Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/baJQYC8Xd8XyleZhnfXGENBd8YY.roa
File: baJQYC8Xd8XyleZhnfXGENBd8YY.roa (raw, json)
Hash identifier: Cp+FtXdOvlmvZUitFVr9O4TtnbeBAtBptji72uwd+lA=
Subject key identifier: 6D:A2:50:60:2F:17:77:C5:F2:95:E6:61:9D:F5:C6:10:D0:5D:F1:86
Certificate issuer: /CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Certificate serial: 01856F4B4A0B84EEA3056EBC3B0687AC473C
Authority key identifier: 57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/baJQYC8Xd8XyleZhnfXGENBd8YY.roa
Signing time: Sun 01 Jan 2023 21:44:43 +0000
ROA not before: Sun 01 Jan 2023 21:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213081
IP address blocks: 185.155.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Apr 2023 07:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:4a:0b:84:ee:a3:05:6e:bc:3b:06:87:ac:47:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Validity
Not Before: Jan 1 21:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6da250602f1777c5f295e6619df5c610d05df186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:3b:1b:c5:69:49:49:8c:b6:8d:a5:10:c6:
e4:1e:77:62:7c:0b:fc:58:79:c3:10:f3:c6:e5:60:
91:73:fd:bc:39:13:35:82:7b:11:fc:cf:00:d3:9c:
95:0d:0e:70:f4:c2:01:0a:d4:2a:2a:35:e4:fe:0f:
cd:9f:ff:06:13:d9:66:8e:4d:e7:ea:25:65:30:4e:
86:73:c4:e1:a6:db:d3:ca:9d:06:83:8c:a7:62:7a:
e6:29:b6:31:fb:7e:a9:fa:8a:f0:05:73:86:4c:98:
ca:f5:33:da:01:07:8c:8c:74:ea:4d:2f:70:ab:b2:
29:0e:6b:1d:d6:c2:45:a7:ef:d0:57:7d:88:6c:f8:
da:3e:8a:bc:17:7d:cc:2f:2d:ef:a2:9b:3a:fc:e9:
bf:25:86:7f:21:9b:74:91:91:90:d4:6f:51:41:95:
53:13:ef:60:98:81:9d:68:c8:b6:2f:79:86:f1:55:
4b:25:c7:b8:71:4e:20:d3:ec:62:c1:fb:7a:c1:26:
8d:1e:b5:ab:30:b5:f7:eb:71:a8:6e:a2:1c:bf:6c:
e8:61:69:1c:ec:2d:4b:af:af:b1:70:1a:bd:d6:36:
97:d4:fe:47:2f:59:a0:81:e0:b0:04:6d:14:fd:0a:
af:46:af:8c:9b:f7:bc:9a:9b:e0:53:23:5d:01:5f:
5c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A2:50:60:2F:17:77:C5:F2:95:E6:61:9D:F5:C6:10:D0:5D:F1:86
X509v3 Authority Key Identifier:
keyid:57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/baJQYC8Xd8XyleZhnfXGENBd8YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.31.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:29:d6:bd:ab:ce:33:cf:72:f5:72:b3:89:83:5e:fb:be:8f:
18:f0:53:75:0c:61:b5:bb:ee:aa:b4:df:d5:6e:2e:65:40:91:
37:6b:fe:be:f6:99:7b:82:26:be:ab:0e:d6:01:08:4f:a7:5d:
c7:a5:c9:a4:af:1f:fa:cd:3d:fc:e5:76:6e:00:5d:66:d3:ad:
a0:74:ec:14:8a:22:a8:bb:5e:ec:43:0f:2e:26:a8:c0:d9:3f:
59:56:82:b1:e9:e9:c2:71:4d:ed:e1:51:a0:52:47:9b:2e:5e:
76:c9:1b:ec:4a:ca:3a:e3:b0:86:b7:39:3d:b0:2c:0b:14:b1:
e5:a0:31:92:27:0e:35:df:8f:29:82:f6:f2:25:61:00:74:3e:
be:50:15:27:5a:2c:0f:b1:4d:d8:e2:2b:d9:2d:03:5a:6b:bf:
eb:a0:84:72:00:e2:f9:7d:23:74:38:70:6a:c7:4f:bf:fc:9b:
cd:a5:11:6c:6e:61:10:5a:95:bf:de:89:c1:7c:05:56:05:cc:
38:61:da:d0:0b:6f:f4:1b:d0:e6:24:c4:21:27:e7:0a:fd:95:
24:a3:75:f6:4f:62:c8:b9:d7:a6:d6:50:8a:e6:56:f7:e3:18:
e1:a0:8d:6a:f5:2b:be:52:72:96:d5:ea:fa:1c:3f:25:ec:9b:
20:6f:e8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:25 2024 by rpki-client on console-fra.rpki-client.org