Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/xADQMHyxkyinev39psOITxG2J-w.roa
File: xADQMHyxkyinev39psOITxG2J-w.roa (raw, json)
Hash identifier: Y2TClzy8R50o6AvBxOxngpOeZ0TykhSKGBmBEuHs3lk=
Subject key identifier: C4:00:D0:30:7C:B1:93:28:A7:7A:FD:FD:A6:C3:88:4F:11:B6:27:EC
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 01856F0B734CAA97ABDD55A83E64902505D0
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/xADQMHyxkyinev39psOITxG2J-w.roa
Signing time: Sun 01 Jan 2023 20:34:59 +0000
ROA not before: Sun 01 Jan 2023 20:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51717
IP address blocks: 185.73.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:73:4c:aa:97:ab:dd:55:a8:3e:64:90:25:05:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Jan 1 20:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c400d0307cb19328a77afdfda6c3884f11b627ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b2:af:5f:d7:79:dd:b5:10:2d:06:82:3e:0c:
98:8c:c0:9f:4b:c6:cf:33:6b:f2:b0:41:88:13:13:
f0:09:9e:35:6a:62:9e:c7:3c:1b:72:d3:6f:e1:6d:
f1:9b:5b:78:f7:5c:35:c7:55:5e:f8:81:e3:ab:0a:
49:58:46:7d:18:40:f1:1b:fd:b1:12:32:5a:56:38:
0c:9f:22:0a:f5:2b:67:8d:30:fb:ba:48:55:fd:00:
cd:21:de:5f:f1:40:4e:d3:63:43:c2:99:24:8a:3e:
76:97:73:79:86:30:f6:f5:99:87:17:00:9e:38:74:
88:fb:fe:60:49:18:fa:06:99:88:ca:fa:d8:aa:17:
96:28:2a:c5:6a:c7:41:d0:ee:55:37:98:3f:ac:43:
68:2c:b5:a5:9e:14:c6:cc:f0:16:89:af:7d:20:73:
be:bf:d9:8a:82:1c:44:8b:dc:26:7c:59:6f:20:b5:
22:31:71:5a:38:16:f8:fe:ae:10:d7:36:ea:57:80:
6c:d6:2b:98:ca:d2:c4:af:63:c7:79:7f:5e:d2:91:
f2:7e:db:a9:5a:4b:6b:ff:a2:a6:11:28:99:98:fc:
28:4a:57:ff:a1:1b:83:97:2a:b7:ef:14:51:70:cf:
cd:70:c9:7e:d6:03:6b:25:0a:b9:ef:19:13:5c:36:
2a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:00:D0:30:7C:B1:93:28:A7:7A:FD:FD:A6:C3:88:4F:11:B6:27:EC
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/xADQMHyxkyinev39psOITxG2J-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.210.0/24
Signature Algorithm: sha256WithRSAEncryption
66:1c:fd:98:5c:f7:31:2b:b1:ba:59:da:d9:48:bb:13:d3:cc:
e6:fe:9c:e3:af:26:4e:cd:4e:84:80:d6:55:17:fe:26:1a:38:
c9:1e:56:bf:e7:3f:91:3d:85:c6:7a:53:cf:6d:24:30:3a:0f:
6a:a2:ed:63:62:13:b7:be:1a:96:cc:76:57:d7:af:d9:b8:7e:
45:c5:5f:5b:b1:9e:10:99:b3:cc:be:25:c2:1f:f0:e9:e8:db:
b1:e5:b1:98:7f:c9:ae:a7:62:49:83:ca:f9:25:0e:f4:66:ed:
e3:91:ed:31:72:bc:56:2e:0f:83:df:c7:5e:d7:3e:4d:34:e3:
90:4b:70:9c:a4:bd:fa:9d:28:7f:c2:f9:91:ec:1c:72:c6:a3:
fb:94:be:c1:8c:3a:ae:c8:28:f8:f9:25:42:fb:72:c7:68:cb:
c4:b4:76:ce:c8:ce:84:5c:b8:18:62:a1:f1:10:bf:61:59:2d:
2a:99:27:93:20:22:3f:4e:d6:eb:0f:d2:d5:1e:34:ab:fd:db:
f5:73:ac:35:49:6c:62:ad:06:5c:cb:07:0d:33:59:1e:03:50:
f5:f4:ed:a7:61:3f:73:f0:15:84:50:42:77:02:6f:a3:51:39:
f6:c3:40:de:30:13:4d:f7:1f:bd:7c:ad:b5:41:1d:81:c0:a9:
a9:e8:45:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:38 2024 by rpki-client on console-ams.rpki-client.org