Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/C4gqdnixHRdF7oyYtNEqCvUKP00.roa
File: C4gqdnixHRdF7oyYtNEqCvUKP00.roa (raw, json)
Hash identifier: AZNP+BSiZgBKtdQE/jQL+hZma+xTWgxQj0D7zNkVwlY=
Subject key identifier: 0B:88:2A:76:78:B1:1D:17:45:EE:8C:98:B4:D1:2A:0A:F5:0A:3F:4D
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 018E60425A5F08A8D6CA51A9C712222B2685
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/C4gqdnixHRdF7oyYtNEqCvUKP00.roa
Signing time: Thu 21 Mar 2024 09:05:44 +0000
ROA not before: Thu 21 Mar 2024 09:05:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.126.156.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 28 Mar 2024 08:18:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:60:42:5a:5f:08:a8:d6:ca:51:a9:c7:12:22:2b:26:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Mar 21 09:05:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b882a7678b11d1745ee8c98b4d12a0af50a3f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:3e:72:f6:1b:83:7f:65:56:09:3b:f7:e1:
2c:21:3f:a7:e2:3b:94:f7:5e:8a:5e:31:b9:be:21:
61:84:9e:d3:dc:d5:e8:71:74:32:fe:48:0d:e6:05:
5c:2c:d9:b2:57:d8:dc:3e:2c:31:60:0f:78:97:63:
63:7a:02:13:83:4d:ce:72:36:7e:65:ba:79:a2:1d:
5f:60:99:ef:31:e3:4a:7e:41:ae:57:e0:78:05:55:
72:1e:de:a2:26:9e:c2:e3:84:8f:d8:eb:4f:fc:1c:
4f:37:d3:14:e7:0b:8f:c2:2f:b8:20:7c:31:65:36:
1f:70:33:bd:76:3a:7d:92:c4:ec:f4:bd:42:2f:c0:
b0:7d:be:e9:38:9c:86:6e:75:c9:e7:8d:f8:1a:cb:
00:c2:e7:41:f7:66:15:e7:93:75:5a:4a:cd:1c:5f:
fe:f7:b8:49:2f:5e:e4:3d:df:37:f2:a2:83:2b:a2:
b3:7e:29:0b:0c:01:7e:79:c1:b9:3a:39:94:83:2d:
16:70:47:40:22:c4:25:0b:6c:aa:12:9c:1d:37:eb:
18:53:6f:e4:f8:3f:bb:47:20:f9:fb:cb:7e:a5:75:
b8:23:9a:ff:d6:bf:1c:10:c9:df:20:f1:10:09:66:
16:fc:b2:ba:1a:2f:e9:02:79:b0:ef:cf:2d:51:36:
61:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:88:2A:76:78:B1:1D:17:45:EE:8C:98:B4:D1:2A:0A:F5:0A:3F:4D
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/C4gqdnixHRdF7oyYtNEqCvUKP00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.156.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:cf:1b:27:c6:5f:bc:46:3d:60:88:c0:60:f9:95:cb:04:35:
88:ca:8e:ce:a2:4d:0f:5a:86:c7:52:6c:6d:e3:7f:41:93:54:
5b:6a:a5:4c:e1:92:44:17:2e:97:c9:41:97:87:8c:23:dc:7b:
4a:82:2e:6f:7b:16:dc:cb:1e:06:71:74:21:de:e9:a5:fd:59:
2d:5b:96:9a:f7:77:de:c8:5b:2b:8f:b3:4f:f5:79:66:c5:1f:
2a:47:9f:38:1c:a5:59:79:1d:10:a6:33:69:d5:01:8c:40:28:
73:13:7d:0e:dd:22:64:c2:44:41:48:6a:01:6a:44:f5:12:aa:
24:c5:1c:6f:6d:a0:33:2b:08:9a:81:ce:90:d7:fc:ef:ee:31:
93:fe:72:46:28:d8:95:4e:23:24:b9:62:41:06:a1:3b:c4:41:
52:c8:68:4a:c3:a7:07:42:bc:66:03:6c:7d:7f:fe:e3:77:a3:
83:d1:87:88:44:57:80:e5:e9:d9:d6:69:f6:22:f6:7f:1b:07:
54:e9:37:a8:ca:91:72:cd:3d:a8:86:0b:3a:d1:6a:72:30:a9:
48:ee:d2:1e:cc:5b:3b:84:74:bc:2d:b2:95:63:29:b3:44:3d:
73:ec:bd:aa:e7:0d:c2:63:89:42:87:ec:02:0b:43:d5:b0:63:
df:74:4d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:45 2024 by rpki-client on console-fra.rpki-client.org