Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/JtHX0Ds4oTUJHlkLrXZwWmMAYEo.roa
File: JtHX0Ds4oTUJHlkLrXZwWmMAYEo.roa (raw, json)
Hash identifier: z/3aue1LSsy6q3eRrBmJiGbf+a7CWPSbqwbY7LlX//w=
Subject key identifier: 26:D1:D7:D0:3B:38:A1:35:09:1E:59:0B:AD:76:70:5A:63:00:60:4A
Certificate issuer: /CN=5ab1996515884434b87882b5b972a6e529ffb00b
Certificate serial: 018570FBCD17764AE290391AD0B86DC87565
Authority key identifier: 5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/JtHX0Ds4oTUJHlkLrXZwWmMAYEo.roa
Signing time: Mon 02 Jan 2023 05:37:08 +0000
ROA not before: Mon 02 Jan 2023 05:37:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8473
IP address blocks: 185.159.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:cd:17:76:4a:e2:90:39:1a:d0:b8:6d:c8:75:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab1996515884434b87882b5b972a6e529ffb00b
Validity
Not Before: Jan 2 05:37:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26d1d7d03b38a135091e590bad76705a6300604a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dc:40:e2:03:a0:71:ad:b0:f8:16:d2:c1:51:
98:a0:48:8a:39:b6:67:c5:79:36:7d:be:6a:58:e2:
11:9b:88:b1:71:57:c2:26:09:96:28:1c:ee:27:0f:
cc:d8:3b:4c:5f:50:46:ec:02:c0:5b:6e:f9:60:c8:
07:c3:d9:0d:56:b3:be:b8:d2:35:70:e8:36:f6:69:
7f:ae:3b:ab:cf:4a:72:66:58:ae:70:f3:f9:35:bf:
fc:06:3d:cc:60:9f:e7:4e:0c:2b:72:4c:e9:22:90:
92:74:23:78:f9:7d:ac:95:e9:bc:de:2e:47:a6:47:
a9:fb:a4:19:71:33:c2:70:6c:17:11:82:07:5f:60:
72:5b:5d:9b:9f:1e:b8:e9:14:54:56:0a:82:c5:71:
33:47:9f:a7:d7:ea:17:f7:d6:ff:dd:80:6a:01:bd:
77:10:2c:90:13:5f:42:1f:d1:f1:59:6c:dc:75:c4:
6a:9b:16:af:cf:6a:5a:eb:2d:d4:2f:54:a8:34:11:
7f:b0:68:54:2b:aa:34:b7:2e:15:2c:8b:b8:a1:61:
b4:2f:18:06:6d:43:e0:a5:af:dc:9e:82:dd:23:f4:
29:a1:40:41:d0:93:8a:8d:68:1d:66:4d:99:b9:dd:
60:d6:6a:6a:33:ce:72:4a:6c:98:af:d5:67:a4:96:
9f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D1:D7:D0:3B:38:A1:35:09:1E:59:0B:AD:76:70:5A:63:00:60:4A
X509v3 Authority Key Identifier:
keyid:5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/JtHX0Ds4oTUJHlkLrXZwWmMAYEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.156.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:06:50:72:97:17:fd:81:2a:bd:d7:fa:bb:21:0f:d8:8e:8d:
6f:d3:22:1f:68:8b:4e:ba:f3:d7:fb:4e:4b:8f:ea:74:c5:f0:
fc:47:1f:4f:ed:aa:8a:00:a2:44:ca:e6:da:b7:f3:08:18:0a:
0d:17:27:f8:0e:89:d4:bc:96:5d:3b:f0:83:85:02:1f:aa:b8:
c0:f5:63:7f:57:d7:b4:df:c0:b9:fe:3a:65:32:55:3e:f1:1e:
e1:c6:77:3b:01:38:e8:19:9d:65:d8:ca:89:e9:6a:7c:1b:12:
3b:e1:de:43:80:12:92:a3:c4:c1:1a:c6:ed:97:c6:97:12:87:
96:8f:f8:74:0a:ba:4d:3b:d4:e3:d3:cd:b8:1d:aa:45:9a:0f:
d6:6c:31:7d:4f:80:b2:e9:7d:24:a6:c8:d2:c3:94:6f:9c:40:
8f:ae:14:c1:f3:87:af:7f:05:82:d1:07:ff:49:fb:91:94:7f:
f1:e0:b3:1b:c1:5e:66:3f:73:20:a9:1c:5e:50:a1:0b:75:cc:
71:c6:98:b4:4d:1d:01:d2:09:34:a6:f9:3d:b0:0d:c6:66:8d:
77:73:a3:46:1c:6b:30:d6:c0:03:bc:f0:d6:16:9c:b1:17:c0:
2b:40:98:69:88:d4:c9:6c:c0:b9:c9:93:3a:83:99:69:8a:f6:
ce:59:17:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:33 2024 by rpki-client on console-ams.rpki-client.org