Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/axcYVMwL7I3lkZTJ5Fq1aGTfkIg.roa
File: axcYVMwL7I3lkZTJ5Fq1aGTfkIg.roa (raw, json)
Hash identifier: pQSfz7eKN8vzGLIlEhi0lf/2x5aNByx/CbafwgFZK7Y=
Subject key identifier: 6B:17:18:54:CC:0B:EC:8D:E5:91:94:C9:E4:5A:B5:68:64:DF:90:88
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 0185711E363D50C1D4BCDECAEDFFB0C310BA
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/axcYVMwL7I3lkZTJ5Fq1aGTfkIg.roa
Signing time: Mon 02 Jan 2023 06:14:43 +0000
ROA not before: Mon 02 Jan 2023 06:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49544
IP address blocks: 185.201.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 May 2023 17:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:36:3d:50:c1:d4:bc:de:ca:ed:ff:b0:c3:10:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: Jan 2 06:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b171854cc0bec8de59194c9e45ab56864df9088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:fc:12:8d:e4:03:0d:56:bc:1a:96:3c:3d:
f4:6d:0c:0b:5b:d9:1c:ca:78:c8:30:41:f3:99:ce:
36:a7:c8:13:a7:b2:5e:9c:d8:cc:2f:52:54:bd:cd:
a6:84:ff:87:c9:37:45:67:3d:ee:65:4d:1f:02:41:
e6:b6:8b:7c:0b:ac:5d:79:f8:97:37:28:e4:2d:4d:
87:1f:eb:23:93:e3:13:46:3c:61:49:7a:92:86:8c:
f3:3b:6d:4c:b2:af:6c:c2:4c:ea:c1:17:59:15:36:
17:ee:6d:b9:52:26:b1:20:29:37:e2:b6:46:dc:50:
8d:2e:d5:b0:ab:43:d0:9d:3f:54:9f:ae:24:a9:61:
0a:86:21:e7:a6:9d:ba:2c:34:b7:74:2d:5d:08:be:
2b:a6:db:83:48:de:be:79:43:61:f6:62:67:aa:1f:
c0:5b:8a:79:b7:f5:b2:14:fd:72:27:30:5b:07:e4:
7a:af:88:90:3f:66:a8:2a:61:3c:eb:28:bf:27:df:
1a:f5:ad:6d:dd:4f:b1:23:28:69:3c:8d:a6:0c:1c:
e6:6b:28:69:d0:69:58:ca:47:f0:d8:76:c4:e0:7c:
86:45:e5:d0:9b:87:0b:ef:3c:d9:94:b0:58:73:14:
c0:43:b0:1e:4e:88:cd:37:f4:93:13:10:95:5a:24:
6c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:17:18:54:CC:0B:EC:8D:E5:91:94:C9:E4:5A:B5:68:64:DF:90:88
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/axcYVMwL7I3lkZTJ5Fq1aGTfkIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.17.0/24
Signature Algorithm: sha256WithRSAEncryption
59:0e:f0:38:c7:0e:e5:b6:9c:c5:b0:56:aa:45:f1:ef:21:54:
8c:67:44:0c:04:c5:af:62:ee:bd:cc:71:a6:9b:ab:4b:b6:2f:
92:6d:50:ec:12:06:e3:e0:b9:1a:e8:ab:23:3b:2f:0d:5a:8e:
c7:e4:10:ce:7c:fc:1a:14:db:08:7d:e1:e5:a8:29:c2:3d:4e:
ac:cf:72:3b:0f:d8:b5:bb:fc:ad:49:9c:7b:76:f2:71:3d:d0:
38:c7:e3:69:dc:e8:67:20:7e:66:cb:bc:0f:fd:57:dc:c7:01:
f5:2f:ea:2c:eb:3e:72:c1:73:e7:18:96:0a:ea:27:c7:68:c2:
25:65:3f:75:b3:94:e0:ec:61:1e:2b:b6:0f:d7:05:b7:f3:10:
97:86:6c:46:19:c6:30:79:02:fc:16:b7:1b:82:03:4c:22:a5:
dd:eb:68:22:81:d3:e8:4d:90:0b:08:18:cc:2f:9d:82:be:30:
08:88:5d:e5:ba:cc:1e:c9:40:c0:fd:09:7b:76:d1:b1:6f:5d:
a1:77:84:22:f8:9c:e4:19:f1:dd:74:e1:ca:85:cc:15:5a:20:
db:03:5d:73:ae:a4:6f:40:a4:41:e5:6e:e3:71:33:cb:60:49:
80:ff:d7:e7:b9:16:0e:d3:fc:3f:81:22:25:02:81:37:ed:f9:
0c:ac:af:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:32 2024 by rpki-client on console-ams.rpki-client.org