Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/4g9-WqNQTiZh_kln2RFxA4pmgp4.roa
File: 4g9-WqNQTiZh_kln2RFxA4pmgp4.roa (raw, json)
Hash identifier: ibvk5o60rwgqAi2TdbleEhmFS7Hlj72ikRn82aE4aWU=
Subject key identifier: E2:0F:7E:5A:A3:50:4E:26:61:FE:49:67:D9:11:71:03:8A:66:82:9E
Certificate issuer: /CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Certificate serial: 018906B2885B0593F8334CE46F2963395FBC
Authority key identifier: 11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/4g9-WqNQTiZh_kln2RFxA4pmgp4.roa
Signing time: Thu 29 Jun 2023 10:28:30 +0000
ROA not before: Thu 29 Jun 2023 10:28:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.232.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jul 2023 18:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:06:b2:88:5b:05:93:f8:33:4c:e4:6f:29:63:39:5f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Validity
Not Before: Jun 29 10:28:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e20f7e5aa3504e2661fe4967d91171038a66829e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fe:10:a1:e0:1b:b5:04:bd:f3:67:2f:e2:71:
13:85:dc:5a:8f:80:08:97:de:e0:43:ba:97:16:b2:
12:0c:dd:c2:d7:87:f4:11:21:ca:8e:27:cd:47:f8:
a6:9b:86:b4:41:e8:b1:4e:6f:07:52:e5:db:bc:34:
b8:f7:8c:4c:50:f5:cb:87:5f:ca:fa:41:13:d0:81:
9f:46:63:d9:ab:9c:32:ea:a5:e2:a8:fe:1a:2f:15:
ec:ff:80:77:0e:0f:ad:a7:20:ee:b6:bb:0b:ce:c3:
23:94:6f:7f:38:9a:57:18:53:0d:87:62:32:ea:cb:
58:f5:c1:a5:a3:72:84:aa:d9:8a:4d:81:1c:d5:51:
75:86:a5:f7:c4:ba:07:e5:99:7a:3a:65:4b:6d:fe:
58:34:87:25:d6:98:b9:6a:7b:67:52:a9:7e:08:f4:
6b:7a:f5:48:88:52:84:a3:13:3e:bd:62:6f:6f:e9:
1d:4b:ba:81:54:bc:c4:6d:ae:dd:78:90:6a:42:c4:
cd:66:1f:e7:16:75:15:fc:1c:be:1b:b6:08:86:62:
4a:1f:73:dd:55:b3:b9:8d:2b:ce:4e:55:ed:7a:a8:
2b:51:20:47:2b:f2:c4:f6:f8:ad:cc:91:6b:22:90:
3b:31:38:84:e7:72:d5:37:1f:8b:23:49:65:ef:bc:
76:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0F:7E:5A:A3:50:4E:26:61:FE:49:67:D9:11:71:03:8A:66:82:9E
X509v3 Authority Key Identifier:
keyid:11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/4g9-WqNQTiZh_kln2RFxA4pmgp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.206.0/24
Signature Algorithm: sha256WithRSAEncryption
97:42:db:51:1e:bd:ca:0c:8d:a0:77:87:ae:b8:1f:e3:a0:1a:
0a:11:09:00:3d:0c:32:8d:d4:65:91:23:f0:9c:74:6f:9e:ed:
c6:d6:44:01:49:5f:77:d0:4e:f9:b7:a3:0c:f0:32:1f:57:54:
ca:20:a1:4e:9c:51:28:1b:47:23:34:b6:56:27:c4:02:c1:9c:
38:83:f5:bc:29:23:7f:51:04:67:9c:08:9c:3c:58:0f:27:41:
46:06:30:6f:48:a8:1e:a6:e9:08:e9:60:69:02:d3:e4:32:97:
49:6a:80:3f:fc:70:44:08:af:67:bd:56:e3:81:55:79:50:2b:
1f:f3:12:83:7f:41:97:5c:7e:1c:af:a9:1a:c3:a1:80:47:0d:
d5:a7:bb:af:7a:d4:7c:5d:7b:99:e5:54:77:86:1f:d9:37:2e:
36:7e:24:c0:9b:97:8c:a2:bc:6d:0c:60:1e:0e:bf:e9:cb:1d:
9a:98:c8:ae:c6:a4:28:5b:79:84:b4:16:09:a7:9f:96:58:7a:
43:e7:2e:08:69:cf:1b:2b:56:42:26:91:71:96:7e:22:ad:fa:
51:86:dc:ed:8e:ca:a6:d0:4a:7e:8d:b4:8b:4f:95:e4:a2:19:
57:ac:32:e4:dd:0d:e5:07:a3:f3:ff:ae:cb:eb:ec:07:0e:e6:
96:bf:14:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:57 2024 by rpki-client on console-ams.rpki-client.org