9:4c:47:
96:24:ba:d5:35:5a:30:c2:a9:1d:37:60:fd:fd:d0:65:de:ee:
4b:62:b4:9e:af:86:d2:79:8c:cd:36:15:a2:89:2f:94:67:9a:
77:e8:2c:5e:0c:41:cc:ab:68:40:c3:23:cf:75:1c:31:40:e1:
c8:67:73:0f:0f:54:1e:88:ff:44:4b:62:e2:03:9e:21:1f:27:
6a:76:f9:33:88:c0:29:25:c6:a4:59:1f:e5:03:b0:cb:2a:bb:
63:c4:fd:92:52:57:21:a9:27:10:00:75:0c:b9:6d:02:54:79:
2d:25:ed:ea:c5:8a:e8:45:80:d1:15:f0:85:df:cf:e3:6f:ce:
05:62:14:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:27 2024 by rpki-client on console-ams.rpki-client.org