Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/_onfgWNrqaraXukg5o5IA-3ugu8.roa
File: _onfgWNrqaraXukg5o5IA-3ugu8.roa (raw, json)
Hash identifier: +sxlUeGiQPg3Q+yguNc5QQj1Ha3i0WnWimeUhMVpmiA=
Subject key identifier: FE:89:DF:81:63:6B:A9:AA:DA:5E:E9:20:E6:8E:48:03:ED:EE:82:EF
Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial: 01856C0106C671CE4466F50839633ECB04AB
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/_onfgWNrqaraXukg5o5IA-3ugu8.roa
Signing time: Sun 01 Jan 2023 06:24:44 +0000
ROA not before: Sun 01 Jan 2023 06:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202013
IP address blocks: 185.153.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:06:c6:71:ce:44:66:f5:08:39:63:3e:cb:04:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Validity
Not Before: Jan 1 06:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe89df81636ba9aada5ee920e68e4803edee82ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:24:6c:1d:d2:d0:0a:4d:97:b9:81:c8:13:cd:
54:f1:46:af:ca:ed:b9:ee:cf:17:fe:6d:52:80:c9:
79:59:5c:08:da:9c:be:6c:22:7d:a8:b0:f1:32:c8:
82:b8:9c:ee:d3:a2:43:5e:f3:c6:4a:fc:97:dd:88:
83:69:53:88:47:e6:ee:9d:13:51:3c:49:ab:79:07:
af:a0:11:2c:e2:77:27:b1:df:fc:a2:be:3b:36:5d:
49:d4:8d:19:e5:f3:9b:98:a5:c2:50:82:29:8a:cc:
bd:0e:8e:7f:8b:d6:a2:24:74:f4:6e:73:5b:b6:f5:
2b:ac:9b:88:8e:ae:f8:26:d0:39:52:27:15:53:bd:
bd:03:b3:4f:bb:59:df:86:60:58:f7:63:e8:d2:7e:
db:0b:f9:0d:4c:08:e7:6b:d8:b1:e8:bd:0a:9f:d4:
c4:95:0b:e9:0a:0a:35:88:6e:33:1a:54:81:3a:dc:
9d:b7:29:e0:31:79:b8:6d:e9:89:1c:b6:fb:29:6f:
b6:84:33:c3:54:c3:59:3b:37:55:05:7f:4b:3c:47:
76:89:ee:39:20:b5:07:d2:39:e8:f9:d9:f8:f0:78:
d6:53:bf:45:a1:3b:7d:cc:4d:2e:12:9b:bf:87:25:
cf:c7:dd:0b:f2:20:c6:a7:3f:78:0f:25:f5:b1:c3:
b1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:89:DF:81:63:6B:A9:AA:DA:5E:E9:20:E6:8E:48:03:ED:EE:82:EF
X509v3 Authority Key Identifier:
keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/_onfgWNrqaraXukg5o5IA-3ugu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.170.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a3:d3:fa:bd:75:19:f8:d1:b4:81:80:4a:77:93:5d:fd:fb:
bb:b8:fc:02:47:a3:24:94:99:95:f6:8f:ce:7b:1b:59:20:33:
9d:5a:81:da:e1:81:df:bf:3a:68:27:06:66:82:2c:27:74:20:
1a:38:1c:93:40:30:d1:d3:13:30:96:42:42:63:68:30:9d:80:
18:1d:23:7d:59:c6:e8:af:16:e5:ed:92:12:16:43:ac:ae:08:
60:f5:5e:c1:46:8b:3b:ac:bd:fa:dc:89:19:06:b4:de:c0:bd:
a0:b6:02:2e:80:e5:50:58:8d:5f:9d:9f:31:19:41:df:4c:0d:
12:dd:0f:07:64:82:64:68:80:c5:42:ff:9a:fb:d5:61:cf:e0:
72:d2:30:20:33:8d:4b:8d:61:2b:09:df:cc:a3:a9:66:83:6c:
fb:5a:77:53:76:dc:4a:73:50:88:ab:e6:dc:c9:1e:72:21:28:
d5:5c:9b:e1:33:f2:93:1a:20:4c:99:9c:a5:2c:60:63:52:89:
76:4f:86:27:a6:52:a7:f3:f7:74:c7:ab:f0:32:de:af:2c:60:
89:08:f5:1e:c5:9f:54:0c:52:6b:c8:94:a8:85:fd:03:f8:ec:
44:1b:8a:f9:ba:26:a7:5e:a9:10:0b:db:bd:d3:fd:74:88:d8:
e0:17:4b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:05 2024 by rpki-client on console-fra.rpki-client.org