Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/25uGIi-KzN-Bw-SXyo0cXG6tk5M.roa
File: 25uGIi-KzN-Bw-SXyo0cXG6tk5M.roa (raw, json)
Hash identifier: v8C3ifw+kvZQoChsttDBijB0NUi6nMnhTTSJWMJ9qMQ=
Subject key identifier: DB:9B:86:22:2F:8A:CC:DF:81:C3:E4:97:CA:8D:1C:5C:6E:AD:93:93
Certificate issuer: /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Certificate serial: 018C8D41558B5370AB449202B933BD8ADC4A
Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/25uGIi-KzN-Bw-SXyo0cXG6tk5M.roa
Signing time: Thu 21 Dec 2023 16:41:58 +0000
ROA not before: Thu 21 Dec 2023 16:41:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30740
IP address blocks: 185.144.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8d:41:55:8b:53:70:ab:44:92:02:b9:33:bd:8a:dc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Validity
Not Before: Dec 21 16:41:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db9b86222f8accdf81c3e497ca8d1c5c6ead9393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ad:47:08:f1:f3:77:b1:b9:4a:24:2f:da:f3:
08:9a:5e:ca:c2:bd:f4:eb:98:7f:65:ff:26:56:7c:
18:a8:ff:30:81:ad:34:b1:1f:f8:92:fd:48:1d:3a:
a2:fd:78:0d:cb:63:28:78:22:ec:89:bf:13:ba:5c:
16:83:3f:6c:f6:dc:77:bb:7b:72:d1:ac:34:7e:b1:
cb:e0:8b:eb:d1:58:e2:d6:8a:9e:e2:fa:60:7e:4b:
36:d5:fe:d0:fb:0d:68:02:b2:1b:b6:2f:9e:46:30:
cd:07:ea:78:59:27:a6:50:a8:73:55:6b:d1:30:e2:
47:76:c2:dc:75:31:bc:ac:c3:f2:89:21:26:0f:cd:
5c:7c:0f:15:35:c7:a8:c8:58:96:c2:0b:9a:3b:de:
af:d9:6f:3b:18:cf:9d:0c:4f:0a:10:17:d8:64:bc:
8a:57:13:60:1c:b0:3e:5e:36:70:57:83:cd:55:5a:
c1:51:f7:8d:d8:ed:18:86:db:4f:16:44:90:37:62:
8d:0b:c3:af:bd:78:62:68:ed:bb:1f:55:6a:65:c8:
9a:9d:24:50:84:e3:7d:33:80:9d:c6:76:9f:02:4e:
a8:fe:4a:a7:e6:d1:6a:f4:ef:56:76:5e:79:56:fd:
de:af:68:1a:ea:bc:fd:0c:0c:88:9d:68:44:8c:33:
b3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9B:86:22:2F:8A:CC:DF:81:C3:E4:97:CA:8D:1C:5C:6E:AD:93:93
X509v3 Authority Key Identifier:
keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/25uGIi-KzN-Bw-SXyo0cXG6tk5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.109.0/24
Signature Algorithm: sha256WithRSAEncryption
82:bb:91:dd:31:83:31:62:f3:03:f0:24:52:67:d4:0a:e6:7b:
bf:b6:d6:1f:d2:27:18:bc:43:35:28:46:5b:d0:05:ea:a8:b1:
28:dc:5c:9a:bd:e9:78:73:59:b3:36:cf:4b:77:bb:4b:b5:d4:
3f:bd:1e:20:3b:47:bf:b7:8e:d1:e3:79:27:6b:0f:09:2e:44:
36:fc:ab:06:ab:5c:a5:bb:3f:83:cd:6c:66:20:5c:58:f3:21:
38:5e:fa:9e:d4:d4:50:1b:37:5f:1c:5e:3a:d1:a1:b4:81:ba:
08:95:15:9f:dc:c8:27:21:94:36:84:83:be:81:61:e1:a5:62:
80:e3:d9:fc:c2:c6:cf:0b:ef:2e:21:cc:53:77:03:5e:45:75:
c8:d3:6a:e3:6b:98:77:db:fc:bc:fa:f0:b0:d6:a2:36:1e:ff:
d3:49:41:d4:1b:10:1b:ce:32:02:73:51:04:20:2c:9f:a2:bb:
24:b7:d4:e1:fa:b5:64:64:d5:40:3b:2d:3f:96:a7:ef:2e:99:
99:ff:fa:62:b7:13:01:8d:08:ba:8a:db:47:56:02:03:a2:5a:
b2:5c:ea:5a:65:15:7d:19:6b:ab:fa:2c:7d:5e:5b:7f:65:b6:
cf:03:4c:ee:6e:bd:cb:88:f8:64:f9:79:23:1c:3f:c8:5e:d3:
ac:1b:81:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:34 2024 by rpki-client on console-ams.rpki-client.org