Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/wWqSn4E9ZVzD7Iyueht_Od00M-I.roa
File: wWqSn4E9ZVzD7Iyueht_Od00M-I.roa (raw, json)
Hash identifier: zFxeU7Cv4h1S1Clp5ZK+LsNOd9lOzY1wwfnRhxMYIRY=
Subject key identifier: C1:6A:92:9F:81:3D:65:5C:C3:EC:8C:AE:7A:1B:7F:39:DD:34:33:E2
Certificate issuer: /CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Certificate serial: 0187B394BC1E6575A812A81DE39EF3850C1F
Authority key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/wWqSn4E9ZVzD7Iyueht_Od00M-I.roa
Signing time: Mon 24 Apr 2023 14:04:41 +0000
ROA not before: Mon 24 Apr 2023 14:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 185.135.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Apr 2023 14:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b3:94:bc:1e:65:75:a8:12:a8:1d:e3:9e:f3:85:0c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Validity
Not Before: Apr 24 14:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c16a929f813d655cc3ec8cae7a1b7f39dd3433e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b5:9c:52:46:8b:f5:e5:18:2c:f0:1c:1d:b3:
e8:00:61:18:89:be:eb:31:f7:5e:59:f3:f3:c6:2b:
01:9f:35:6c:20:1d:d9:ef:a0:c4:24:10:a6:47:f9:
ed:fc:8c:b1:79:77:11:00:fa:ba:c1:46:40:90:bf:
aa:ef:3e:f9:cc:df:b5:89:e9:ff:5b:50:70:34:a2:
d5:3e:ef:95:f5:01:99:43:bc:6f:94:61:b8:70:3f:
e3:3c:9d:fa:32:96:b2:f7:3b:c4:d1:10:f7:d3:8d:
dd:b1:d0:6c:4f:ee:52:08:57:99:de:e9:43:b9:aa:
45:fb:41:f6:31:b1:cd:12:04:31:39:38:48:a4:4c:
91:1a:d6:86:dc:63:dc:00:fb:34:2e:bd:cc:55:01:
37:05:5b:90:35:dd:3f:3e:a6:1a:86:d4:eb:4a:b9:
7b:94:13:f1:ea:1e:08:5e:8e:07:4a:96:ac:de:ef:
71:b8:35:21:d7:d1:6f:36:16:b2:5c:79:bf:f4:3a:
e8:04:e8:be:03:95:5a:fe:ec:73:7e:07:e0:1e:94:
36:3d:38:da:fe:26:32:71:98:3b:68:a2:d6:26:1b:
97:76:a5:45:03:04:a6:be:68:07:b1:8a:8e:18:7a:
58:f2:94:09:4c:39:01:e6:cc:2e:05:3b:05:7d:32:
6a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6A:92:9F:81:3D:65:5C:C3:EC:8C:AE:7A:1B:7F:39:DD:34:33:E2
X509v3 Authority Key Identifier:
keyid:4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/wWqSn4E9ZVzD7Iyueht_Od00M-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.190.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:17:d2:22:e5:5b:58:07:e2:6d:67:ba:c1:0c:f3:8b:39:cb:
9d:2f:5b:c7:68:52:45:63:2d:c1:88:9e:16:4a:a3:b7:e0:e8:
a1:41:61:da:12:49:b2:f5:30:b2:be:6e:71:15:00:86:45:04:
dd:d6:f6:f0:d6:7c:54:c4:bf:d0:aa:b6:63:5c:6f:62:b3:ea:
d8:86:fd:80:57:87:e9:00:48:f8:17:57:bd:30:f1:90:de:be:
ee:bf:f0:d8:54:5e:f7:be:d1:81:6e:2a:ff:ba:c9:75:da:fc:
cf:13:b5:01:33:fc:6a:98:22:21:50:e9:8d:25:00:b4:12:69:
6a:9a:3f:f5:5d:3a:da:97:3e:cf:ac:46:4c:3c:bd:18:a1:e4:
f6:5a:51:19:af:6e:a5:20:0f:5d:21:1e:54:e1:af:a7:e2:30:
e1:21:c0:30:71:91:91:41:fd:bb:ea:a6:31:ca:08:38:69:d8:
c6:a5:41:22:00:a5:b1:21:5e:0d:fb:51:27:42:dc:34:11:d0:
7a:4d:1a:aa:4b:b3:53:22:fe:24:35:07:9e:6e:42:87:95:bf:
b5:d3:14:5c:47:3b:fa:66:e7:b4:3c:fa:ae:31:0b:72:4a:84:
86:ac:78:f7:23:e5:df:c4:b3:7b:ce:38:da:59:cb:58:1f:ea:
ea:6c:73:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:05 2024 by rpki-client on console-ams.rpki-client.org