Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/A1JJapCdfaNIrFQ3zaOwk6_A27s.roa
File: A1JJapCdfaNIrFQ3zaOwk6_A27s.roa (raw, json)
Hash identifier: giK5IyIZH18ptKSRLjbqtDmBEAxK9ZjlKmNtNqCAxtc=
Subject key identifier: 03:52:49:6A:90:9D:7D:A3:48:AC:54:37:CD:A3:B0:93:AF:C0:DB:BB
Certificate issuer: /CN=cb4d83a67fb35af88de83c1304c6743a51531361
Certificate serial: 01881FD0CC9C31E9182A38F8F70A47284D2A
Authority key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/A1JJapCdfaNIrFQ3zaOwk6_A27s.roa
Signing time: Mon 15 May 2023 14:29:17 +0000
ROA not before: Mon 15 May 2023 14:29:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57219
IP address blocks: 185.144.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1f:d0:cc:9c:31:e9:18:2a:38:f8:f7:0a:47:28:4d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d83a67fb35af88de83c1304c6743a51531361
Validity
Not Before: May 15 14:29:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0352496a909d7da348ac5437cda3b093afc0dbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:83:a0:44:d7:f2:e3:92:13:16:12:0a:44:11:
c1:5c:2e:0a:ad:76:e9:e2:82:b3:ce:11:ae:46:7f:
ef:61:71:1d:ee:6e:5f:61:0e:7c:40:95:e8:52:1c:
ef:cb:56:74:fd:0b:b5:9a:a9:68:7f:03:81:a2:f0:
5f:b3:db:42:5e:b3:58:9e:c1:f0:9e:85:ab:d1:5d:
0b:22:45:02:31:2a:13:07:e7:bf:62:83:67:04:c1:
91:9b:ae:04:93:8c:d5:38:d9:ee:e2:df:a2:7f:a5:
52:fa:22:9c:3c:c2:1e:0f:57:30:93:df:c6:be:b5:
fe:94:6c:3e:c7:79:d5:fa:44:0f:d6:48:24:78:76:
a8:3b:ab:4c:ec:cd:f9:03:68:2d:99:4b:95:87:e1:
f7:cc:09:ed:38:2e:57:a8:e0:be:e8:b2:ea:06:8a:
b1:d8:d2:b6:30:73:73:2d:f0:d9:b2:e8:3e:8e:e1:
60:7d:c1:1c:bc:ee:ea:89:2b:8b:18:54:0f:52:e5:
55:bb:c5:2f:f3:a2:d3:da:ec:17:fb:e3:6e:8a:1f:
58:16:c2:4a:1d:cd:81:46:2c:df:d3:bf:ce:f3:4a:
6a:fc:a5:13:a2:78:07:b8:83:b4:9b:da:b5:ed:2c:
77:04:ca:13:74:54:ec:77:ae:4d:20:37:5d:05:34:
b2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:52:49:6A:90:9D:7D:A3:48:AC:54:37:CD:A3:B0:93:AF:C0:DB:BB
X509v3 Authority Key Identifier:
keyid:CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/A1JJapCdfaNIrFQ3zaOwk6_A27s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.113.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:25:12:e3:96:44:4e:a3:cb:f8:a9:7b:53:22:d2:14:14:37:
72:b4:48:ae:7f:90:a2:58:ad:94:c9:fb:3d:e6:1d:7e:e7:4a:
68:65:0a:9f:77:4a:96:8c:ff:43:10:e2:a4:97:92:e4:80:2d:
99:7e:72:4c:46:6a:88:b8:d7:db:d9:93:2f:b6:b8:32:87:ee:
9b:9c:71:2c:40:2d:0d:51:ed:df:79:e1:4f:8e:81:c9:53:9b:
4b:83:c2:92:dd:ce:6e:28:26:c3:f1:e2:c8:ef:9f:57:2d:fb:
23:1f:ae:53:7c:b1:bb:32:1b:39:79:d7:70:7e:86:85:98:9f:
3b:45:27:a0:e9:65:b9:d7:37:22:48:5f:10:86:41:3f:c1:13:
17:90:1b:5e:e6:d0:d4:f7:6d:a3:be:eb:57:3e:55:a9:24:97:
e3:69:cb:7d:21:da:58:cf:41:77:72:c5:96:5e:33:3b:0f:b8:
c8:16:5b:db:01:a1:e5:3e:77:df:c6:3d:f8:f7:de:c6:8e:5f:
4a:17:f4:ac:58:3d:e8:cc:25:12:67:c4:b6:83:bf:a8:53:83:
11:e5:49:78:05:29:30:c0:86:6e:8a:7c:d5:d6:de:2e:f2:6a:
9a:bb:98:95:89:c6:b7:ea:2e:ed:af:37:ee:2d:84:3a:39:52:
6c:1a:bc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:33 2024 by rpki-client on console-fra.rpki-client.org