Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/V45GShfA-kP-7D-Gaoa75eOYTJI.roa
File: V45GShfA-kP-7D-Gaoa75eOYTJI.roa (raw, json)
Hash identifier: kGZxEmOpK6gjmqNIA7razRAX3AEvvPCVaeg/p8esA3Y=
Subject key identifier: 57:8E:46:4A:17:C0:FA:43:FE:EC:3F:86:6A:86:BB:E5:E3:98:4C:92
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 0187993FB2C5FEA7CFDF6FC75DF60DF0E87B
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/V45GShfA-kP-7D-Gaoa75eOYTJI.roa
Signing time: Wed 19 Apr 2023 11:21:41 +0000
ROA not before: Wed 19 Apr 2023 11:21:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206098
IP address blocks: 185.193.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:99:3f:b2:c5:fe:a7:cf:df:6f:c7:5d:f6:0d:f0:e8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Apr 19 11:21:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=578e464a17c0fa43feec3f866a86bbe5e3984c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:50:15:91:76:89:d9:1d:5d:9f:e5:b5:a5:0d:
dc:0e:cf:2d:4a:1d:8a:b2:2b:25:1d:a1:52:15:05:
53:08:9d:94:51:f4:bf:bd:c7:b8:c5:eb:b4:e2:8e:
f2:25:32:21:07:c8:0a:7d:70:05:fc:7b:50:f7:eb:
05:5d:78:e1:d8:64:d8:43:2d:3e:2a:c1:10:fe:cc:
69:96:bb:67:02:88:3b:b5:53:e9:83:7b:bd:ec:2a:
e3:74:f8:c7:31:2d:24:01:1b:fb:52:1e:b6:e4:6c:
3b:50:c2:f1:17:bc:b4:a0:94:3d:6a:dc:42:95:6f:
7e:bc:0f:c3:f9:d8:78:c9:75:8d:c0:7a:9d:46:a1:
d0:05:3a:b1:cc:7a:27:fe:cb:2a:8e:f4:ba:9d:e9:
03:f7:48:b6:5a:fd:85:00:cc:e3:93:07:22:27:bf:
99:29:b9:27:ac:8e:29:6b:92:3b:52:f1:81:2e:87:
a8:9c:fd:61:b6:ca:1a:ad:9b:72:8b:ab:d6:0a:a6:
56:c5:75:4f:76:3c:c3:47:87:61:4f:88:c2:3f:70:
7e:0a:0b:5b:81:d8:b6:e9:32:56:05:da:85:94:72:
bb:2d:1a:1d:16:52:e4:97:0a:37:84:a5:4a:84:b5:
67:89:d8:ed:c5:51:eb:13:51:c1:2a:29:9f:f9:f8:
7b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8E:46:4A:17:C0:FA:43:FE:EC:3F:86:6A:86:BB:E5:E3:98:4C:92
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/V45GShfA-kP-7D-Gaoa75eOYTJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.58.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:f7:90:af:b3:6e:d6:e4:62:0a:a2:2c:19:8c:bc:66:af:44:
65:4c:06:ae:a1:be:51:ec:ff:dd:93:0c:6b:c4:fc:a5:48:41:
f8:58:b6:40:a8:80:a5:55:65:6c:09:08:bc:24:2c:3b:28:c4:
fd:e4:89:f3:0a:f2:23:66:a9:fc:47:10:dd:24:7b:f9:20:13:
b9:86:10:ba:6a:9b:64:18:ea:13:1b:f3:03:db:78:60:6b:1e:
7c:9b:69:9b:af:1f:2d:e1:e9:11:9a:06:64:c1:ff:2d:b0:88:
4c:e8:a6:84:ca:e9:33:8d:00:8f:39:b7:98:09:cb:54:a4:89:
bd:b4:a7:10:20:f6:22:09:66:1e:88:4f:5a:d9:27:8b:b3:1d:
55:ce:e3:88:94:b3:e8:cf:4b:ca:24:74:32:37:10:9b:30:a1:
10:3f:77:d4:1a:ed:e8:be:1e:da:49:aa:3e:d1:ee:73:d7:dc:
bd:9a:5a:dc:df:db:bf:3b:bc:af:5d:9b:59:dc:f9:fa:76:07:
c7:87:e3:85:27:a8:4a:a1:be:7d:94:94:14:e5:87:01:db:ee:
e0:5b:26:3d:a7:a8:13:b2:fa:7c:76:fc:4a:06:d5:3a:fa:a7:
56:a3:90:96:0d:48:4e:68:7c:d6:70:c8:d4:2e:f5:90:39:ff:
95:0c:bb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:26 2024 by rpki-client on console-fra.rpki-client.org