Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/ODsqpXHCSVPHta6-fGS3WeHZniI.roa
File: ODsqpXHCSVPHta6-fGS3WeHZniI.roa (raw, json)
Hash identifier: zr1NXPeUDQDW6nBWDJM1XdBhbm1lj9uTGuGALFZS5gM=
Subject key identifier: 38:3B:2A:A5:71:C2:49:53:C7:B5:AE:BE:7C:64:B7:59:E1:D9:9E:22
Certificate issuer: /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial: 018810119B53DC51DBD934FEC9CB735CA566
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/ODsqpXHCSVPHta6-fGS3WeHZniI.roa
Signing time: Fri 12 May 2023 13:06:09 +0000
ROA not before: Fri 12 May 2023 13:06:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 185.190.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Sep 2023 09:09:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:10:11:9b:53:dc:51:db:d9:34:fe:c9:cb:73:5c:a5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
Validity
Not Before: May 12 13:06:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=383b2aa571c24953c7b5aebe7c64b759e1d99e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:01:15:6e:0c:bf:d1:13:10:5e:7f:de:8a:
60:3b:c3:e9:6c:8b:fd:69:d6:5e:b9:f9:eb:72:aa:
f8:66:39:a7:1b:83:cb:79:e0:a9:3a:f7:9f:8d:c9:
26:d4:2d:0c:77:b8:ea:fb:0b:fb:42:89:ba:c8:30:
38:39:8a:1b:14:2e:6e:2b:66:8a:6a:a2:45:40:d7:
be:83:0b:17:9c:e5:c2:7d:ad:c2:43:75:4b:67:e4:
f6:1a:f8:40:26:e8:fc:eb:4d:9f:07:3c:06:f8:da:
95:4d:39:a2:23:27:cf:a0:46:f4:ba:f5:db:27:90:
2c:6d:59:bf:e9:49:81:e2:69:6a:22:16:7f:be:f6:
97:1d:c6:c3:65:4d:bf:89:04:b5:c6:a8:ab:f4:ea:
08:35:11:ce:94:c0:db:ab:6c:de:53:f6:6e:fe:89:
7c:d8:74:e4:53:a3:33:07:09:ca:90:d2:b2:cb:14:
9e:86:c2:38:09:87:d3:fb:7c:32:c3:6b:00:93:d0:
73:bd:c9:45:70:ab:56:d5:91:0f:15:ec:c5:d5:63:
bb:b2:c1:39:17:57:46:97:0a:12:9b:0a:90:1e:81:
b4:35:76:de:3d:8a:5c:53:48:b1:67:51:d6:ba:63:
20:f4:d7:33:2c:e3:4b:50:98:dd:e4:93:d8:89:35:
22:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3B:2A:A5:71:C2:49:53:C7:B5:AE:BE:7C:64:B7:59:E1:D9:9E:22
X509v3 Authority Key Identifier:
keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/ODsqpXHCSVPHta6-fGS3WeHZniI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.44.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:7e:bf:d7:93:1a:8d:2d:57:f4:2b:e3:8a:61:aa:12:23:49:
07:66:cf:4f:31:72:60:4b:66:5a:b0:86:ba:c2:7b:19:54:d2:
4e:5c:18:10:45:30:6c:f5:bf:b3:b3:79:c3:2c:7b:1c:3a:8f:
25:25:f4:eb:36:5a:d8:9c:1d:63:00:dc:6e:1f:fa:b3:56:2d:
be:9d:56:7c:58:c6:50:fd:61:1b:59:b1:1f:03:64:ee:65:58:
85:2f:98:6e:e0:f6:c5:10:2e:bc:01:4a:00:5c:12:75:10:33:
9f:82:a4:0a:46:a4:f1:5b:41:8d:1f:e7:b5:50:34:e7:95:cf:
64:f3:39:91:6d:84:f7:1a:94:8a:39:49:a6:30:80:46:2b:67:
a4:01:4e:64:bf:f5:19:44:6e:b1:dd:e2:c3:74:28:c0:e2:1a:
49:38:b6:a2:1b:48:2c:b1:5f:82:f2:e5:c8:d9:f9:52:d6:d5:
f9:d5:35:da:64:d6:ca:d8:00:fe:e0:e1:ee:82:11:4e:9d:ec:
c3:d6:f2:53:3d:09:b6:c9:ed:6a:60:30:78:d3:0d:bd:f9:1c:
29:fc:8d:ad:c5:4f:00:bd:7d:20:ef:13:68:cd:6f:a7:ee:bb:
c7:42:3a:43:d2:9b:af:0c:7d:60:b4:ef:9b:16:7e:97:06:be:
1e:57:8f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:31 2024 by rpki-client on console-fra.rpki-client.org