Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/eNdBA1pN6zQ0A2ENpp6hEDkrCg4.roa
File: eNdBA1pN6zQ0A2ENpp6hEDkrCg4.roa (raw, json)
Hash identifier: Iqa01pocsucWy0yjlfMzygxy9sibJzNpBZ+sSnnDrrQ=
Subject key identifier: 78:D7:41:03:5A:4D:EB:34:34:03:61:0D:A6:9E:A1:10:39:2B:0A:0E
Certificate issuer: /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Certificate serial: 01856ECB62CA9F325EB2D1C614BA7CFA547B
Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/eNdBA1pN6zQ0A2ENpp6hEDkrCg4.roa
Signing time: Sun 01 Jan 2023 19:25:00 +0000
ROA not before: Sun 01 Jan 2023 19:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.156.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Aug 2023 09:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:62:ca:9f:32:5e:b2:d1:c6:14:ba:7c:fa:54:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Validity
Not Before: Jan 1 19:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78d741035a4deb343403610da69ea110392b0a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6b:2f:ae:40:01:8c:43:79:83:5d:86:a3:54:
ac:6b:15:de:8f:10:b7:eb:ba:56:7c:8d:ff:70:be:
6d:3d:05:3e:c6:6e:ed:8c:6e:e4:ca:65:cc:f5:5d:
5d:46:c5:d7:ae:e9:9a:6b:83:df:27:31:8b:11:00:
29:d7:78:6c:ba:3a:34:58:f2:9e:30:ed:ae:38:51:
b2:8c:85:e9:a8:e3:6c:2a:55:ba:42:d0:e4:bb:50:
56:f4:fd:e1:3b:7c:c2:40:a8:3d:1a:03:a1:20:df:
49:79:6d:5a:6e:59:dd:89:21:8d:b3:a6:6b:13:2f:
66:49:d9:5c:ac:b9:98:cd:0c:40:03:a4:c0:53:fb:
c4:82:51:e6:f0:1b:af:37:67:75:bc:71:0e:4b:d0:
12:71:76:da:df:c9:d4:0e:01:c4:d0:05:d5:18:f6:
58:d0:09:12:85:30:51:8e:1e:3a:5a:69:85:63:e2:
b1:6e:bd:bf:84:55:d9:93:1e:90:9c:f7:ee:22:ca:
de:99:af:e6:28:05:ed:e0:f0:3d:54:de:9b:93:eb:
bc:b1:ba:3a:7d:6f:ef:07:51:4a:f3:a6:85:c2:ac:
0e:ec:20:dc:c3:1e:67:87:20:52:68:55:dc:55:d4:
16:c3:d3:08:d4:b1:04:7d:d6:4b:7f:e3:b1:cd:2d:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D7:41:03:5A:4D:EB:34:34:03:61:0D:A6:9E:A1:10:39:2B:0A:0E
X509v3 Authority Key Identifier:
keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/eNdBA1pN6zQ0A2ENpp6hEDkrCg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.16.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d1:8f:9d:1f:43:0b:a1:ff:eb:ae:4d:bb:4a:69:76:82:d3:
6d:83:3f:51:cd:da:5c:25:b2:fc:6f:d8:0f:72:98:9d:7c:1f:
2b:bf:18:a2:36:a2:9d:3c:f5:e8:eb:af:ea:b3:a4:66:e4:d1:
1b:c3:46:e5:c5:b0:1c:c5:6a:ae:26:1f:a2:65:cc:5a:ef:73:
8d:9b:50:25:51:2c:a8:60:d3:de:6b:87:c8:59:c7:3c:27:27:
57:5d:af:6b:dc:25:37:77:cf:12:a2:39:13:cd:41:36:16:8c:
53:09:71:28:19:b0:52:7a:5f:ca:76:60:5a:95:10:9a:d3:1e:
85:ed:81:82:76:6b:19:55:a6:60:09:7c:8a:d6:89:af:07:b5:
aa:34:24:0f:81:c0:77:b3:6d:95:d5:09:98:18:95:3a:9c:ba:
ff:0d:06:19:26:b3:65:26:b3:cf:f1:24:67:21:e9:4e:f5:c5:
93:ec:c7:dc:ce:cb:c4:42:45:06:ce:7d:67:13:dd:e3:66:a7:
f3:62:62:bd:b4:6b:5b:0c:f1:c5:80:5b:b3:e1:15:b0:c1:9b:
04:1d:b8:70:e6:de:8e:08:cb:8b:78:f1:ff:f8:ec:76:5f:36:
9a:32:aa:8f:62:fa:ce:e4:8e:6a:d9:85:ac:60:08:df:43:2b:
fc:a5:0a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:28 2024 by rpki-client on console-ams.rpki-client.org