Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/Ri4pcuItPvziIWXGzJsI0_8uN44.roa
File: Ri4pcuItPvziIWXGzJsI0_8uN44.roa (raw, json)
Hash identifier: 9MuohuYDSfnzy/RdLYjRC1dktuGA9vt5dpNEahMAHjM=
Subject key identifier: 46:2E:29:72:E2:2D:3E:FC:E2:21:65:C6:CC:9B:08:D3:FF:2E:37:8E
Certificate issuer: /CN=caf44942a29fac612cd44f83ad317a1c0f5b8eea
Certificate serial: 018F2652A92338BBDFE15508C64DBFDBA7E5
Authority key identifier: CA:F4:49:42:A2:9F:AC:61:2C:D4:4F:83:AD:31:7A:1C:0F:5B:8E:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvRJQqKfrGEs1E-DrTF6HA9bjuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/Ri4pcuItPvziIWXGzJsI0_8uN44.roa
Signing time: Sun 28 Apr 2024 20:08:22 +0000
ROA not before: Sun 28 Apr 2024 20:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60631
IP address blocks: 185.136.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 06:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:26:52:a9:23:38:bb:df:e1:55:08:c6:4d:bf:db:a7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf44942a29fac612cd44f83ad317a1c0f5b8eea
Validity
Not Before: Apr 28 20:08:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=462e2972e22d3efce22165c6cc9b08d3ff2e378e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:6e:ba:85:92:90:2e:0e:9b:f0:cc:5f:56:
54:58:2b:d0:82:7c:1b:c9:4f:f4:ff:fc:94:81:4f:
b5:67:31:45:c3:1d:00:41:8f:e3:a1:ff:db:df:8a:
80:01:49:d7:5d:16:5d:88:e4:63:2c:50:5f:2c:39:
2c:b3:2e:33:09:4a:c7:be:d2:29:f1:91:20:29:f2:
9a:33:11:77:e9:59:dc:61:60:86:18:f2:57:81:60:
77:76:a4:6b:f8:b7:bc:1f:8e:32:0b:23:25:36:52:
bd:50:e7:20:ba:f0:f9:af:46:b4:e3:95:c6:5f:85:
34:93:ab:d1:fa:48:af:88:d0:cd:ff:9a:a6:8a:d1:
cb:8e:c3:5e:88:a1:fb:6a:30:bf:58:d9:26:11:07:
53:ff:43:f1:c7:a8:62:02:9a:15:10:50:4e:ea:a2:
c6:b8:8a:9d:02:99:ba:a2:0e:8b:e2:e3:a8:52:60:
12:83:df:86:35:db:91:f6:dc:d9:3c:2a:37:3e:9c:
a7:7a:7e:19:12:e2:e8:05:47:f9:22:d2:ad:4b:b5:
c3:c8:e4:a9:5e:88:85:ee:01:ca:a2:b4:4b:05:95:
76:e1:5c:12:c3:0f:c2:08:b5:44:dd:c6:9b:5d:49:
2e:d8:09:80:5d:82:42:26:cd:88:46:21:e7:6f:fa:
f6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2E:29:72:E2:2D:3E:FC:E2:21:65:C6:CC:9B:08:D3:FF:2E:37:8E
X509v3 Authority Key Identifier:
keyid:CA:F4:49:42:A2:9F:AC:61:2C:D4:4F:83:AD:31:7A:1C:0F:5B:8E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvRJQqKfrGEs1E-DrTF6HA9bjuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/Ri4pcuItPvziIWXGzJsI0_8uN44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/yvRJQqKfrGEs1E-DrTF6HA9bjuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.135.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:31:69:59:ba:2d:72:8b:ef:27:e1:62:5c:17:51:99:63:61:
34:24:a2:16:20:33:44:d6:f7:34:24:af:45:13:d5:74:3f:5e:
95:70:3e:67:5c:b6:8b:57:45:13:58:1d:38:bf:58:80:20:db:
2c:81:b8:3b:0b:5f:5e:e3:1b:08:6c:19:42:65:b8:8d:cd:e2:
53:74:2c:b8:0a:ad:91:b0:70:b5:6d:8a:d3:c4:75:f2:24:aa:
52:ec:f1:03:b7:dc:44:bb:28:cf:41:19:4d:ef:d4:a2:c6:7f:
ca:9a:8c:99:dd:ca:bb:5a:8e:44:a1:62:1b:c9:9d:2c:29:54:
2b:4c:cf:36:f6:7d:cb:95:e1:73:81:ca:9a:00:96:8c:f9:74:
21:39:76:f1:16:15:2a:dc:2b:41:10:7a:16:ab:18:fb:29:aa:
2f:23:d0:79:68:ea:6e:a9:5e:56:00:d7:09:47:62:65:5d:b3:
cb:8b:78:d9:fb:75:05:a5:91:38:14:1c:3c:42:d9:06:c9:b7:
9e:b7:23:75:2b:18:48:e9:62:e1:ff:56:8a:3c:0e:b2:c3:5b:
ea:ad:e2:ed:eb:c4:26:3b:3d:7c:3f:c6:e2:e5:f9:2a:92:e5:
31:b0:dd:cc:44:88:36:54:cb:3f:bb:b0:8c:97:00:f1:fa:d9:
d9:f7:ec:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 11:06:51 2024 by rpki-client on console-fra.rpki-client.org