Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/SBSb5zwIxG-fT2D2Lh153Vx4Gko.roa
File: SBSb5zwIxG-fT2D2Lh153Vx4Gko.roa (raw, json)
Hash identifier: jT+YouApLjkgERQFsa1XyojXLjAezngF3hYUof+Y6rs=
Subject key identifier: 48:14:9B:E7:3C:08:C4:6F:9F:4F:60:F6:2E:1D:79:DD:5C:78:1A:4A
Certificate issuer: /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial: 01870F9AF70F37825064E7069DF3041BB9A4
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/SBSb5zwIxG-fT2D2Lh153Vx4Gko.roa
Signing time: Thu 23 Mar 2023 17:53:46 +0000
ROA not before: Thu 23 Mar 2023 17:53:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59800
IP address blocks: 185.68.196.0/23 maxlen: 23
2a05:19c0::/48 maxlen: 48
2a05:19c0::/47 maxlen: 47
2a05:19c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 24 Mar 2023 00:25:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0f:9a:f7:0f:37:82:50:64:e7:06:9d:f3:04:1b:b9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Validity
Not Before: Mar 23 17:53:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48149be73c08c46f9f4f60f62e1d79dd5c781a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:5a:ef:fb:36:46:be:3e:56:b2:6c:b2:e5:
9b:c5:25:a5:dc:38:44:49:11:8e:b6:7b:f6:95:06:
b6:5e:a0:b8:c4:93:dd:24:a7:6f:fd:ec:e5:39:4e:
a4:be:b5:34:aa:83:a5:8b:73:b5:1a:72:b9:08:d2:
68:1f:96:45:ff:3a:e2:58:9e:14:74:cc:71:8a:2f:
3c:dc:1e:74:11:61:18:f8:77:c8:66:d1:a3:d3:b5:
01:1b:6e:c6:70:8d:6b:56:0f:7e:16:04:b6:0c:c6:
fd:6c:7a:fc:6c:c5:8a:9a:22:46:8e:14:86:95:8b:
bb:d2:50:d0:6d:e3:57:f5:04:39:5b:6c:9e:33:e1:
ac:3d:bb:c6:b0:d1:f7:68:85:8d:80:00:bc:77:fd:
5c:a8:8b:9f:31:70:2d:ba:ba:33:06:2f:89:24:60:
0f:06:20:fd:05:14:f0:f7:03:a2:aa:b3:a2:4d:09:
37:f4:f2:80:67:0f:a4:02:8a:42:05:ff:a3:6d:89:
0f:77:d2:70:04:f2:5c:91:e2:a9:19:41:e5:64:c3:
62:62:4e:77:49:a5:b8:f8:90:13:16:87:b8:d1:69:
f9:42:50:e2:10:bc:e5:fc:e1:ec:7f:52:c1:89:c7:
7b:8f:3e:1b:25:41:fe:83:57:e4:68:c8:b3:61:aa:
0f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:14:9B:E7:3C:08:C4:6F:9F:4F:60:F6:2E:1D:79:DD:5C:78:1A:4A
X509v3 Authority Key Identifier:
keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/SBSb5zwIxG-fT2D2Lh153Vx4Gko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.196.0/23
IPv6:
2a05:19c0::/47
Signature Algorithm: sha256WithRSAEncryption
a2:0a:66:13:ba:9a:73:91:9a:ed:7f:12:f7:4d:ae:1f:35:99:
d3:b2:83:cf:e3:b7:dc:06:2b:0f:ff:7d:6c:e1:8e:6f:e2:2e:
8f:6d:b5:c5:89:0c:78:8e:e6:62:45:54:10:ab:07:6d:7c:bd:
36:7b:37:c7:2b:bf:50:30:e2:e9:4c:0a:89:f3:1c:47:32:df:
9e:56:f5:86:2a:53:d6:1c:b8:b5:71:70:dd:58:2d:8b:7c:46:
55:a7:b1:e8:66:13:0e:f2:b4:66:47:af:0e:18:e5:09:2f:08:
b6:16:08:d1:d4:37:fa:23:71:85:7f:ed:a0:c9:ba:b9:8e:51:
74:7b:32:b1:05:60:84:d8:28:60:7a:90:76:72:db:c6:df:00:
ea:18:b9:21:5f:f0:3c:92:d4:bd:34:3e:47:f4:b8:f0:71:89:
58:01:d4:fe:5a:8f:b0:69:c2:1b:34:15:6d:3d:62:96:e4:f2:
75:fe:56:3b:30:db:64:95:06:0e:8e:75:76:a5:75:9b:ba:95:
43:72:60:21:c7:e7:72:ad:6b:7b:9b:66:57:39:57:f9:a4:7a:
1a:b2:e5:6f:de:9a:d0:48:1b:2e:ca:6e:dd:40:6d:18:7b:13:
1d:c7:cd:85:93:76:ae:04:90:61:f8:19:b2:97:24:10:c2:85:
fd:47:09:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:33 2024 by rpki-client on console-fra.rpki-client.org