Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/32v19w2dbzCUBid-Ej8_7Voka4o.roa
File: 32v19w2dbzCUBid-Ej8_7Voka4o.roa (raw, json)
Hash identifier: dNrTgaXqLzGWIN0FfLIPpOisBqp+vPy9SAmJzkAB+Ds=
Subject key identifier: DF:6B:F5:F7:0D:9D:6F:30:94:06:27:7E:12:3F:3F:ED:5A:24:6B:8A
Certificate issuer: /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Certificate serial: 01856F6FE6E8A61604440057916C15B322D0
Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/32v19w2dbzCUBid-Ej8_7Voka4o.roa
Signing time: Sun 01 Jan 2023 22:24:42 +0000
ROA not before: Sun 01 Jan 2023 22:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211563
IP address blocks: 185.27.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:e6:e8:a6:16:04:44:00:57:91:6c:15:b3:22:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Validity
Not Before: Jan 1 22:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df6bf5f70d9d6f309406277e123f3fed5a246b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:ed:e4:4b:6c:2f:0e:67:e4:89:1e:0a:bc:
8f:3c:fe:55:39:fc:d3:63:47:37:92:f1:43:84:6a:
87:f8:3a:64:27:ad:a9:03:7b:27:37:9b:ed:57:0a:
4b:7e:c0:c1:d6:66:97:e7:3c:78:cd:16:c8:50:2b:
b8:f1:9f:d0:c4:d4:f8:12:91:47:cc:6c:5b:2c:b9:
7d:83:74:80:ed:f6:f2:54:36:68:b8:05:97:33:30:
79:18:c5:d3:12:42:02:8c:d6:5d:c1:b3:85:cf:10:
5f:ed:fe:f6:b5:6e:77:10:a1:32:ee:8e:2e:9c:4a:
1b:0f:41:b1:f5:ee:24:9c:2c:15:48:16:bd:e5:19:
3b:0b:61:61:cc:59:88:ea:c1:a3:8d:56:32:22:9b:
40:e3:05:72:fe:5a:a1:cc:16:3d:b0:72:f9:15:bc:
01:43:d3:3c:c7:78:89:eb:0e:7e:e5:d7:7c:cc:f2:
e1:34:82:87:d6:c4:be:51:84:cf:9e:84:77:db:a6:
69:68:b3:af:4f:e6:7d:1f:c4:28:7f:3e:41:3b:ff:
b6:d9:df:3c:09:65:48:65:42:36:5b:68:74:10:54:
5f:b4:30:9c:8e:0d:0a:eb:e9:29:56:8a:2c:cc:6d:
b7:24:a0:a2:4b:e7:87:07:f5:dd:bd:8b:18:14:1f:
10:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6B:F5:F7:0D:9D:6F:30:94:06:27:7E:12:3F:3F:ED:5A:24:6B:8A
X509v3 Authority Key Identifier:
keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/32v19w2dbzCUBid-Ej8_7Voka4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.82.0/24
Signature Algorithm: sha256WithRSAEncryption
27:a9:a8:0f:63:10:42:c4:f9:1f:af:63:0a:2c:d2:90:94:02:
92:cc:9b:6f:38:c4:40:cf:df:9e:7a:e1:7d:78:e2:61:92:21:
34:5e:b6:d0:54:b6:85:a0:25:b5:1f:e2:65:2b:ca:ca:aa:4e:
c2:dc:e8:12:0a:71:36:e3:e9:08:2b:d4:75:85:92:ac:44:16:
86:05:02:e4:3a:3d:66:80:e5:4f:33:97:4d:46:5d:05:2c:1c:
59:0e:71:11:de:27:04:71:71:7b:87:99:5f:68:27:06:a6:1c:
0f:45:09:9e:f0:54:de:43:bb:df:ed:40:e3:06:bf:60:93:47:
c4:09:b9:3a:2d:34:4c:9b:e6:b9:4c:9c:6d:b8:5a:ee:c7:9e:
df:39:38:1b:cd:a7:da:8e:9f:b1:86:9f:5a:bf:18:f5:1a:53:
f0:03:59:11:5e:0a:54:88:57:dd:44:79:a0:b5:c8:fd:e2:0e:
1a:6d:75:28:34:6b:ec:58:0b:01:2d:ae:49:a7:78:03:85:6c:
57:ad:7e:4f:e1:44:8d:c4:c8:79:e0:35:c9:29:f6:5d:ef:e7:
49:75:62:5b:57:a3:22:f3:20:57:6c:ce:22:2f:88:d0:26:26:
7d:ac:f2:9d:48:16:fe:e1:35:aa:74:bd:da:b1:54:3f:a1:a4:
47:cf:8c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:25 2024 by rpki-client on console-ams.rpki-client.org