Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/coKb4zv39rPfussoeSslLPi3jWc.roa
File: coKb4zv39rPfussoeSslLPi3jWc.roa (raw, json)
Hash identifier: +e/u8MhiW1J6W/p3ujz5xW7eMcaG2kRVfNUwskl8Tlc=
Subject key identifier: 72:82:9B:E3:3B:F7:F6:B3:DF:BA:CB:28:79:2B:25:2C:F8:B7:8D:67
Certificate issuer: /CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
Certificate serial: 018CC94DF543425A1E6EB79A09C326FCE851
Authority key identifier: 4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/coKb4zv39rPfussoeSslLPi3jWc.roa
Signing time: Tue 02 Jan 2024 08:32:58 +0000
ROA not before: Tue 02 Jan 2024 08:32:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202813
IP address blocks: 185.178.136.0/22 maxlen: 24
2a0b:fa80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 03 Apr 2024 19:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:f5:43:42:5a:1e:6e:b7:9a:09:c3:26:fc:e8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
Validity
Not Before: Jan 2 08:32:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72829be33bf7f6b3dfbacb28792b252cf8b78d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f2:96:7d:a0:57:38:9d:62:b8:ea:67:a6:5f:
8a:94:44:65:47:16:12:89:4a:2b:e9:4d:11:fd:52:
8b:87:00:5f:9e:10:bf:87:e2:74:ce:d2:37:e6:5c:
ea:9e:79:19:9e:a0:c0:47:66:86:9d:8b:1e:6f:0a:
3c:58:4e:45:76:b8:d2:6c:e7:c5:fa:6a:cf:62:86:
66:e9:a6:14:33:12:e0:dd:b8:d8:ee:37:d9:8a:53:
ae:4c:0d:a5:be:1f:9a:c9:e2:a4:08:bc:df:5d:31:
2b:72:e0:4e:dd:32:2e:3b:3c:fe:e0:32:d4:1d:cf:
d9:f1:b3:d3:a7:90:a1:2d:a6:77:3c:5c:eb:2a:2a:
8d:52:c0:66:f5:b5:38:2c:9f:3e:d8:2c:a4:7b:32:
58:f9:9c:95:5f:0a:36:7a:4f:8c:42:60:1c:2a:42:
90:04:9e:b5:6a:6b:ca:7d:46:fd:2d:02:58:8e:6b:
62:db:7b:25:fe:9c:82:7a:74:f8:7a:ab:8f:26:07:
bf:7f:f6:1d:50:67:39:a6:d5:aa:d9:3a:c1:14:44:
6a:ea:22:1d:0f:78:df:d9:90:10:56:5c:12:0b:42:
d6:ba:cd:e2:0f:cf:0f:b3:37:25:48:74:c5:c2:88:
6c:7e:fc:29:41:ef:f2:3c:00:05:69:8d:e3:e2:92:
d8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:82:9B:E3:3B:F7:F6:B3:DF:BA:CB:28:79:2B:25:2C:F8:B7:8D:67
X509v3 Authority Key Identifier:
keyid:4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/coKb4zv39rPfussoeSslLPi3jWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.136.0/22
IPv6:
2a0b:fa80::/29
Signature Algorithm: sha256WithRSAEncryption
7d:99:46:99:82:81:45:61:be:de:81:19:cd:ba:db:bd:ae:53:
cd:1d:06:a2:dd:39:b0:2b:02:f1:4d:d1:6a:45:6c:06:c4:69:
e9:1c:f7:ab:7a:a9:95:a7:2c:bb:57:f4:55:50:01:74:b2:e6:
69:29:12:70:76:15:8e:61:a4:1b:a3:f8:f1:7b:fc:32:f4:a9:
8b:a3:70:09:c9:47:26:a9:ae:85:9c:64:05:c7:e6:8d:f0:64:
f5:56:13:e4:e0:0c:ea:ed:00:29:00:99:e1:75:74:99:44:c0:
f9:e8:ae:81:e0:5b:80:eb:0b:f2:a1:18:7e:39:88:59:0e:81:
05:07:dd:1a:a7:54:f9:cf:78:35:04:20:56:58:09:f8:99:7e:
ad:14:cd:45:c5:0f:93:84:46:33:98:bc:26:97:0a:1a:75:94:
88:a5:2b:40:fe:1f:9c:3c:08:4f:02:17:eb:dd:74:a3:f1:73:
0b:c0:4a:25:99:87:0d:91:58:61:fe:4e:b8:91:02:bf:87:5c:
77:31:36:5e:e2:c0:c9:32:6a:76:63:22:eb:e3:1e:24:22:26:
6a:f7:fb:87:c5:8f:78:71:31:eb:10:09:4e:c0:64:1e:5c:80:
cc:e4:90:7e:aa:38:c3:4e:b3:e2:9b:57:bd:86:d9:d2:da:c2:
59:96:04:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:32 2024 by rpki-client on console-fra.rpki-client.org