Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/2A3zs753VYQaXZKd5MHFuaHzONE.roa
File: 2A3zs753VYQaXZKd5MHFuaHzONE.roa (raw, json)
Hash identifier: ++Kw4MIGBd8EVInUGJ/xvv7QJttan4gcmXDFKOJRt5Y=
Subject key identifier: D8:0D:F3:B3:BE:77:55:84:1A:5D:92:9D:E4:C1:C5:B9:A1:F3:38:D1
Certificate issuer: /CN=6b60412823a0224a5d00e4963d6b23d22504997d
Certificate serial: 018B94C89871D0E35D2E6C847279165B6D05
Authority key identifier: 6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/2A3zs753VYQaXZKd5MHFuaHzONE.roa
Signing time: Fri 03 Nov 2023 10:44:16 +0000
ROA not before: Fri 03 Nov 2023 10:44:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19930
IP address blocks: 185.178.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:c8:98:71:d0:e3:5d:2e:6c:84:72:79:16:5b:6d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b60412823a0224a5d00e4963d6b23d22504997d
Validity
Not Before: Nov 3 10:44:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d80df3b3be7755841a5d929de4c1c5b9a1f338d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f8:48:90:52:d5:5b:ea:f5:52:9a:fc:77:4a:
38:dd:41:27:0e:2d:dc:bc:a5:96:4d:67:2a:3a:f6:
a9:60:6f:fd:16:21:e5:5d:33:81:5f:45:ae:cc:d4:
bb:40:09:0c:f5:1d:bd:5d:7a:ac:82:cd:71:75:86:
8f:3d:e5:08:ea:05:fb:83:28:72:c7:8c:9e:71:d9:
44:77:dd:61:e0:d2:25:04:06:75:2f:49:38:bd:87:
38:57:c1:8f:f0:e8:d7:c7:73:ce:5f:61:16:fa:76:
3b:53:86:4a:3f:f2:5e:46:7f:6e:84:27:b5:bc:14:
c9:86:aa:e7:d4:e1:2c:1d:71:8f:82:d1:a5:b0:9a:
ab:02:dd:5e:45:de:37:94:da:92:be:db:b3:1e:42:
1c:a2:cf:68:17:3d:ed:67:f5:de:ae:64:6e:05:e9:
b8:7d:1b:3e:01:0b:17:3d:e9:28:da:67:dd:2c:ef:
29:86:d6:03:9e:e1:1f:80:5e:55:c7:41:b5:c8:05:
39:26:04:07:e1:b8:17:e8:d7:4a:08:e3:2a:41:b4:
98:c5:bd:4a:34:fc:be:b2:41:0a:6d:f0:bf:d8:f5:
5e:08:19:5c:e1:85:f4:33:14:68:29:2b:79:81:60:
fc:63:dc:b0:67:82:fc:37:54:bb:00:b9:b7:74:03:
9d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0D:F3:B3:BE:77:55:84:1A:5D:92:9D:E4:C1:C5:B9:A1:F3:38:D1
X509v3 Authority Key Identifier:
keyid:6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/2A3zs753VYQaXZKd5MHFuaHzONE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.50.0/24
Signature Algorithm: sha256WithRSAEncryption
71:19:86:c1:74:67:29:45:47:09:64:65:42:74:0e:7d:60:33:
9f:70:8d:52:83:94:4d:11:f8:84:33:a2:fb:ff:64:40:00:1e:
f8:bb:4c:1a:fd:1a:a9:fe:1e:a0:ad:01:a9:fd:7a:f8:16:01:
dc:e6:32:19:84:d6:5a:92:37:08:f4:fe:f0:02:da:aa:46:86:
34:4f:77:5a:2f:a6:0c:ea:b6:fc:08:5a:53:1f:36:5a:16:d9:
d2:f7:16:b2:dc:77:9d:38:6c:fc:88:3f:5e:a9:4a:36:29:7f:
bc:ee:73:7e:9a:f7:a9:30:0f:f3:ff:14:6f:1a:88:90:e2:82:
19:74:1a:2f:c5:7b:c9:00:60:c1:81:a8:77:6e:f2:50:6a:20:
5f:19:7e:3e:32:dd:b0:4f:be:a9:d5:52:0b:0b:4e:e7:35:7e:
4d:a7:e6:39:1a:0d:6e:d3:6a:3e:8b:26:dd:51:cd:07:bd:fd:
25:fd:1f:ca:6f:92:76:cf:bf:0c:e1:53:f4:db:d3:2d:0b:37:
f3:34:a0:5b:16:46:1f:a2:c3:26:4f:af:77:00:63:84:df:74:
57:c0:59:71:2a:bf:30:48:4b:fd:01:fa:7c:25:2b:92:64:83:
cd:76:bf:9e:90:77:eb:53:15:7c:58:f1:26:75:d3:db:a4:96:
c8:82:3a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:13 2024 by rpki-client on console-fra.rpki-client.org