Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/D_GrrA5iJTPG9C_b-xbOMSGfpEE.roa
File: D_GrrA5iJTPG9C_b-xbOMSGfpEE.roa (raw, json)
Hash identifier: qEVvsUKTSDNIMO+DZ96X6mdPKMYaIOHp1bSohIOd/CI=
Subject key identifier: 0F:F1:AB:AC:0E:62:25:33:C6:F4:2F:DB:FB:16:CE:31:21:9F:A4:41
Certificate issuer: /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Certificate serial: 018C8D4155B027F4DF72D23543221D9068EA
Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/D_GrrA5iJTPG9C_b-xbOMSGfpEE.roa
Signing time: Thu 21 Dec 2023 16:41:58 +0000
ROA not before: Thu 21 Dec 2023 16:41:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31727
IP address blocks: 185.144.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8d:41:55:b0:27:f4:df:72:d2:35:43:22:1d:90:68:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Validity
Not Before: Dec 21 16:41:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ff1abac0e622533c6f42fdbfb16ce31219fa441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:f2:92:02:b6:48:8d:86:53:ff:ef:a2:98:
31:c4:5a:1e:f9:b7:1a:41:52:bb:35:0a:43:41:31:
71:12:68:f3:1f:d9:af:4e:08:51:7d:dd:c7:fd:cc:
a0:96:a6:53:54:23:09:70:f1:4c:d7:9d:b6:16:09:
d0:ab:86:6f:36:ee:72:a1:a6:ee:bd:90:33:c1:19:
35:9f:1c:27:a3:56:eb:04:ed:50:03:f9:ed:eb:2f:
d9:51:66:67:31:34:e8:d1:2f:75:14:66:e9:5d:90:
20:1c:30:0f:52:9f:aa:09:b6:1b:51:68:3b:ad:f9:
87:a5:80:c8:55:48:33:83:d4:c9:da:6a:07:8d:07:
1b:3c:41:a0:12:f3:aa:0d:77:bd:45:88:ef:eb:29:
61:20:6c:8c:e4:28:91:32:01:e5:aa:ae:2b:96:41:
b8:45:9b:c7:35:c6:b1:b8:ab:3d:95:91:a2:9b:c8:
19:48:b0:8a:f2:46:89:04:77:20:8b:db:ff:1b:d5:
54:c1:f9:d9:87:2f:b2:8f:12:83:ca:0c:b0:ee:8f:
38:d0:49:d4:31:b6:b9:39:a8:fa:5f:3d:57:b2:a5:
84:4b:dc:a3:ff:cd:0a:e6:c7:54:44:57:c9:c5:19:
7b:fd:d9:96:20:ee:f9:f1:84:c3:37:25:0e:8c:d0:
9e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F1:AB:AC:0E:62:25:33:C6:F4:2F:DB:FB:16:CE:31:21:9F:A4:41
X509v3 Authority Key Identifier:
keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/D_GrrA5iJTPG9C_b-xbOMSGfpEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.110.0/24
Signature Algorithm: sha256WithRSAEncryption
49:0e:cc:df:71:5b:87:69:fa:09:fb:ca:b2:a7:ff:fe:ca:bf:
e5:14:a7:fc:4d:4c:d6:7b:3d:8f:5c:1f:c7:8d:0d:a5:0d:cb:
c1:ed:d4:96:2e:49:c2:be:e0:b0:46:81:ad:b8:49:a8:41:c6:
2c:1a:28:97:37:8a:d2:85:a6:75:d9:72:99:3d:2f:53:93:85:
88:b5:c9:aa:0d:74:37:d3:6c:bd:c9:8d:14:42:52:55:4b:e4:
45:cb:89:e5:14:f9:27:e2:ae:c8:51:a8:0a:e2:18:25:ae:1b:
db:82:18:d3:9b:29:29:e2:ce:bb:b3:c5:ee:c0:40:7e:5c:7c:
a6:74:3c:2d:2c:6a:f2:37:63:01:dc:1d:48:6c:45:90:62:35:
3e:31:07:c4:3f:21:bf:ef:f9:cd:52:58:9d:c9:66:eb:59:02:
60:48:4b:f4:fb:75:dd:ee:8c:7d:48:80:02:17:73:56:36:2a:
d7:3a:78:5c:83:72:3a:ff:50:87:fe:9b:48:33:84:6c:b3:55:
52:aa:a5:c5:47:26:c3:df:21:b1:84:4c:dc:d2:f1:a2:89:72:
a0:ec:0b:35:4e:92:7c:af:91:56:40:14:79:e7:6c:b0:8d:f1:
bd:6f:9e:32:e1:be:8a:2d:2d:36:55:6c:1c:82:da:13:54:af:
a7:c0:ef:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:34 2024 by rpki-client on console-ams.rpki-client.org