Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/6gbPwVj1ddH4am-P7EYFtiwj7As.roa
File: 6gbPwVj1ddH4am-P7EYFtiwj7As.roa (raw, json)
Hash identifier: 5SARgcWFvyulG/c30wBKbmutdWr2zZU2Z9nmojYN0hQ=
Subject key identifier: EA:06:CF:C1:58:F5:75:D1:F8:6A:6F:8F:EC:46:05:B6:2C:23:EC:0B
Certificate issuer: /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial: 018DC55386A0D36F57BF8E88E357DF90D3F8
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/6gbPwVj1ddH4am-P7EYFtiwj7As.roa
Signing time: Tue 20 Feb 2024 07:03:21 +0000
ROA not before: Tue 20 Feb 2024 07:03:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44125
IP address blocks: 185.149.196.0/24 maxlen: 24
185.149.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jul 2024 10:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c5:53:86:a0:d3:6f:57:bf:8e:88:e3:57:df:90:d3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Validity
Not Before: Feb 20 07:03:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea06cfc158f575d1f86a6f8fec4605b62c23ec0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:ec:73:07:fe:12:48:2d:19:ba:ed:86:76:
81:2a:1e:06:00:82:3d:0a:3c:d6:43:42:fd:47:fa:
35:6f:78:cd:1a:33:02:aa:e7:59:5b:72:e4:a3:85:
e3:58:7b:77:73:62:a1:18:74:05:b0:87:54:95:e1:
bf:f3:07:54:1c:1f:10:fb:f6:b0:49:00:f4:2c:df:
1d:c7:dc:dd:55:97:73:5f:33:3a:fc:02:8b:6e:bf:
68:39:3a:17:cf:33:00:87:12:30:3b:65:0e:12:7e:
c3:cc:06:00:75:12:7b:db:6f:38:37:88:cd:f2:e3:
ad:ba:79:c4:fc:6b:78:6a:52:75:3a:b1:3f:70:86:
56:32:f4:a5:a5:01:80:9a:89:a4:29:77:02:a5:61:
b2:85:45:fb:08:05:f2:32:c0:b9:ab:2b:05:4e:2c:
70:3c:44:2c:30:27:23:69:e3:52:c2:fb:4b:2f:0f:
a3:55:1c:6b:94:82:20:06:30:7a:3a:fd:0c:20:09:
ae:d8:7a:66:35:a3:0f:73:f5:86:2a:69:97:73:80:
09:3a:0a:42:61:36:d2:a0:fb:53:ec:a7:09:ab:81:
85:73:8c:9a:82:e8:8a:26:29:15:95:d8:16:b1:7f:
c3:e9:d5:63:0e:96:36:76:9e:0a:a1:5e:11:d4:f8:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:06:CF:C1:58:F5:75:D1:F8:6A:6F:8F:EC:46:05:B6:2C:23:EC:0B
X509v3 Authority Key Identifier:
keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/6gbPwVj1ddH4am-P7EYFtiwj7As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.196.0/23
Signature Algorithm: sha256WithRSAEncryption
24:f4:2b:56:a6:3b:a5:9d:30:50:eb:29:91:f2:46:49:f8:69:
24:ad:43:48:d8:3d:be:1d:fc:b5:c3:4b:5c:9f:24:f7:17:e4:
98:94:ef:da:ea:74:b7:8d:66:3f:7f:e9:97:fa:10:06:52:28:
e4:94:bd:03:9e:fa:df:e6:82:b3:33:2b:c5:0b:e0:f3:ac:cc:
e9:71:8c:1f:fc:e4:29:a9:71:88:3e:bd:b2:dc:10:33:86:59:
61:dc:f3:64:c7:2d:4f:0f:17:12:a0:4e:07:32:58:cd:71:29:
33:c2:64:cc:c3:53:c4:bb:06:29:72:5c:76:ba:43:63:77:7b:
39:9f:4c:6d:1e:48:d9:dc:60:f4:8a:56:6e:fd:8f:91:4e:4e:
76:9d:11:91:e7:30:31:f2:56:00:f0:25:4e:34:b7:3d:7a:3a:
6f:d7:1c:47:32:be:2d:92:a5:77:34:04:78:0a:9a:e2:df:32:
bb:54:3d:5d:26:e7:d7:bb:25:a3:67:20:d8:07:65:2d:97:18:
d4:40:a6:0e:51:9c:72:78:b8:af:4e:e6:76:6e:1f:e9:87:0f:
42:62:6c:8e:52:2e:57:fa:56:5c:4e:35:93:52:cd:90:3c:b9:
b5:99:a2:8a:e5:1c:07:53:6b:53:9c:bd:c0:b9:1c:8b:a9:51:
a9:72:d7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 13:11:03 2024 by rpki-client on console-fra.rpki-client.org