Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Rm2rxl8VGW1tb6JAehR2NFF2Yus.roa
File: Rm2rxl8VGW1tb6JAehR2NFF2Yus.roa (raw, json)
Hash identifier: 1JswCfjR/+Q5uODjywmYC/OiTW5As91Ako56CFuAgzA=
Subject key identifier: 46:6D:AB:C6:5F:15:19:6D:6D:6F:A2:40:7A:14:76:34:51:76:62:EB
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018DC72D6FDD1D085ED8A1053904B05F9848
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Rm2rxl8VGW1tb6JAehR2NFF2Yus.roa
Signing time: Tue 20 Feb 2024 15:41:00 +0000
ROA not before: Tue 20 Feb 2024 15:41:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 185.226.56.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 21 Feb 2024 13:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c7:2d:6f:dd:1d:08:5e:d8:a1:05:39:04:b0:5f:98:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Feb 20 15:41:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=466dabc65f15196d6d6fa2407a147634517662eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:c0:45:a6:a7:03:d8:15:0b:1a:b9:77:da:
d0:dc:4c:b0:ab:f6:a6:45:50:8a:30:64:be:c1:cd:
eb:39:03:90:ea:a9:fa:62:ff:76:7f:c4:b2:57:4a:
4a:e1:9d:22:bb:7d:b7:f5:e2:07:9b:38:15:67:09:
40:4a:0e:96:dd:65:d2:c8:e3:eb:1d:1f:a4:f0:48:
13:7d:f9:ce:d6:1e:0d:e8:83:4f:22:c8:1f:c8:ce:
ea:9b:5f:53:42:1f:9b:e3:d6:c1:4d:91:57:59:02:
ec:93:5f:b8:f7:39:cf:bc:bc:67:7b:e0:c5:47:64:
40:b8:21:3a:73:83:a2:d3:22:43:80:fc:60:1d:66:
6f:f9:d6:e0:db:37:61:a5:87:b9:4e:79:ee:6f:37:
15:ad:ad:9e:2c:dd:4f:b4:00:af:c7:ad:89:95:da:
66:98:1a:06:41:16:f5:d9:9c:9a:e8:ae:7c:b4:50:
56:12:aa:12:d6:2e:69:24:19:2c:ae:b8:fe:29:50:
15:bc:ea:81:51:5b:77:8c:cd:f3:19:fa:e9:aa:34:
21:21:e4:3a:35:68:38:9c:e4:c5:e0:eb:e9:78:f5:
60:9a:28:f9:11:21:0a:d3:4f:9f:fb:eb:81:b3:ee:
7d:45:b5:b9:ae:1f:d3:da:2e:01:a4:84:d5:82:d7:
43:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6D:AB:C6:5F:15:19:6D:6D:6F:A2:40:7A:14:76:34:51:76:62:EB
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Rm2rxl8VGW1tb6JAehR2NFF2Yus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.56.0/23
Signature Algorithm: sha256WithRSAEncryption
13:41:eb:5c:4b:89:60:b7:83:35:41:1b:9d:da:8d:5b:22:73:
41:ec:14:cc:41:5e:60:dc:a3:75:16:c0:32:8e:0f:ae:cd:02:
9c:e7:cd:25:9b:3e:a0:9f:08:91:db:1c:94:ae:c1:1e:61:4c:
66:a8:c4:05:ed:99:60:f4:18:31:6f:da:dd:aa:42:cf:f3:98:
19:fd:99:e5:77:00:19:86:eb:5c:96:67:4e:1d:9d:df:f5:c4:
d5:24:dd:cf:64:6e:2d:8b:c3:51:dc:db:2f:a4:4e:93:23:f5:
fc:a4:88:24:0e:61:01:47:7b:ad:f5:d8:aa:69:cc:ae:25:6b:
5c:32:0b:b1:37:3a:8d:7b:18:50:04:09:14:6e:ad:47:2f:bf:
95:4b:2f:12:44:66:11:6b:9c:bc:12:96:83:90:6d:73:ef:4b:
63:d5:2d:31:25:66:64:37:33:5d:e8:25:4c:9c:b0:a4:5c:de:
dd:86:4f:f0:56:73:f8:a8:8b:74:53:04:38:eb:f0:62:f5:e6:
b0:32:54:ac:b9:3a:67:f4:63:52:75:0d:a2:93:9b:85:0d:55:
2e:0f:a4:3d:50:b6:9d:0a:2d:e6:3f:27:2f:8d:02:b5:e8:81:
fd:07:83:24:6e:8f:a9:79:8f:13:ca:00:77:ea:e9:d5:04:09:
7b:69:f7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 21 16:10:53 2024 by rpki-client on console-ams.rpki-client.org