Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/N1wD-OKBttaExba0Vp5B0Utp6fg.roa
File: N1wD-OKBttaExba0Vp5B0Utp6fg.roa (raw, json)
Hash identifier: jbWDvEdEZJkqx354NLVfy5FfJhau0Ua8ItKFli2A3ZY=
Subject key identifier: 37:5C:03:F8:E2:81:B6:D6:84:C5:B6:B4:56:9E:41:D1:4B:69:E9:F8
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 018B480F058575DAB31E153C1EB669990EEC
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/N1wD-OKBttaExba0Vp5B0Utp6fg.roa
Signing time: Thu 19 Oct 2023 13:10:25 +0000
ROA not before: Thu 19 Oct 2023 13:10:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201396
IP address blocks: 185.75.148.0/24 maxlen: 24
188.74.44.0/22 maxlen: 24
2a03:4b21::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:48:0f:05:85:75:da:b3:1e:15:3c:1e:b6:69:99:0e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Oct 19 13:10:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=375c03f8e281b6d684c5b6b4569e41d14b69e9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:05:9d:ef:b0:3a:83:33:19:ad:ba:db:10:17:
5c:39:ad:71:81:53:7e:c6:62:a9:12:26:cd:e8:a8:
a9:a3:5d:ea:ac:e6:bb:d0:13:2e:01:a7:9f:12:5e:
1e:34:b4:d7:21:66:46:50:27:3d:60:35:55:b0:71:
0f:cf:b4:7c:44:29:9d:8f:a4:de:46:cd:44:8c:de:
06:42:c4:d4:4f:e8:71:d7:74:5f:4a:0a:49:8e:68:
b3:4e:d5:e4:0a:0a:90:f5:ce:8a:ee:66:1f:06:e7:
1f:87:a3:45:09:58:63:20:5d:93:ee:e2:30:bc:25:
6c:2a:e4:f7:19:51:9f:c0:90:a4:ec:83:d6:e8:cb:
61:54:c9:5f:21:6a:0f:e4:df:be:58:7e:47:8d:08:
8b:67:07:53:bf:03:2e:46:32:09:11:32:5e:79:be:
37:83:dd:d3:c4:ee:28:7a:9e:5c:3d:08:21:ff:83:
45:c1:cd:35:7b:49:a7:0a:6c:01:cb:1a:f2:eb:22:
94:2d:7a:40:64:9f:f8:3d:f3:ef:83:16:9e:d0:3b:
12:3e:1a:3d:34:fb:a6:fc:63:6b:34:36:3d:13:2c:
59:cf:12:99:55:ec:6f:e3:38:17:6a:22:80:94:c5:
34:41:1b:d2:c5:d1:99:6b:c8:38:bd:73:1a:77:19:
c6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5C:03:F8:E2:81:B6:D6:84:C5:B6:B4:56:9E:41:D1:4B:69:E9:F8
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/N1wD-OKBttaExba0Vp5B0Utp6fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.148.0/24
188.74.44.0/22
IPv6:
2a03:4b21::/32
Signature Algorithm: sha256WithRSAEncryption
56:c8:9f:f0:3b:6a:bd:f2:73:cd:7c:60:09:ab:86:05:78:70:
12:77:b5:76:c9:e0:97:89:32:ce:9c:27:e4:1f:93:55:4a:e5:
c4:00:77:06:63:93:45:22:93:4f:1c:85:ac:a7:e4:6b:73:f3:
ca:86:80:60:90:56:38:e3:1f:83:c0:70:27:dd:d9:7e:26:1e:
01:89:af:0e:40:9c:55:e6:a5:54:f9:06:98:bd:d1:3a:e6:41:
6b:33:c7:36:9e:2e:7f:2b:b1:b7:5e:fe:b4:46:e9:2a:71:6d:
4b:11:d4:52:bb:29:a4:90:9f:fa:c0:93:b3:7b:0d:b6:7b:c6:
dc:b9:1d:15:2c:fd:d9:ca:58:22:8c:ea:7b:24:7b:92:48:82:
32:73:11:ba:2f:30:f3:3f:4d:09:15:4f:d8:23:a8:7a:44:92:
f9:a7:9c:a4:f6:8f:9a:cc:2a:c6:d5:01:58:e4:18:a7:4d:bc:
dd:af:3e:9a:93:06:89:36:d5:9d:8a:b9:69:64:d6:06:93:15:
b0:52:26:91:2e:73:fe:7d:9b:bf:85:cb:b7:d8:e1:0b:ad:44:
b7:00:17:ed:f5:43:5e:00:1e:da:81:f4:a2:56:33:d3:48:ff:
43:ee:2a:aa:7b:3d:9f:b2:fc:7f:92:b3:6c:1a:e5:32:b9:b9:
5b:f8:2b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:28 2024 by rpki-client on console-fra.rpki-client.org