Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/Aog8gPr0Af5ntq5ow2X_x_f2Hzg.roa
File: Aog8gPr0Af5ntq5ow2X_x_f2Hzg.roa (raw, json)
Hash identifier: IQpDvq4sCTBQ6bbfrtQcRu+BZCqMptp/8Gvk4CNI+6Q=
Subject key identifier: 02:88:3C:80:FA:F4:01:FE:67:B6:AE:68:C3:65:FF:C7:F7:F6:1F:38
Certificate issuer: /CN=b79de9458d190e634329f9df1503b5222c1624ee
Certificate serial: 0188E24E84084CBCAAB9A362237E91973BDD
Authority key identifier: B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/Aog8gPr0Af5ntq5ow2X_x_f2Hzg.roa
Signing time: Thu 22 Jun 2023 08:52:56 +0000
ROA not before: Thu 22 Jun 2023 08:52:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61076
IP address blocks: 185.231.52.0/24 maxlen: 24
185.231.53.0/24 maxlen: 24
185.231.54.0/24 maxlen: 24
185.231.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Jun 2023 11:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e2:4e:84:08:4c:bc:aa:b9:a3:62:23:7e:91:97:3b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79de9458d190e634329f9df1503b5222c1624ee
Validity
Not Before: Jun 22 08:52:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02883c80faf401fe67b6ae68c365ffc7f7f61f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:f6:28:6e:95:17:97:cf:ee:41:7b:a1:fc:
a8:06:4e:d1:62:5f:11:20:c7:d0:4c:0b:1b:82:c1:
78:f0:0c:b0:28:8f:70:5e:39:08:55:2f:6f:cd:77:
92:74:c8:c2:84:cd:26:bb:41:5c:4c:4c:20:c4:fc:
3a:65:48:ea:16:b0:92:5a:f0:02:09:0d:2e:81:a4:
63:35:ec:87:db:cc:5c:57:b4:44:3d:55:9a:2b:1d:
ea:ef:2f:4c:06:a1:7f:fb:12:30:32:34:f0:81:1d:
c1:44:f1:68:08:66:2d:4c:ca:cd:d1:1b:5e:6c:01:
56:a7:1c:90:85:46:d6:be:5d:6c:b6:20:40:06:eb:
0f:16:41:e0:a5:f2:ba:31:0e:e6:39:3d:ee:17:7b:
ac:57:42:c6:d3:75:88:ff:43:63:94:2b:d6:24:28:
48:c5:ce:f2:3a:3a:72:dd:84:1f:d3:62:67:2c:08:
7b:57:b2:3f:cf:41:ff:b1:cd:62:6b:49:53:0c:48:
89:b2:0f:a1:ba:78:9e:b8:79:b5:3e:d7:2d:3c:ab:
61:8f:da:24:9e:8c:8e:1c:ee:b4:48:08:4f:8c:7f:
da:fd:97:ab:99:d8:ef:15:37:68:f7:d7:dc:ee:c9:
d1:bf:08:b5:76:b9:d8:2e:78:f0:59:ff:09:c4:88:
66:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:88:3C:80:FA:F4:01:FE:67:B6:AE:68:C3:65:FF:C7:F7:F6:1F:38
X509v3 Authority Key Identifier:
keyid:B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/Aog8gPr0Af5ntq5ow2X_x_f2Hzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.52.0/22
Signature Algorithm: sha256WithRSAEncryption
08:86:33:95:62:cc:36:de:78:d3:1d:a7:60:7c:a3:7d:47:b7:
a0:fe:4c:6a:bb:ac:6d:6f:05:f1:8e:de:d3:6b:1b:df:44:ef:
13:11:c4:17:06:b2:b8:84:0a:d4:e4:bc:49:4e:c3:52:21:37:
f6:9d:09:f3:31:43:2f:f9:e6:8a:7b:53:f6:00:b8:a5:33:07:
74:da:e6:5b:b8:0a:a5:e5:6a:d8:7b:76:65:46:88:57:e5:f3:
98:9a:f7:f5:d1:71:60:b7:ad:83:35:e8:5f:23:be:84:67:cb:
81:8e:53:f1:30:17:f4:62:13:ee:7e:b6:fc:74:87:fa:34:c3:
44:8a:50:17:7b:a4:7f:61:60:03:62:c0:a5:87:73:84:7c:3b:
cf:cd:e4:cd:62:36:ac:fa:68:0d:44:a4:47:9f:6c:59:92:9a:
5d:2b:0f:92:cc:34:59:a9:f0:4d:47:18:2d:ea:42:e5:56:e0:
b7:71:e1:92:6a:3e:9e:dc:a9:88:2f:94:f1:4f:39:71:9e:d3:
bd:b6:93:43:51:28:68:63:0c:31:3e:75:f5:e3:12:66:22:14:
46:60:7c:07:2b:bf:d5:41:1d:11:61:65:58:52:5b:37:39:a2:
68:dd:4f:4b:ff:6c:8b:a5:a7:8c:e3:51:be:38:71:c0:9e:c5:
c8:e6:6e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:45 2024 by rpki-client on console-fra.rpki-client.org