Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/A-ivxlGptxdjjHyl5h41DyUdEq0.roa
File: A-ivxlGptxdjjHyl5h41DyUdEq0.roa (raw, json)
Hash identifier: bJahYnYL9yt8ovtP5YT6zj7v5lAn6XvxgINKJ4uYEeQ=
Subject key identifier: 03:E8:AF:C6:51:A9:B7:17:63:8C:7C:A5:E6:1E:35:0F:25:1D:12:AD
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 018963F7CF641699FD1B1920038D5EDD4BC4
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/A-ivxlGptxdjjHyl5h41DyUdEq0.roa
Signing time: Mon 17 Jul 2023 13:08:52 +0000
ROA not before: Mon 17 Jul 2023 13:08:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 185.247.18.0/24 maxlen: 24
185.247.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jul 2023 15:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:f7:cf:64:16:99:fd:1b:19:20:03:8d:5e:dd:4b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Jul 17 13:08:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03e8afc651a9b717638c7ca5e61e350f251d12ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:54:bb:26:cd:d5:23:8a:e1:ac:e7:7e:b8:
b4:9a:55:10:23:2b:1f:41:22:cf:ef:8c:c9:a9:b7:
21:8d:3c:cd:05:60:ef:d6:54:38:44:62:9e:99:23:
44:38:63:f7:40:b9:70:71:61:6f:87:fd:d4:65:ae:
63:57:6c:28:37:79:fb:88:9b:56:a7:04:2c:29:de:
34:10:1d:db:60:a6:91:0c:68:ba:35:cd:dd:2a:82:
46:e0:06:f3:b9:6c:a2:26:48:1d:e4:7c:f6:b0:fe:
31:8f:28:2d:1d:e7:ce:b9:3a:5a:d6:5a:91:3f:7b:
a3:f5:c5:dd:2d:b7:d1:ff:2d:89:32:d2:ee:07:e6:
b7:b3:8f:84:da:6b:b0:14:90:28:fa:98:e7:40:0d:
62:e2:cf:54:43:ce:d2:ea:83:d9:c8:76:69:9b:13:
6f:76:7d:bc:30:d8:53:47:4c:25:7b:7d:e9:b2:fc:
1c:ba:16:96:53:20:d9:bc:99:31:47:19:a6:d4:61:
5f:94:97:06:f3:ad:be:80:75:1e:e2:8f:9c:f0:70:
94:3c:41:03:20:79:fd:81:cb:6d:66:11:06:71:cb:
84:28:64:cd:bb:eb:ff:ac:97:85:a6:67:cc:02:6a:
03:c6:2f:63:2f:62:c2:16:95:12:28:30:13:7f:57:
67:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E8:AF:C6:51:A9:B7:17:63:8C:7C:A5:E6:1E:35:0F:25:1D:12:AD
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/A-ivxlGptxdjjHyl5h41DyUdEq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.18.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:e6:55:3a:3d:65:13:04:ee:20:25:5e:ce:ea:66:3a:df:34:
0a:87:f4:ee:74:9c:04:88:59:a6:eb:bb:d2:4d:d5:d8:d6:9b:
bf:ed:90:95:5c:ee:6f:1f:63:85:68:32:f4:73:87:a8:6e:57:
bb:ae:ce:51:40:7f:9e:b8:a6:3c:7d:b9:8d:93:cd:79:58:33:
a7:4b:80:f2:a2:27:e6:e2:c3:7e:c5:e2:b7:24:d6:c9:6b:d2:
47:2e:d4:16:9f:1e:36:4b:b8:cd:0f:85:72:4f:ed:86:29:9e:
21:2f:b7:7b:30:9c:c6:30:8c:79:62:26:21:77:d9:84:b7:ec:
6c:fd:62:d0:c5:20:5a:4b:a1:4b:4e:22:c2:28:57:3a:96:5e:
29:2f:d1:47:fb:ec:2b:e0:49:b0:6f:bf:25:4f:bb:78:ec:66:
45:4b:d5:d6:c9:ca:89:8d:84:02:86:37:54:b8:3d:83:90:ec:
6f:a6:3b:9a:97:5b:78:d0:fc:cc:83:56:d8:76:66:ca:76:ad:
46:3c:36:91:76:60:f5:97:45:29:ee:ff:aa:ae:8f:e0:6b:53:
b0:bc:78:d0:23:82:1e:48:ce:c0:eb:1f:0a:c9:77:8b:64:cd:
5c:ad:8b:ba:f0:e8:01:fb:78:2f:6a:dc:05:ba:45:bc:98:93:
49:fc:77:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:03 2024 by rpki-client on console-ams.rpki-client.org