Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/si_weJJOxu6tJc_hxleC6yL6aqg.roa
File: si_weJJOxu6tJc_hxleC6yL6aqg.roa (raw, json)
Hash identifier: 5J6BqZ3YqYv0/QcCqhztMUUscIEm5sTV10n7LkLLGzE=
Subject key identifier: B2:2F:F0:78:92:4E:C6:EE:AD:25:CF:E1:C6:57:82:EB:22:FA:6A:A8
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 018571B0E5708F35B9836146B0BF610749AB
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/si_weJJOxu6tJc_hxleC6yL6aqg.roa
Signing time: Mon 02 Jan 2023 08:54:56 +0000
ROA not before: Mon 02 Jan 2023 08:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48314
IP address blocks: 185.135.55.0/24 maxlen: 24
2a02:faa0:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:e5:70:8f:35:b9:83:61:46:b0:bf:61:07:49:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: Jan 2 08:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b22ff078924ec6eead25cfe1c65782eb22fa6aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c3:55:04:90:8d:55:76:32:a0:1c:ee:33:62:
fc:5f:24:34:03:d8:33:1b:a2:5e:62:92:45:4a:99:
ab:3d:8b:93:fe:ec:5f:f9:9f:4e:4e:b3:bc:5b:17:
d7:d4:ab:80:31:76:3d:0c:75:66:05:73:d5:9d:57:
57:b9:7d:90:1e:6a:e1:0c:38:d7:f5:01:b8:1a:37:
b7:a4:36:71:f7:5d:9b:92:05:0b:03:1d:e0:f0:e2:
63:18:89:c3:62:3b:41:d3:bd:7a:26:b8:03:be:63:
e4:8f:db:c6:22:2d:78:5c:63:4a:49:08:e7:00:af:
3a:2f:34:71:4e:11:f6:94:6c:d1:60:7a:c5:d6:a9:
69:5c:33:ff:00:7f:4b:6e:2f:58:61:31:31:58:9f:
f4:3b:a8:5e:69:51:9b:87:bc:38:31:25:fe:63:03:
51:3f:17:a4:fd:db:9d:be:af:6f:5e:dd:3a:84:c7:
3c:0a:59:37:44:b5:6e:93:50:bb:57:17:04:69:24:
ee:4d:52:1e:c8:c4:6d:0c:c2:ab:69:01:e0:a9:d5:
7a:62:85:55:46:ec:da:3f:a3:cf:51:a7:c1:55:43:
83:5e:61:1f:75:77:09:6a:65:bf:04:0e:15:37:3a:
d9:1a:c8:2f:f3:7e:35:f6:a9:56:20:32:99:10:e4:
ff:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2F:F0:78:92:4E:C6:EE:AD:25:CF:E1:C6:57:82:EB:22:FA:6A:A8
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/si_weJJOxu6tJc_hxleC6yL6aqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.55.0/24
IPv6:
2a02:faa0:3::/48
Signature Algorithm: sha256WithRSAEncryption
44:92:c4:3e:95:b7:e3:f1:75:50:53:6d:1a:df:35:65:37:d8:
16:dd:f2:c8:80:b1:f5:9c:df:2f:3c:9c:f7:df:cf:82:2e:d8:
cc:2d:b2:02:f7:70:f9:0f:de:da:87:33:bc:f6:6c:e2:7d:56:
28:f6:cc:49:96:e4:56:d6:24:10:b9:15:5a:02:b0:7a:25:8b:
f1:58:ca:bd:0e:e1:20:85:1a:5f:32:f5:14:86:89:aa:7f:a8:
af:0b:e0:b0:89:c2:62:78:a5:e4:d8:c6:ef:d3:75:f3:c3:14:
e6:17:ae:cc:23:d8:c7:1a:c7:2e:3c:0b:21:1a:4f:24:dd:c1:
ae:6b:34:d3:e0:5e:c7:00:f6:8c:90:cd:a3:87:02:59:dc:68:
b9:e1:39:76:18:fc:a7:c1:a1:63:15:60:bb:7c:4f:2d:f6:88:
9a:ef:e3:08:e9:c6:58:08:63:94:3d:d6:80:e2:40:d2:f7:46:
0c:f1:ec:bf:da:ec:3d:a3:75:48:14:d7:d3:be:c2:ce:f8:12:
9c:63:9a:db:6a:ba:b7:c0:93:12:55:3e:e3:a5:3e:38:53:f2:
1c:90:13:3c:33:24:df:8f:b4:b7:43:35:7e:32:30:aa:0e:bd:
c7:95:57:9e:60:30:11:92:27:fb:2f:3e:7f:5a:f0:db:bc:a3:
f3:dc:ed:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:48 2024 by rpki-client on console-ams.rpki-client.org