Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/I8wVufc-jfKKIIJeBvnsJeLXXlY.roa
File: I8wVufc-jfKKIIJeBvnsJeLXXlY.roa (raw, json)
Hash identifier: ACOWKSdiZG3qLiyAthjo4eThBXSNQ4BYJthGDUv5bPM=
Subject key identifier: 23:CC:15:B9:F7:3E:8D:F2:8A:20:82:5E:06:F9:EC:25:E2:D7:5E:56
Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial: 0185723A34C223228BD008CD6334D70C89AB
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/I8wVufc-jfKKIIJeBvnsJeLXXlY.roa
Signing time: Mon 02 Jan 2023 11:24:55 +0000
ROA not before: Mon 02 Jan 2023 11:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199484
IP address blocks: 185.195.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Dec 2023 14:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:34:c2:23:22:8b:d0:08:cd:63:34:d7:0c:89:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Validity
Not Before: Jan 2 11:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23cc15b9f73e8df28a20825e06f9ec25e2d75e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:ed:fc:98:f8:b4:cf:36:9a:bc:8b:85:63:
e5:c7:e9:a2:f3:2d:ee:ca:5a:08:a7:3e:0f:c4:02:
82:f5:bc:6d:b2:44:bf:36:03:f3:27:42:1b:de:cb:
0b:c1:08:72:a7:68:74:12:6e:1c:42:6f:a5:be:95:
82:6f:7f:53:e8:22:60:e4:54:5e:47:79:0d:18:72:
56:7b:6a:e0:6b:dd:7f:dd:43:f1:df:dd:62:fa:33:
8b:f5:5e:87:c3:fc:8d:15:0d:00:de:11:4b:4d:c8:
ab:64:c3:bc:b3:9f:b6:12:d5:6f:69:1c:d4:33:87:
4c:53:9d:25:95:4f:8a:f6:74:98:a0:6c:63:d1:bb:
c2:fe:62:af:0b:8e:00:41:5b:8d:a0:7a:c8:c7:39:
e2:44:32:9a:e0:ed:be:52:7f:93:c8:87:28:ec:d3:
2f:f6:59:a6:07:e0:3c:82:bd:c3:cb:35:ff:b9:5f:
d3:73:5f:4e:e2:6f:7f:1b:d5:0a:7c:86:1c:b6:ad:
ca:88:fa:f5:81:4f:0d:7e:2e:9c:b1:7b:e5:ee:b7:
7b:7b:53:73:09:67:1e:32:73:f4:36:ad:b6:0a:74:
03:75:6e:09:56:3c:e4:96:85:be:b0:57:e3:4b:5c:
e8:e7:a5:1d:42:a8:cf:16:80:e2:a3:71:a9:b0:16:
2c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CC:15:B9:F7:3E:8D:F2:8A:20:82:5E:06:F9:EC:25:E2:D7:5E:56
X509v3 Authority Key Identifier:
keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/I8wVufc-jfKKIIJeBvnsJeLXXlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.230.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:a9:9c:44:33:ed:d3:eb:47:de:9c:c7:50:22:3c:a4:ca:56:
8d:1e:a5:5e:d5:26:b2:6b:20:28:34:61:a7:b0:31:66:e8:98:
4a:0f:b2:eb:3a:61:5b:08:5c:48:c5:56:90:4c:85:85:6a:b6:
f2:48:c6:bc:fa:3a:fe:2c:ca:cf:e1:d9:62:2b:10:e7:24:7b:
ac:5e:48:2b:2d:9d:1c:2b:01:40:50:c0:90:20:df:55:07:0c:
43:8e:b9:6e:ae:e3:76:22:33:1d:86:8b:82:3d:1f:ad:a6:b2:
89:ae:9c:a4:47:d1:02:f7:14:5d:40:78:aa:68:ce:e3:57:2c:
65:74:12:d5:1b:e4:db:c8:c3:95:e1:28:1b:af:16:dd:33:0b:
05:b8:a5:a5:79:03:19:0b:e0:47:09:e4:e4:6f:dd:f7:9d:5b:
cf:32:44:35:ad:95:c0:89:46:d4:ed:da:d4:f8:d0:5f:e9:10:
91:84:af:0b:a2:4f:97:a4:38:58:3b:8d:b4:5d:7a:25:02:d2:
36:af:43:26:1e:af:43:5f:4a:16:f3:37:22:57:ab:2c:db:d8:
61:2f:d0:c0:b3:8f:aa:e2:2e:74:3e:01:3f:37:cf:40:5e:50:
e8:51:a9:af:79:11:46:e6:6d:7d:53:c4:82:a6:a6:75:e4:91:
1a:ec:b1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:14 2024 by rpki-client on console-ams.rpki-client.org