Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/1-LlsJhSWxwPyAbmOHZrX_a_aAKU.roa
File: 1-LlsJhSWxwPyAbmOHZrX_a_aAKU.roa (raw, json)
Hash identifier: OcoKUXyJYLX7sQKolNyyoE7EbH1CkFmrKG+/eT27iZg=
Subject key identifier: F8:B9:6C:26:14:96:C7:03:F2:01:B9:8E:1D:9A:D7:FD:AF:DA:00:A5
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 01863BA6BB7941AFBAD4113BBF91514172A9
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/1-LlsJhSWxwPyAbmOHZrX_a_aAKU.roa
Signing time: Fri 10 Feb 2023 14:07:07 +0000
ROA not before: Fri 10 Feb 2023 14:07:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48314
IP address blocks: 185.225.132.0/23 maxlen: 23
2a0d:c400::/32 maxlen: 32
2a0d:c401::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 10 Feb 2023 14:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:a6:bb:79:41:af:ba:d4:11:3b:bf:91:51:41:72:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Feb 10 14:07:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8b96c261496c703f201b98e1d9ad7fdafda00a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:20:be:3b:ee:c7:34:60:8f:c1:57:86:eb:
7b:79:49:ae:b1:86:0f:64:8a:40:ff:6c:be:eb:ce:
bf:bc:7f:35:47:ca:3c:31:80:42:2e:17:eb:4f:3c:
ce:5b:e4:9d:e7:d1:ad:17:29:51:71:b4:3c:79:ac:
63:41:51:a6:39:e6:f6:c3:39:04:16:db:5e:90:df:
09:a3:b4:b5:ec:41:e9:ba:2c:cc:c3:24:d5:37:c3:
bb:2e:25:2f:37:22:b9:42:24:34:cb:2e:b6:e9:3f:
ab:a4:59:4a:b6:58:f3:62:17:d3:8a:ca:57:17:b2:
1a:48:ac:b4:e1:d7:80:23:0d:c6:cd:23:e6:69:b1:
19:70:57:23:2e:51:0f:68:41:67:78:bd:1c:bf:d0:
ac:99:e7:8c:f3:b2:67:b0:0c:f2:a9:fd:51:2f:fd:
38:b6:3a:2a:12:14:8b:cf:7b:4c:d3:57:22:44:e2:
37:6b:ba:c0:33:55:e6:3d:58:cd:b2:ea:d1:93:e2:
a0:65:c0:2d:2a:79:81:56:b1:f2:be:c4:d9:2d:0c:
ac:4d:8b:34:32:24:3b:7d:ee:a1:8e:8e:9d:1d:2c:
3d:9f:33:4d:21:3d:2b:80:cb:8a:3a:15:62:42:28:
fc:d6:43:0d:fc:7f:71:68:e3:18:a8:d3:59:8a:46:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B9:6C:26:14:96:C7:03:F2:01:B9:8E:1D:9A:D7:FD:AF:DA:00:A5
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/1-LlsJhSWxwPyAbmOHZrX_a_aAKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.132.0/23
IPv6:
2a0d:c400::/31
Signature Algorithm: sha256WithRSAEncryption
a8:73:a6:32:6b:62:0d:72:bb:8d:e5:b0:96:5b:e7:32:c0:27:
29:96:22:6b:c5:c5:42:00:39:ca:54:35:a0:c0:40:71:ed:66:
fe:e0:09:21:d2:2a:90:4f:9d:b9:8d:11:c9:0e:58:d0:5f:13:
da:78:7c:51:6f:ad:c8:62:14:3b:6a:76:cd:dd:bb:88:7d:b6:
d1:65:1d:77:b5:f6:b7:1c:3c:b1:56:b7:87:6a:48:2a:06:cb:
0e:40:9c:6a:4e:bc:38:c8:76:e2:c1:e1:6f:51:eb:87:d0:d7:
d9:5a:e6:4f:a1:0d:97:a1:cb:57:08:b7:a2:17:b4:88:13:30:
50:a9:98:b3:78:d5:d6:be:2d:f8:49:62:23:e8:64:5d:a7:6a:
43:57:31:60:d2:b3:ee:12:3e:12:0e:a1:1f:0d:f8:82:be:a5:
fb:26:46:29:75:6d:07:82:09:f7:97:c4:03:75:24:a3:27:c7:
80:51:9b:06:7e:b0:07:d0:62:94:ef:b9:06:0d:05:d5:34:2d:
e7:1b:03:4f:e9:2c:be:79:22:f0:ae:7e:29:e2:f1:48:a2:78:
fa:3c:a0:fc:76:ba:b2:9a:ce:0f:0d:ec:bf:a2:0c:30:f7:63:
4f:9f:cc:b4:60:2d:7c:be:97:8e:77:93:67:d4:67:d7:ff:06:
91:bb:44:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:38 2024 by rpki-client on console-fra.rpki-client.org