Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/slPQKKmTW0CJls8wgwdCJZrW_FY.roa
File: slPQKKmTW0CJls8wgwdCJZrW_FY.roa (raw, json)
Hash identifier: wD86OythKKGQQsRL8LGxR7NDRsfFsDyyQWa6b5vLfuc=
Subject key identifier: B2:53:D0:28:A9:93:5B:40:89:96:CF:30:83:07:42:25:9A:D6:FC:56
Certificate issuer: /CN=278617740ecd95b704da97a5f9e53c031144426b
Certificate serial: 01856F9DF6269B01827D89FA715326D254AF
Authority key identifier: 27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/slPQKKmTW0CJls8wgwdCJZrW_FY.roa
Signing time: Sun 01 Jan 2023 23:15:01 +0000
ROA not before: Sun 01 Jan 2023 23:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212886
IP address blocks: 185.236.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:f6:26:9b:01:82:7d:89:fa:71:53:26:d2:54:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278617740ecd95b704da97a5f9e53c031144426b
Validity
Not Before: Jan 1 23:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b253d028a9935b408996cf30830742259ad6fc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a8:ac:44:8e:d7:1e:79:f2:ae:2c:c5:6e:91:
b6:a1:40:14:39:bf:af:3e:51:40:86:eb:f6:73:18:
61:6c:1b:d8:11:25:06:4c:a5:97:67:cc:26:fd:0c:
1e:d6:91:3c:b0:52:d7:20:78:01:38:ec:8a:a9:6d:
7c:ad:df:eb:66:a6:06:3c:00:76:e2:b7:60:1a:14:
d1:71:ea:e5:94:1c:30:bc:60:7d:14:9f:25:9b:95:
e5:12:b8:31:a1:36:a9:8f:e8:1b:2e:e0:f5:c8:f3:
8c:08:46:af:67:c7:97:b4:1b:e2:ca:a7:a9:96:52:
08:85:fe:92:5e:7c:9d:a8:99:0b:e0:57:a0:53:ee:
6d:06:26:ce:73:35:dc:46:e3:cd:c9:1c:94:b1:16:
1b:af:e6:14:30:c0:b6:97:6d:47:f6:3a:7f:c9:06:
00:84:d5:41:27:a2:03:94:cd:12:48:29:7b:cf:fc:
6d:6f:2d:0d:11:43:4c:6b:4c:fb:df:94:28:b2:91:
a7:ee:38:38:2b:0c:6b:2a:90:4b:f5:16:1e:75:e8:
f8:99:03:45:08:ea:13:a6:eb:9e:af:71:e6:a5:13:
b5:a2:1a:df:bb:27:1d:d0:f4:4a:50:a2:1f:3d:b9:
9b:23:2b:85:f4:be:91:c0:aa:59:5b:53:de:db:6d:
1d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:53:D0:28:A9:93:5B:40:89:96:CF:30:83:07:42:25:9A:D6:FC:56
X509v3 Authority Key Identifier:
keyid:27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/slPQKKmTW0CJls8wgwdCJZrW_FY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.128.0/24
Signature Algorithm: sha256WithRSAEncryption
85:20:88:ba:9d:2c:c5:9b:63:f5:3f:67:eb:38:9c:10:12:75:
b1:f4:b4:08:c1:92:11:97:10:78:52:7d:8f:26:0e:56:e6:c7:
da:51:42:6f:a0:d3:42:62:36:da:dd:08:32:f1:b2:77:53:58:
5c:03:a9:6c:53:6f:f3:c0:f9:71:4e:f1:97:a2:de:41:4d:e0:
61:c0:7a:7c:5c:4b:51:c8:e9:cb:9d:09:5c:8d:19:27:db:88:
4b:3f:e0:7d:49:73:43:59:14:96:0a:43:b2:68:c4:ef:ab:46:
2a:19:33:13:10:7e:18:70:04:56:df:fd:a0:d8:8a:9b:ac:2f:
0f:6e:44:4b:69:ac:96:98:69:a0:b1:0e:36:8d:36:9b:2c:02:
ab:92:39:59:24:e9:01:3c:09:19:41:5b:12:16:b0:77:47:89:
cb:fd:50:c0:11:e2:a7:26:d0:c6:e8:fc:cc:4d:6a:ef:6a:28:
6a:79:9a:19:30:d4:8d:11:c9:a9:74:66:8d:1b:37:be:41:58:
af:dc:c6:f3:3b:bf:4d:2b:01:2d:5d:a5:3c:32:5a:60:42:33:
d7:7d:c9:e5:9c:fb:f4:99:50:0d:e8:8b:8c:9e:2a:5f:4a:a5:
e9:67:88:14:e1:60:49:aa:6e:67:a7:a7:38:6f:54:fd:c5:3f:
47:5a:02:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:00 2024 by rpki-client on console-fra.rpki-client.org