Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/z7vM2LEm4RkVLMSMnuHswUgd4eU.roa
File: z7vM2LEm4RkVLMSMnuHswUgd4eU.roa (raw, json)
Hash identifier: NhfPuHELu4dXEGAmiCJxDBv1J+YstLHXuaj4UvoJWAA=
Subject key identifier: CF:BB:CC:D8:B1:26:E1:19:15:2C:C4:8C:9E:E1:EC:C1:48:1D:E1:E5
Certificate issuer: /CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
Certificate serial: 01862C71EE1769D7C8126DA8964E872B2786
Authority key identifier: 23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/z7vM2LEm4RkVLMSMnuHswUgd4eU.roa
Signing time: Tue 07 Feb 2023 15:15:09 +0000
ROA not before: Tue 07 Feb 2023 15:15:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39122
IP address blocks: 185.24.232.0/24 maxlen: 24
2a04:2e02::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2c:71:ee:17:69:d7:c8:12:6d:a8:96:4e:87:2b:27:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
Validity
Not Before: Feb 7 15:15:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfbbccd8b126e119152cc48c9ee1ecc1481de1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:10:f6:b3:be:c5:70:14:ef:47:eb:d2:8f:b1:
68:28:d5:fe:b9:48:64:4d:1f:e0:31:8c:64:10:38:
71:c8:8a:bb:76:4a:86:c3:fa:a7:0d:64:8f:e0:16:
ae:05:0b:75:33:25:c2:47:a9:b8:45:b5:e5:ea:fa:
b1:90:20:8c:a9:2f:b6:4e:ab:80:8a:d3:f3:f9:1b:
b2:c3:1c:95:26:46:99:a8:2a:4f:24:b5:3d:0c:ad:
ac:85:3e:2b:dc:ef:a2:be:24:32:1b:15:34:39:c8:
42:3d:5c:8a:20:a6:78:d7:5b:f0:13:90:4b:c5:bb:
83:a2:bc:a0:a6:53:b4:02:f3:2a:86:7e:b7:15:c4:
9e:bf:e8:6e:d7:dd:6f:be:ff:a3:d6:76:85:cb:6c:
22:c9:f0:71:8d:68:db:9e:fb:af:6c:4e:60:ea:a0:
e6:68:13:44:e0:1e:6d:42:94:eb:8c:7d:6e:97:49:
d5:2e:ac:f5:8b:50:cf:57:48:8d:a5:7f:0f:43:b3:
f9:8b:2c:65:44:83:fb:11:a2:45:58:31:57:f5:9f:
9e:fa:a7:1a:cc:2d:d3:5a:e3:83:94:92:a2:a4:6f:
49:9a:51:9f:41:57:1e:09:d7:e5:45:06:bc:1f:f4:
3d:20:72:0c:20:3e:f4:00:db:9e:df:98:49:16:f6:
ba:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BB:CC:D8:B1:26:E1:19:15:2C:C4:8C:9E:E1:EC:C1:48:1D:E1:E5
X509v3 Authority Key Identifier:
keyid:23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/z7vM2LEm4RkVLMSMnuHswUgd4eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/I8u_k0iuVYxu-gwIbyS-BMsjxuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.232.0/24
IPv6:
2a04:2e02::/32
Signature Algorithm: sha256WithRSAEncryption
83:8f:63:eb:e5:f2:74:b7:74:b5:a4:ee:bb:2d:a4:84:82:90:
39:20:94:dc:70:3e:07:f9:48:9b:10:71:55:95:84:39:46:73:
9f:ad:45:c7:8f:5c:04:05:c3:a4:f7:48:c7:f2:1d:55:f0:c4:
94:b6:ab:aa:bd:d7:87:ff:f6:a9:92:49:9e:7d:79:8d:c9:cc:
ad:7d:58:f5:5a:61:e0:bd:2a:d4:09:ac:3a:87:e8:f7:34:24:
93:8f:dc:54:20:d4:46:15:a5:17:cb:61:9f:3b:2f:3b:f2:72:
a1:c5:40:8d:37:be:2b:eb:93:cc:d7:71:e9:7d:36:1e:cc:a7:
2c:60:85:3f:87:b9:1c:12:ce:d9:ee:fd:3b:24:0a:3b:3d:14:
ad:a2:f1:24:df:a3:50:cf:3a:78:56:ad:4f:1f:61:be:ab:aa:
46:d7:86:18:ff:47:0b:a7:3f:d4:83:bb:3f:8a:1a:fe:88:c0:
45:fc:d7:01:22:91:98:4e:cf:89:0a:b5:49:fe:c0:eb:b0:7f:
09:0b:04:b7:a8:2f:c9:12:05:80:bb:c0:1b:29:6f:af:20:3f:
06:23:94:2d:46:36:66:de:a4:fe:cb:44:4b:d5:41:e5:ab:de:
78:9b:53:16:da:3a:57:51:58:cd:8d:82:ad:7f:84:36:8d:4a:
db:08:19:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:13 2024 by rpki-client on console-ams.rpki-client.org