Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/sEyX0zrQ-gLIUlJFjt1M9RSitFE.roa
File: sEyX0zrQ-gLIUlJFjt1M9RSitFE.roa (raw, json)
Hash identifier: yU+ORXD+8rbCHSgkGyYJhiayg2Q9cGZdxs2IzfGubj8=
Subject key identifier: B0:4C:97:D3:3A:D0:FA:02:C8:52:52:45:8E:DD:4C:F5:14:A2:B4:51
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 018CC56DEAA84B7A4A02BFD439E4343ABBD1
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/sEyX0zrQ-gLIUlJFjt1M9RSitFE.roa
Signing time: Mon 01 Jan 2024 14:29:24 +0000
ROA not before: Mon 01 Jan 2024 14:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 185.148.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 11:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ea:a8:4b:7a:4a:02:bf:d4:39:e4:34:3a:bb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 1 14:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b04c97d33ad0fa02c85252458edd4cf514a2b451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:85:b6:09:18:00:91:6f:83:c5:bd:72:c7:
f4:3b:f1:79:f2:45:47:55:82:56:de:c3:61:0d:d3:
4a:a7:82:64:60:f0:be:60:67:56:b1:a3:c4:36:58:
9c:47:92:ab:5e:fc:6b:03:f9:82:8d:15:15:34:e9:
ee:8a:95:84:9c:90:af:0b:21:fe:1c:a3:a9:20:a4:
c6:24:ee:78:a0:c0:d4:05:67:9f:84:3c:83:dc:c3:
64:aa:79:49:bd:4b:66:08:95:5e:7b:98:a7:c6:6b:
3b:11:91:03:24:ba:12:e3:32:f2:a0:eb:24:80:48:
f0:20:6e:10:7d:d2:ca:47:4b:1c:b5:89:39:65:e1:
c3:63:f3:4e:78:4e:58:0a:a6:1b:1c:8a:0c:87:d7:
b2:ee:ba:ad:7a:37:dc:a9:51:a1:93:e3:ca:2c:d8:
e6:b1:76:99:06:3e:04:9d:32:7c:2c:bd:71:96:10:
ab:71:aa:7d:1d:31:cb:2d:b0:d7:1e:d9:84:15:e1:
76:45:22:04:34:06:18:a7:7a:ac:c6:07:30:db:60:
15:1a:d6:0f:03:e3:27:26:11:6e:ea:73:5b:04:f2:
2c:4b:6d:39:25:eb:c0:b6:74:b5:fe:ad:7e:ec:e1:
18:ce:8a:eb:f6:2d:83:cf:5c:7b:ba:7d:37:54:c8:
d4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4C:97:D3:3A:D0:FA:02:C8:52:52:45:8E:DD:4C:F5:14:A2:B4:51
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/sEyX0zrQ-gLIUlJFjt1M9RSitFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.243.0/24
Signature Algorithm: sha256WithRSAEncryption
39:85:60:b8:23:5f:62:0f:4f:80:09:94:67:89:53:cd:13:42:
2f:11:e5:f2:8a:3f:2e:c7:3c:84:a7:7c:0e:79:87:c2:8d:5a:
4a:dc:4e:ff:56:42:2f:53:f8:9e:ff:67:1f:d7:20:03:16:65:
9e:43:1c:3c:6c:78:f8:ef:41:9a:34:57:86:11:ec:b4:40:13:
36:51:e9:9c:2b:ab:0e:37:92:45:07:9c:74:8c:03:44:44:70:
f1:c6:78:8e:5c:f9:3c:ab:7a:f6:af:18:0a:61:81:08:96:5a:
5e:38:fb:ca:be:e9:8b:04:75:7d:e8:1d:6f:a0:cd:fc:4b:bc:
76:60:d0:60:26:89:f4:ce:dd:d5:98:64:7e:b3:f8:ad:9b:59:
6d:b0:07:ee:4b:6c:1f:2e:6a:a4:4f:8c:38:0b:35:4c:59:f0:
19:57:6a:f1:da:b1:2c:3d:be:a1:fc:2e:6f:b4:c3:96:9e:5d:
18:7f:5f:31:db:1c:ba:65:22:b2:6c:7b:54:2e:f6:e7:cf:e5:
e3:5b:60:a9:ee:73:98:c9:6c:90:20:0f:97:09:ae:20:8d:1c:
80:73:18:4d:0c:fb:1c:e8:68:53:9d:4c:b1:bb:da:87:fc:76:
23:60:d5:c9:95:42:55:03:f7:9a:42:40:5d:d9:8e:f7:a0:38:
db:e9:b3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 14:29:22 2024 by rpki-client on console-fra.rpki-client.org