Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/pSEDvat7f1VJMG3dfOZRD4v1E3o.roa
File: pSEDvat7f1VJMG3dfOZRD4v1E3o.roa (raw, json)
Hash identifier: Dypn9yj0547qkCMb5e6OwahmIwIvjSGVyC2sHRei7ao=
Subject key identifier: A5:21:03:BD:AB:7B:7F:55:49:30:6D:DD:7C:E6:51:0F:8B:F5:13:7A
Certificate issuer: /CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
Certificate serial: 018E1A5D87DBB1DE3D00BD6C9557E7E00341
Authority key identifier: 07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/pSEDvat7f1VJMG3dfOZRD4v1E3o.roa
Signing time: Thu 07 Mar 2024 19:22:00 +0000
ROA not before: Thu 07 Mar 2024 19:22:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213303
IP address blocks: 185.32.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 15:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1a:5d:87:db:b1:de:3d:00:bd:6c:95:57:e7:e0:03:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
Validity
Not Before: Mar 7 19:22:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a52103bdab7b7f5549306ddd7ce6510f8bf5137a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:39:ed:a3:31:9e:c2:4a:ea:eb:94:b1:aa:
46:12:67:09:1e:a3:1b:70:42:11:27:ca:5d:f7:91:
c3:4f:57:04:36:06:20:e8:37:6c:10:dd:d7:2a:cd:
c9:4d:b7:96:2d:2a:54:d3:f2:1c:74:1a:bd:2a:37:
07:c7:73:77:6a:f0:9b:b9:45:72:07:91:8b:0f:b4:
c3:98:42:97:97:74:b5:2e:23:77:81:2a:a0:66:87:
41:62:4f:7a:15:ab:01:bf:2d:7f:e5:38:46:b7:00:
00:bc:40:6a:00:32:66:fb:de:6e:3e:81:bf:a0:64:
ff:2f:63:44:7f:64:4e:2c:91:71:e9:85:a7:25:46:
75:27:6a:f5:3f:1b:f2:96:2d:22:16:df:df:43:b1:
2c:4d:97:6d:8b:b5:6a:ad:3b:d8:b2:49:bc:05:ef:
d3:f3:fb:62:b6:74:3c:b7:ae:b8:9e:99:85:ba:f7:
90:ec:a6:05:9e:cf:09:77:f2:eb:98:3c:0c:0b:22:
6f:77:6f:c9:24:81:8c:b7:84:9c:80:12:16:c5:cf:
a9:90:40:ef:06:3a:26:9d:db:a6:a8:d9:9c:46:98:
ff:bd:f4:d7:e3:a6:8b:7b:07:d9:04:48:be:3a:a1:
c4:77:27:09:b7:54:fb:e5:58:d1:fc:ac:16:31:50:
b1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:21:03:BD:AB:7B:7F:55:49:30:6D:DD:7C:E6:51:0F:8B:F5:13:7A
X509v3 Authority Key Identifier:
keyid:07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/pSEDvat7f1VJMG3dfOZRD4v1E3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.69.0/24
Signature Algorithm: sha256WithRSAEncryption
35:60:82:58:55:da:8e:cd:15:dc:bd:5d:62:21:40:00:67:91:
fb:fe:f2:df:92:23:62:45:5d:20:a6:33:5a:eb:c7:13:2a:35:
d1:6b:a7:d1:67:20:e9:9e:cc:63:a9:ba:55:1f:79:4f:ea:b3:
8d:cd:af:7a:a5:63:4d:96:3b:11:6d:e8:11:69:58:c3:29:3b:
63:95:ea:95:0b:17:33:36:fb:69:18:0a:c1:f4:f7:06:d1:37:
06:d1:bc:40:01:d5:07:0a:0f:10:fb:0b:6e:54:f5:f1:60:74:
e2:d5:6a:1f:16:94:01:84:53:22:3d:b0:61:8e:0e:05:95:1e:
4d:f3:4d:b7:c0:33:f8:c8:d1:b5:57:79:d3:47:91:29:dd:3f:
d2:c6:7f:59:d1:e1:fe:bb:7d:0b:b6:c5:29:9c:4b:84:ce:b2:
38:8d:23:bc:28:d9:19:38:b7:0f:46:90:33:ba:be:c4:3c:3d:
3b:54:f7:5a:2e:12:42:ea:03:ff:e3:4f:4c:18:22:a2:70:d1:
45:2d:04:9a:f8:e9:36:b7:17:1a:c6:ad:65:e4:6a:f9:da:c4:
41:a4:27:70:9b:51:a3:5b:41:18:39:86:e9:50:21:2d:eb:06:
f9:08:7d:3b:e2:47:cd:8a:27:30:27:0c:50:90:aa:7f:37:bc:
74:98:36:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:34 2024 by rpki-client on console-fra.rpki-client.org