Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/pPH63PcwTdUyx-iauqxPv-xvzW4.roa
File: pPH63PcwTdUyx-iauqxPv-xvzW4.roa (raw, json)
Hash identifier: i+yFItC4Ph0AopYn4NlcBgV6teGQL45asinRQx8TJKI=
Subject key identifier: A4:F1:FA:DC:F7:30:4D:D5:32:C7:E8:9A:BA:AC:4F:BF:EC:6F:CD:6E
Certificate issuer: /CN=a7c7544e8b482d2311903706eed724049fe385bf
Certificate serial: 01856FE6F1DD303BD1671DD7A6CC926BF802
Authority key identifier: A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/pPH63PcwTdUyx-iauqxPv-xvzW4.roa
Signing time: Mon 02 Jan 2023 00:34:44 +0000
ROA not before: Mon 02 Jan 2023 00:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39020
IP address blocks: 185.120.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e6:f1:dd:30:3b:d1:67:1d:d7:a6:cc:92:6b:f8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7c7544e8b482d2311903706eed724049fe385bf
Validity
Not Before: Jan 2 00:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4f1fadcf7304dd532c7e89abaac4fbfec6fcd6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:87:88:ec:28:f3:59:cc:72:2b:e5:70:6c:dd:
38:ee:2f:fa:51:1f:7b:d9:6c:09:b6:99:e4:05:49:
d2:b7:05:5e:5c:80:1c:d7:1b:d7:d8:f4:45:31:e7:
66:de:0e:de:8d:45:bb:d4:b8:74:3c:39:8c:af:18:
63:e4:6e:fa:12:0b:ca:be:84:c1:05:39:c0:84:ca:
27:89:8a:8e:71:50:e1:68:a9:d0:f1:15:b3:f0:af:
8b:e7:fa:ed:35:a3:03:ea:fe:c1:34:2f:99:f1:8c:
d3:dc:7a:7c:85:ac:55:d1:10:1f:41:5a:6d:cc:af:
d4:11:45:5a:4f:69:f8:ac:4b:2d:2b:a0:4e:74:24:
7c:a7:fa:c6:f5:79:dc:3c:64:e8:d7:4a:53:11:18:
4e:ce:00:5e:c2:d3:b7:63:aa:48:13:7e:20:e6:52:
95:3e:04:88:83:c9:c9:e2:49:57:12:80:3e:db:77:
34:38:e9:df:c6:15:1f:7d:ca:f8:fa:e7:89:5e:db:
9d:1b:ee:c4:a5:79:b0:29:14:5b:81:29:bc:a1:cb:
81:b7:30:26:07:da:6f:8b:1d:ec:56:26:68:3d:61:
34:43:66:e4:3b:33:0c:70:60:7f:a3:cb:03:dc:8e:
f3:07:6a:e9:e1:fe:ca:c4:b0:32:f8:61:93:ad:79:
6b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F1:FA:DC:F7:30:4D:D5:32:C7:E8:9A:BA:AC:4F:BF:EC:6F:CD:6E
X509v3 Authority Key Identifier:
keyid:A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/pPH63PcwTdUyx-iauqxPv-xvzW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.182.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:46:dd:ef:22:ed:97:76:30:3b:f4:51:2d:e7:6a:8f:af:ca:
9e:2d:5a:e9:1f:d1:af:4b:30:c7:f6:2b:76:d6:b4:d4:25:e2:
5d:35:ee:f7:bc:c2:5d:3a:e9:62:20:92:70:b9:a0:f4:a8:80:
bb:04:ff:ee:29:00:4f:ae:ad:37:40:53:96:74:d1:0f:7d:6e:
d5:4c:5e:58:4e:b0:ec:de:ce:a2:a8:5e:a4:a6:2c:65:2c:23:
fd:b7:89:7c:9b:7d:7e:f0:a0:8c:e8:35:30:42:0a:3e:0c:7d:
c1:59:2c:19:ac:31:c9:1a:8e:83:05:e5:ed:28:70:39:35:27:
5d:c7:fa:9c:30:26:cc:65:75:5f:44:eb:27:c9:3f:8d:b4:e9:
00:73:56:55:18:f5:e1:7e:23:e6:fa:57:33:46:53:67:26:d5:
a6:0a:b3:2f:e9:18:81:7e:68:b8:d4:23:f3:38:f9:3c:24:97:
96:e4:de:35:fc:53:7b:8b:65:d2:52:47:ac:ae:ba:6d:de:16:
d6:6f:42:dd:84:51:98:8f:28:2c:b3:d9:a3:7e:95:07:84:3e:
82:2f:28:b1:de:4c:09:6b:9d:f8:34:44:50:13:87:32:98:5e:
ae:1d:f5:e3:c8:61:ce:40:e1:7b:42:4b:ad:3e:fe:f5:f6:9f:
10:85:98:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:21 2024 by rpki-client on console-fra.rpki-client.org