Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/82Y8aFgtRSrDlwqax3rM9CPQfG4.roa
File: 82Y8aFgtRSrDlwqax3rM9CPQfG4.roa (raw, json)
Hash identifier: jLMktWrKpPey8e+VPwCQV9/Z4Vq7OI9sCmB4p2RAobM=
Subject key identifier: F3:66:3C:68:58:2D:45:2A:C3:97:0A:9A:C7:7A:CC:F4:23:D0:7C:6E
Certificate issuer: /CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Certificate serial: 0187ACFAAA821DE4DBDE56C8C5C3BD1D9F28
Authority key identifier: 57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/82Y8aFgtRSrDlwqax3rM9CPQfG4.roa
Signing time: Sun 23 Apr 2023 07:18:41 +0000
ROA not before: Sun 23 Apr 2023 07:18:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209898
IP address blocks: 185.155.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ac:fa:aa:82:1d:e4:db:de:56:c8:c5:c3:bd:1d:9f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Validity
Not Before: Apr 23 07:18:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3663c68582d452ac3970a9ac77accf423d07c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ea:94:2e:9d:44:0b:ab:e8:83:3f:46:64:22:
27:8f:db:c4:e6:85:75:67:75:3f:77:dc:fc:84:69:
19:4f:73:05:6a:36:bd:32:a4:53:ca:60:3c:c2:1d:
2b:b5:f4:f8:b0:8f:a0:a6:7c:f1:e2:4b:2b:ad:7d:
15:c0:9c:ba:64:e3:71:43:3c:63:e8:e5:28:51:e0:
c0:30:02:1a:18:7e:e6:9a:2c:a4:c9:08:af:43:b9:
b7:21:fb:24:ea:ce:92:70:37:84:6b:15:cb:3b:a7:
cb:23:6c:8e:11:ef:e6:96:e1:62:5c:18:dd:51:94:
9b:36:c5:9c:2b:a8:d7:54:3d:fb:bf:4c:52:ad:69:
48:e3:f5:40:1f:ed:14:98:37:8b:19:2d:44:4a:f5:
6b:70:fa:3a:69:eb:a1:a1:b1:43:65:3b:f9:bb:c9:
b4:2e:1d:9b:80:1b:7c:18:df:bd:3a:18:e2:6a:58:
b8:aa:5c:94:33:13:78:93:ec:e4:3e:0b:d6:38:23:
6f:cd:74:47:47:2f:fb:cf:7a:18:0a:8a:0c:97:bd:
af:c8:0c:7c:ac:01:bf:88:c3:f3:22:17:45:a2:31:
b7:aa:48:c8:fb:a1:30:91:1c:1d:a8:fa:ff:10:49:
85:5e:e7:70:aa:1f:d2:8b:68:e2:69:d4:be:28:b6:
c2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:66:3C:68:58:2D:45:2A:C3:97:0A:9A:C7:7A:CC:F4:23:D0:7C:6E
X509v3 Authority Key Identifier:
keyid:57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/82Y8aFgtRSrDlwqax3rM9CPQfG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.29.0/24
Signature Algorithm: sha256WithRSAEncryption
64:aa:4e:af:91:15:e8:0a:b5:03:53:12:1a:65:15:24:28:8e:
db:9d:fb:69:e4:bf:9a:90:e1:31:26:6c:1f:61:05:09:15:48:
21:8f:5a:e9:1d:6a:1f:c6:88:b0:c2:6a:c5:9b:be:52:98:d3:
9f:80:79:88:b9:5e:5a:de:45:c1:d2:5b:3a:5d:03:17:58:09:
77:fc:bf:4c:8f:76:27:d5:70:eb:55:48:e4:d5:48:22:18:bb:
b5:43:19:d6:2b:bb:5a:3e:35:9c:74:67:84:b6:84:30:7a:ac:
83:7c:74:fb:ea:fd:6c:ec:ff:80:52:8a:86:e6:e9:a2:81:4b:
48:9b:4a:1f:ae:93:5a:c1:6a:8f:d5:71:89:47:05:5b:38:be:
96:d6:5c:18:07:40:61:c5:0c:62:79:5f:9e:11:6b:a8:00:df:
81:17:67:66:4f:4d:50:9b:22:d0:ca:22:15:87:e9:e6:69:3f:
bb:60:55:bd:56:09:e1:9d:76:c2:5c:bc:ce:38:c5:e8:47:e5:
db:61:e4:35:db:9d:ed:21:16:a5:b2:b2:20:0d:64:cb:09:40:
fa:d7:3e:46:60:1c:b1:b2:24:13:43:a9:8d:ef:49:21:6e:1d:
12:b0:82:9f:71:1c:24:ab:3d:14:4a:16:6a:0a:cc:19:6b:bf:
1a:cb:0c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:25 2024 by rpki-client on console-fra.rpki-client.org