Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8e416c-5550-4e81-a8c4-d6235b5fe67a/1/6T36lWFlR-H6ajUnFIoOQ2WiZh8.roa
File: 6T36lWFlR-H6ajUnFIoOQ2WiZh8.roa (raw, json)
Hash identifier: Iszun6iOCn9Kzie9P/ppstfXRYJwnCQSp/vuUFGjO28=
Subject key identifier: E9:3D:FA:95:61:65:47:E1:FA:6A:35:27:14:8A:0E:43:65:A2:66:1F
Certificate issuer: /CN=5b00790bae3cd85a50e4f934388361763ebfbe5a
Certificate serial: 01856FF97E13B4C872FA593FC20FA565C07D
Authority key identifier: 5B:00:79:0B:AE:3C:D8:5A:50:E4:F9:34:38:83:61:76:3E:BF:BE:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwB5C6482FpQ5Pk0OINhdj6_vlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8e416c-5550-4e81-a8c4-d6235b5fe67a/1/6T36lWFlR-H6ajUnFIoOQ2WiZh8.roa
Signing time: Mon 02 Jan 2023 00:54:59 +0000
ROA not before: Mon 02 Jan 2023 00:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 185.225.161.0/24 maxlen: 24
212.11.79.0/24 maxlen: 24
185.249.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:7e:13:b4:c8:72:fa:59:3f:c2:0f:a5:65:c0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b00790bae3cd85a50e4f934388361763ebfbe5a
Validity
Not Before: Jan 2 00:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e93dfa95616547e1fa6a3527148a0e4365a2661f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e9:6e:ee:e3:4c:f2:c8:ea:86:ad:58:1c:a1:
03:bb:b3:31:88:a3:da:35:5b:7d:f8:00:2c:0f:c8:
ce:2d:f8:f2:56:6a:ba:87:97:1d:0e:ae:ec:12:58:
91:0d:3d:a2:5e:fb:28:7b:81:94:02:a9:04:c9:2d:
1f:5f:e8:eb:3a:31:e8:b6:21:f5:63:eb:ed:62:83:
30:6c:1c:42:08:14:e6:b1:9c:33:94:cd:f5:50:ae:
37:60:de:4a:2d:21:e7:f2:e8:10:e2:a8:63:34:81:
f3:cd:07:4c:29:bd:6c:23:6c:8a:fc:f0:b8:cd:84:
a9:f1:e0:64:26:b9:a3:fb:bf:be:54:00:e1:f3:c2:
61:46:05:2f:f0:25:52:29:e5:ba:01:72:5e:81:be:
cd:62:82:8d:d3:bf:cb:71:8c:d1:bb:d4:84:d1:23:
de:98:cb:71:8b:e7:2d:54:ba:31:2b:8d:dc:bd:c4:
7c:6d:a6:61:08:9d:d5:09:e4:11:ff:ab:8b:eb:f7:
6c:54:e9:a6:d7:43:07:a3:9f:3c:b0:e3:c9:ac:d4:
a9:7b:fc:e8:96:88:2f:bd:4e:f5:0b:b3:49:6c:29:
fb:73:ca:db:b3:b0:1e:1f:8f:58:be:56:d4:79:99:
07:42:17:74:b9:17:d0:6e:0c:85:8f:7f:a1:fd:52:
a8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3D:FA:95:61:65:47:E1:FA:6A:35:27:14:8A:0E:43:65:A2:66:1F
X509v3 Authority Key Identifier:
keyid:5B:00:79:0B:AE:3C:D8:5A:50:E4:F9:34:38:83:61:76:3E:BF:BE:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwB5C6482FpQ5Pk0OINhdj6_vlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8e416c-5550-4e81-a8c4-d6235b5fe67a/1/6T36lWFlR-H6ajUnFIoOQ2WiZh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8e416c-5550-4e81-a8c4-d6235b5fe67a/1/WwB5C6482FpQ5Pk0OINhdj6_vlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.161.0/24
185.249.220.0/24
212.11.79.0/24
Signature Algorithm: sha256WithRSAEncryption
45:44:8c:c6:72:f0:c7:59:fd:73:64:44:8f:4e:2e:7d:61:32:
ee:ad:a3:fa:13:1c:96:d0:98:41:dc:04:5c:cc:7c:c8:3a:93:
53:55:23:37:66:aa:91:f9:2d:9e:a4:7c:a5:48:21:6d:3b:ae:
2d:79:00:08:4b:36:c0:1d:19:4a:0b:89:53:97:ad:7c:a5:4a:
77:ac:53:47:58:42:a1:49:a1:9b:49:ee:ca:18:6c:8a:95:0b:
c5:43:70:20:01:db:ad:67:62:92:67:81:b7:f3:d7:a9:59:65:
8f:e4:fc:b3:31:c9:d1:7a:8f:da:d1:ec:44:35:0d:bd:b1:2e:
9b:b9:ff:76:22:63:f6:11:3a:2c:57:4d:37:79:a3:41:34:68:
67:31:1a:6b:55:4c:21:1f:33:df:94:db:20:86:e6:83:23:75:
b0:09:1e:62:2f:cd:c5:e4:36:61:f5:b8:7f:f0:8b:6e:57:49:
63:e9:00:57:7d:2c:91:e2:f8:3e:0c:75:3e:d5:fd:66:96:bf:
db:ed:ee:56:a4:4a:66:c8:f8:7a:94:c2:0d:c2:49:be:ee:05:
00:15:cd:71:a2:7e:3e:25:ee:13:8a:35:b6:9a:ea:d6:5e:bd:
44:4c:a2:83:02:9d:10:5f:d0:8e:8b:f0:a9:94:5d:27:b1:5f:
e8:03:09:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:09 2024 by rpki-client on console-fra.rpki-client.org