Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/5DEoqC7gkGp_AAYBwES4c68RF38.roa
File: 5DEoqC7gkGp_AAYBwES4c68RF38.roa (raw, json)
Hash identifier: MCKGOsxPMB19tKrJK3lefPBuy3+VvrJSXTHJ7m93ZFg=
Subject key identifier: E4:31:28:A8:2E:E0:90:6A:7F:00:06:01:C0:44:B8:73:AF:11:17:7F
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 018E1894E2DE2D893116A3039CFF20DE31E8
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/5DEoqC7gkGp_AAYBwES4c68RF38.roa
Signing time: Thu 07 Mar 2024 11:03:14 +0000
ROA not before: Thu 07 Mar 2024 11:03:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58128
IP address blocks: 185.155.204.0/24 maxlen: 24
185.155.205.0/24 maxlen: 24
185.155.206.0/24 maxlen: 24
185.186.180.0/24 maxlen: 24
185.186.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 13:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:94:e2:de:2d:89:31:16:a3:03:9c:ff:20:de:31:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Mar 7 11:03:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e43128a82ee0906a7f000601c044b873af11177f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c6:4e:51:91:b2:e7:02:5e:d3:07:39:66:72:
61:70:7a:80:ff:cf:0b:92:fe:e3:2a:ee:ef:c0:de:
f3:f4:a3:1f:fd:aa:f5:ef:2e:6a:f5:23:78:dc:75:
b3:9c:0c:b2:d4:07:30:6e:61:cb:26:65:91:fa:76:
b6:1e:08:b7:8d:36:92:fb:c7:0a:13:a7:69:e2:da:
10:ca:f8:b3:eb:57:3d:7d:47:c5:82:be:4f:25:38:
91:4d:cb:00:d0:ea:ea:1c:03:34:e3:d7:97:3e:b0:
fa:99:c1:6a:7f:49:36:15:83:0c:a1:cb:57:28:e6:
b0:86:7e:4b:da:e9:35:af:ac:fe:a3:35:ac:9e:51:
72:c8:90:79:2e:1f:9f:64:82:f6:08:a6:e5:05:78:
9d:63:29:c7:86:38:d9:c5:90:43:6f:43:45:18:51:
4a:fb:9b:30:fb:87:9a:2d:b3:c4:a0:56:c0:4b:36:
02:2a:7c:2b:0a:d0:d4:8c:35:0f:57:a7:14:85:50:
bd:5c:b5:18:f4:ec:c6:82:96:2d:17:47:d9:13:95:
3c:f5:b5:a9:75:87:08:cc:53:a4:44:fe:49:ae:37:
04:cd:9f:93:3c:73:61:54:31:72:3c:b0:d1:9d:b5:
a9:80:9a:46:b4:de:70:c7:b4:e3:72:da:96:0a:26:
36:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:31:28:A8:2E:E0:90:6A:7F:00:06:01:C0:44:B8:73:AF:11:17:7F
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/5DEoqC7gkGp_AAYBwES4c68RF38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.204.0-185.155.206.255
185.186.180.0/23
Signature Algorithm: sha256WithRSAEncryption
15:2a:0e:0f:87:ad:05:b9:e1:12:a4:9e:9e:d3:05:bb:8d:51:
0b:92:19:0c:36:a9:e7:e7:9a:48:0b:5f:26:74:3b:3a:cf:a0:
db:35:69:74:17:ef:e6:24:7c:5e:ad:99:cf:d2:6a:b0:c4:ed:
03:12:29:8a:ea:07:b7:bc:0f:6d:46:4d:f8:26:fa:6f:4b:12:
ef:25:c3:cd:06:a6:64:c2:a0:55:da:77:44:bf:42:56:5b:f0:
62:b0:b9:31:da:e3:f7:56:48:76:96:94:5e:9e:59:92:d5:12:
94:3a:06:e3:ae:97:12:45:c5:e6:b0:9c:05:96:a1:42:af:a1:
d2:2a:49:7f:72:01:6e:34:2a:69:08:e9:0d:c3:1a:1a:63:07:
2a:2c:1e:f7:2f:af:e3:c5:1f:3f:5c:e0:02:b0:7f:53:1c:af:
95:be:39:76:dd:6d:2e:66:e7:7c:6f:29:28:7c:c4:01:47:15:
98:58:d6:57:12:2f:11:0d:49:dd:65:44:c7:c7:35:7a:97:6a:
c6:f8:2c:0c:3c:b4:d0:e7:b9:7b:71:25:a7:e3:bf:8b:d2:db:
2f:40:81:41:a0:df:17:59:e7:74:91:6e:48:dc:5b:aa:ca:82:
6a:bc:74:0a:7c:6c:60:b5:e4:28:10:21:92:26:ad:43:1e:4d:
48:8b:f4:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:08 2024 by rpki-client on console-ams.rpki-client.org