Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/A0n1gphmdDPyENSYAkv4Qt_2H60.roa
File: A0n1gphmdDPyENSYAkv4Qt_2H60.roa (raw, json)
Hash identifier: sOKUWjo3zhYLEyOaeqpxmD8EjPPnuou835SXJLlqCiA=
Subject key identifier: 03:49:F5:82:98:66:74:33:F2:10:D4:98:02:4B:F8:42:DF:F6:1F:AD
Certificate issuer: /CN=668d2f64c337465ed38da5f7cc4584df87d4a744
Certificate serial: 018572DED909771FBF3FAF4A2D469D1C2E91
Authority key identifier: 66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/A0n1gphmdDPyENSYAkv4Qt_2H60.roa
Signing time: Mon 02 Jan 2023 14:24:45 +0000
ROA not before: Mon 02 Jan 2023 14:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205867
IP address blocks: 185.55.234.0/24 maxlen: 24
2a00:b404::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:de:d9:09:77:1f:bf:3f:af:4a:2d:46:9d:1c:2e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668d2f64c337465ed38da5f7cc4584df87d4a744
Validity
Not Before: Jan 2 14:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0349f58298667433f210d498024bf842dff61fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:45:fa:47:c3:2f:e8:72:9a:9d:b0:45:b8:e5:
c5:a4:58:9f:fc:b2:97:8a:06:41:87:df:fb:e4:a1:
90:e0:25:4f:52:0d:b1:f4:e2:79:16:ee:90:a7:71:
1b:00:9b:c0:86:7c:a3:b5:7e:6b:90:34:b6:d0:d8:
48:df:05:d8:ed:77:10:5e:3b:23:db:8c:cd:ed:e3:
9c:b2:2e:e0:d0:3e:4b:c8:10:5b:28:ac:48:47:e9:
1f:0c:a9:51:6f:36:cf:2d:15:55:76:54:e9:98:86:
a3:eb:c3:8e:80:eb:35:c9:57:af:dc:ae:a6:d0:27:
00:7e:0c:82:04:4f:58:15:44:ee:7c:7f:65:c1:f5:
d4:c1:9c:eb:34:1d:fe:01:f7:f1:e2:23:89:e5:08:
8b:ad:9d:ee:8e:80:89:3d:f7:3b:68:02:e8:e6:74:
82:08:e6:bb:22:bb:7f:07:e7:c1:64:18:5b:d6:ee:
4b:44:e4:b5:03:99:fb:5e:9d:a5:20:91:49:e4:d9:
c7:0b:9e:fb:85:88:3a:15:96:52:30:cd:de:0a:f2:
4d:b2:f0:55:64:fa:c1:f1:6c:c4:63:f9:62:10:11:
af:a0:e1:48:f8:26:d7:24:8f:45:54:8e:84:22:15:
9b:6b:86:46:26:29:7a:0d:14:83:e1:07:3d:28:ca:
7c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:49:F5:82:98:66:74:33:F2:10:D4:98:02:4B:F8:42:DF:F6:1F:AD
X509v3 Authority Key Identifier:
keyid:66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/A0n1gphmdDPyENSYAkv4Qt_2H60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.234.0/24
IPv6:
2a00:b404::/32
Signature Algorithm: sha256WithRSAEncryption
1a:95:0a:9b:57:76:53:cd:2f:f7:13:72:43:73:ff:be:67:45:
66:84:81:e4:18:82:4e:9f:53:70:23:7d:95:f6:11:4c:c8:ac:
bd:0d:29:aa:7c:e1:43:c5:48:b3:01:96:08:27:be:73:f4:2e:
47:40:6d:e9:75:12:e0:26:6f:07:81:b8:60:54:06:16:90:98:
7c:78:b1:f0:8c:41:ce:02:c1:af:8a:18:1e:4f:7c:66:02:1b:
ca:2c:c7:17:78:e1:0e:8b:e9:5f:b6:8c:31:6e:21:56:a0:ee:
ce:d3:b1:5c:cb:4e:bd:b7:db:b9:a9:5c:15:e7:76:15:82:0d:
3a:a9:11:15:e1:fd:94:41:4d:36:38:06:ce:53:70:8e:44:84:
3f:e0:63:87:11:d5:0c:67:ed:0e:93:7e:80:29:db:a4:1f:75:
a9:fa:8f:55:b5:d6:dd:12:09:67:95:1e:f9:a7:49:14:32:10:
ee:14:e0:56:45:c4:b6:31:38:fc:7c:75:07:e6:39:37:88:7d:
bb:8a:85:1a:24:0e:3b:56:f3:56:3d:55:b0:6f:72:1c:f3:d3:
b5:fe:f0:fa:d9:9f:de:85:4d:8c:a4:3d:4b:80:09:9d:7a:c7:
02:18:74:77:ef:7a:58:50:67:0a:19:19:07:8b:f0:ff:0c:79:
5e:07:db:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:11 2024 by rpki-client on console-fra.rpki-client.org