Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/JhgD8IS_-2JeIFD5FQ-3mdmhSIo.roa
File: JhgD8IS_-2JeIFD5FQ-3mdmhSIo.roa (raw, json)
Hash identifier: rJeUaFOHpFfq/Z6v2eUVICZ2bc/mlwGAh3NR5DAO+H4=
Subject key identifier: 26:18:03:F0:84:BF:FB:62:5E:20:50:F9:15:0F:B7:99:D9:A1:48:8A
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 0185724C5529EEAAC357C8387CE98E134E2F
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/JhgD8IS_-2JeIFD5FQ-3mdmhSIo.roa
Signing time: Mon 02 Jan 2023 11:44:43 +0000
ROA not before: Mon 02 Jan 2023 11:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44979
IP address blocks: 185.111.4.0/24 maxlen: 24
185.111.6.0/24 maxlen: 24
185.111.7.0/24 maxlen: 24
185.111.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:55:29:ee:aa:c3:57:c8:38:7c:e9:8e:13:4e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Jan 2 11:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=261803f084bffb625e2050f9150fb799d9a1488a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:24:73:15:ac:3f:5e:0f:6c:35:c6:e8:08:
a2:cb:56:8d:f7:ea:9d:08:8a:e3:40:74:65:7d:3d:
12:5e:1b:0a:74:8c:86:13:c7:83:ef:78:6d:27:79:
68:f2:0f:35:24:11:2e:45:07:d0:9a:21:18:35:a0:
e5:fc:6f:2f:9f:1d:4e:0a:83:c3:2b:41:49:0c:c8:
6a:ef:9c:9e:ac:17:bc:a8:4e:ed:0a:ae:05:7c:c0:
5c:7a:76:b9:57:78:83:63:01:b9:a4:16:54:cc:3c:
f0:a1:7e:18:f0:20:f4:d4:c9:20:43:45:0c:60:91:
ca:e5:86:d1:95:1c:42:dc:0d:f5:51:67:2d:67:ec:
22:0d:f4:6a:f8:e2:55:86:87:18:79:f5:51:e4:f6:
9d:7a:c5:29:bf:a2:86:c6:48:31:ea:8b:9b:dd:82:
5e:81:83:8a:42:9b:8a:bc:8d:3d:48:43:fa:b7:aa:
af:86:97:c2:7a:d0:b5:80:ab:e6:71:c0:61:c0:b9:
ea:c9:1f:61:ea:15:38:85:35:32:4c:93:5b:fa:1e:
57:85:4c:33:73:a2:ee:e3:fc:19:38:05:68:0d:14:
0f:23:d1:0c:92:4d:f7:bf:1b:e3:fd:e4:82:49:06:
55:d7:a9:8e:bc:62:51:ea:ff:82:02:39:72:41:95:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:18:03:F0:84:BF:FB:62:5E:20:50:F9:15:0F:B7:99:D9:A1:48:8A
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/JhgD8IS_-2JeIFD5FQ-3mdmhSIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.4.0/22
Signature Algorithm: sha256WithRSAEncryption
02:f1:a2:5c:ef:e0:78:5c:bf:4c:d5:43:41:dc:21:84:7d:8a:
76:15:93:ea:db:99:85:b9:37:d8:34:5c:27:fa:dc:e5:fd:81:
cf:d0:21:86:1a:1c:51:b3:ad:d2:0f:c1:81:1e:9a:34:26:e8:
a2:33:8a:5c:54:24:0d:fb:7e:22:fd:19:a1:92:78:14:82:60:
8d:c8:9a:be:3b:fc:0f:bf:94:69:03:15:7f:20:05:c0:1f:e1:
4c:6a:42:14:f0:c6:09:9f:dd:a0:cd:4c:57:c9:63:b5:f1:ff:
dd:b1:f3:23:7f:b9:94:55:ba:d6:20:85:b3:04:6a:8f:53:8c:
9c:c3:0f:cc:41:92:be:45:72:16:ce:05:c5:b8:5b:e9:ce:95:
51:83:e0:e4:d9:bb:9e:3c:a4:93:3a:be:32:bd:1b:d9:eb:b5:
8d:64:4c:1a:9a:4e:2f:aa:ee:8d:6e:58:21:e6:b0:37:44:f7:
cf:19:bb:c0:14:f1:d7:af:49:c9:c7:c6:1e:81:14:9f:3a:ba:
d8:ae:d7:b3:f5:54:ba:f9:1a:27:5a:f6:fb:eb:d5:02:c9:2a:
62:63:a0:8d:d7:e0:4e:5c:d6:7b:72:38:8f:ef:67:11:9b:53:
f5:6e:b8:43:40:48:48:aa:a4:13:cd:a9:a2:74:f1:2b:c7:bc:
60:c5:03:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:32 2024 by rpki-client on console-ams.rpki-client.org