Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/1-Pg0TMQ0oF56Z_GBH01pKim29Q.roa
File: 1-Pg0TMQ0oF56Z_GBH01pKim29Q.roa (raw, json)
Hash identifier: 8V3gDgL5fTnQ667XdaQ/kvbeA7N/yvClIM/hinIwADc=
Subject key identifier: D7:E3:E0:D1:33:10:D2:81:79:E9:9F:C6:04:7D:35:A4:A8:A6:DB:D4
Certificate issuer: /CN=cd0c032892f695af4c13fb0aca8043d17b1b97bf
Certificate serial: 01872D9FA29BEBC62A0B1CAF51812E9BD489
Authority key identifier: CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/1-Pg0TMQ0oF56Z_GBH01pKim29Q.roa
Signing time: Wed 29 Mar 2023 13:47:29 +0000
ROA not before: Wed 29 Mar 2023 13:47:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210439
IP address blocks: 185.137.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 10:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:9f:a2:9b:eb:c6:2a:0b:1c:af:51:81:2e:9b:d4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0c032892f695af4c13fb0aca8043d17b1b97bf
Validity
Not Before: Mar 29 13:47:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7e3e0d13310d28179e99fc6047d35a4a8a6dbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b6:0e:e0:a5:fb:69:38:65:92:28:07:60:0d:
4b:f7:c9:8f:83:42:06:92:41:31:6e:5f:0a:95:f7:
53:f1:4e:fe:8f:d5:24:ff:f9:4c:6c:84:fb:8b:07:
d8:a7:3f:88:24:11:1b:62:bf:67:11:73:30:c3:81:
88:c6:0c:df:28:b2:d8:79:c9:ae:72:90:8d:e8:72:
8d:b9:2b:6d:c0:09:9e:36:44:17:4e:00:12:37:4c:
b2:f8:92:64:ba:61:b6:1d:86:e3:55:91:73:c5:f0:
20:9f:0d:5d:bc:8a:a5:ba:ff:85:11:51:59:11:19:
d1:6e:7d:6f:e8:84:07:3c:8d:67:9c:5a:f5:57:20:
85:46:21:8f:14:d0:2e:fe:7f:49:e2:24:05:b6:f6:
31:db:f2:d0:f3:65:11:65:04:89:db:f0:5c:c1:c1:
94:b0:af:60:0c:be:3f:5b:bc:4a:74:3d:16:4e:6b:
9a:a9:36:18:8c:ed:b7:fb:fb:ff:1a:5d:78:59:b2:
03:d2:ab:4c:12:ab:f6:7f:cc:dd:47:64:df:3b:d6:
d3:54:96:65:40:90:18:21:f7:73:92:f2:68:e3:d0:
5d:79:f6:f7:12:31:ec:5f:ec:e8:23:b7:e7:4c:fa:
38:36:27:1e:35:19:b6:f8:e1:af:8b:04:aa:b0:9d:
03:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E3:E0:D1:33:10:D2:81:79:E9:9F:C6:04:7D:35:A4:A8:A6:DB:D4
X509v3 Authority Key Identifier:
keyid:CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/1-Pg0TMQ0oF56Z_GBH01pKim29Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.98.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:99:46:b5:b5:80:26:62:c5:20:a5:99:2d:8c:18:89:54:f8:
62:0e:a3:3f:d3:a9:97:01:c9:ed:68:45:d3:d6:b6:f1:fd:33:
70:44:72:89:8b:41:bf:22:30:a9:9f:d3:a9:2f:d2:ce:f6:a5:
a4:68:20:84:f3:f9:cc:80:15:fd:14:2b:73:aa:e8:a3:a9:c9:
51:50:28:e8:0e:fa:f1:cc:b9:52:78:eb:18:38:f3:69:f3:95:
72:53:35:7e:a7:39:e0:0a:fd:4b:1e:47:d1:14:a3:f3:61:1b:
97:cf:f0:e7:7b:fd:45:fd:d2:e4:43:13:1c:08:6c:59:dd:8b:
d4:c0:82:7c:2f:78:33:10:51:0e:2c:8e:df:aa:14:9c:4c:62:
02:40:23:be:0b:a7:63:01:e3:4b:32:61:3e:01:2e:79:be:92:
9c:63:3e:e4:dd:e3:e9:4b:f0:29:d8:5a:30:a9:aa:9f:ee:18:
83:88:5f:5a:31:70:6e:48:7d:8e:b5:09:a2:f5:21:4c:84:f8:
47:63:e0:d1:0c:8f:91:37:e1:93:26:c2:98:e4:71:dc:7a:95:
89:81:a0:68:32:c2:61:5f:4b:57:3e:8b:01:36:09:54:8e:cb:
71:1c:86:fe:b0:5a:4e:a0:27:46:9d:0a:da:e6:ff:be:05:c5:
4b:2d:fb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:13 2024 by rpki-client on console-fra.rpki-client.org