Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/E0sX2dBR0qDaJfV0LLBrZGgSsWA.roa
File: E0sX2dBR0qDaJfV0LLBrZGgSsWA.roa (raw, json)
Hash identifier: ViPw0WO0/x95DFMg1Wl0lCfHli94Gy7VfDd56Oj5mI0=
Subject key identifier: 13:4B:17:D9:D0:51:D2:A0:DA:25:F5:74:2C:B0:6B:64:68:12:B1:60
Certificate issuer: /CN=3cd37ec23719b2f142f46e6f3317664034adf598
Certificate serial: 018F481303C3629DAD23C667CFD6308B8160
Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/E0sX2dBR0qDaJfV0LLBrZGgSsWA.roa
Signing time: Sun 05 May 2024 09:25:56 +0000
ROA not before: Sun 05 May 2024 09:25:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24631
IP address blocks: 185.170.236.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 May 2024 12:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:48:13:03:c3:62:9d:ad:23:c6:67:cf:d6:30:8b:81:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598
Validity
Not Before: May 5 09:25:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=134b17d9d051d2a0da25f5742cb06b646812b160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:70:02:b3:c6:b4:d9:23:16:fb:48:85:98:7e:
cd:07:f5:c5:9f:1d:f6:5e:bf:18:8c:00:a3:a3:41:
d2:1b:36:2a:ba:fd:18:c4:02:c0:9e:e6:0a:09:91:
ed:8e:a6:da:10:56:76:d1:04:82:e8:a4:3d:97:57:
8e:1a:7b:bc:a3:57:51:d8:ca:e8:32:f1:b1:72:78:
3c:15:f3:ed:ff:4a:03:7c:55:dd:a3:f8:3e:dc:e9:
d5:71:9c:d8:7f:b2:6a:34:b4:f3:10:45:6d:34:5a:
13:ac:b1:e4:8e:25:cd:54:9a:44:4a:56:e4:16:03:
9a:c9:01:8d:87:6f:fd:f1:42:5d:d2:5e:6c:d3:52:
49:2b:45:1d:ec:e4:0e:44:d4:9d:34:38:79:8c:06:
b1:3d:75:e9:08:88:1a:e3:74:ed:5c:19:e4:f8:b4:
57:9f:6b:fb:13:cd:8b:84:f4:55:7d:6b:9f:2f:59:
cb:30:c1:72:22:b3:ae:1d:9d:a1:02:5d:6d:f7:5d:
68:b9:11:7b:5f:a2:f3:35:b6:c9:99:80:34:2a:ea:
50:92:b0:ea:c6:9e:81:f7:2b:fb:03:69:3c:50:d4:
f6:e0:42:da:d8:50:ac:95:e8:95:08:b7:b7:d7:a1:
47:a2:d3:6c:4e:f8:be:21:62:35:c3:35:96:a1:0c:
b9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4B:17:D9:D0:51:D2:A0:DA:25:F5:74:2C:B0:6B:64:68:12:B1:60
X509v3 Authority Key Identifier:
keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/E0sX2dBR0qDaJfV0LLBrZGgSsWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.236.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:4d:b6:ba:6d:00:b4:69:54:c9:e5:8e:79:8e:fe:36:48:b9:
e3:94:c6:4e:79:6c:1f:f7:98:d1:1b:71:9b:4d:58:1c:e7:55:
b2:3b:4a:fa:59:ce:39:09:47:81:16:21:5b:7e:87:0b:b0:b3:
07:dc:d2:61:17:bd:b1:0a:5b:30:e1:4f:35:cd:1b:b8:64:42:
e5:f1:e4:57:d5:79:0f:90:a8:1a:df:77:e1:8b:b5:28:4a:c5:
7b:67:4e:c7:7f:0d:0f:55:3f:9e:48:13:51:23:ca:43:12:2e:
30:30:33:1c:8d:2b:58:7c:42:34:eb:7f:f8:0f:90:66:5e:41:
fa:00:03:b5:90:4c:aa:3a:b1:47:2e:a1:b8:b6:df:6b:7b:d1:
9a:95:1b:3e:71:60:3a:52:7a:76:7f:20:84:83:c5:f1:8e:4d:
61:6c:9a:b6:a7:95:da:b7:8a:d0:34:62:9f:73:56:d9:ef:51:
33:2b:fb:09:36:f5:57:aa:6c:87:76:25:8e:16:56:4d:42:e8:
77:6e:29:6a:10:7c:ac:10:f3:b4:18:d6:29:07:16:72:b6:bd:
52:bc:7e:96:40:88:3f:84:b6:60:8e:b2:5b:6f:f1:18:c4:57:
32:de:4a:c6:62:fa:85:5a:b4:fb:4c:68:74:1c:ab:20:da:f8:
e1:49:cf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 14:17:12 2024 by rpki-client on console-ams.rpki-client.org