Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/PD1qo_WhmWI_jEcAKeRONWZ270o.roa
File: PD1qo_WhmWI_jEcAKeRONWZ270o.roa (raw, json)
Hash identifier: 32ZdZIb/YGGoDGXMvMQauenNnVEDlwTcPSNlJ+AYpLk=
Subject key identifier: 3C:3D:6A:A3:F5:A1:99:62:3F:8C:47:00:29:E4:4E:35:66:76:EF:4A
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 01856D9D1BD6543A54FB7439DCBD518BB173
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/PD1qo_WhmWI_jEcAKeRONWZ270o.roa
Signing time: Sun 01 Jan 2023 13:54:50 +0000
ROA not before: Sun 01 Jan 2023 13:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198785
IP address blocks: 185.155.226.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:1b:d6:54:3a:54:fb:74:39:dc:bd:51:8b:b1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Jan 1 13:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c3d6aa3f5a199623f8c470029e44e356676ef4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e3:27:a8:74:5e:af:63:7a:b5:55:a8:5b:32:
0c:53:b8:a1:08:57:ff:0d:39:21:aa:bd:d8:f8:30:
cb:44:b7:2a:d4:60:50:17:39:0a:89:ec:0a:bf:d6:
00:65:7e:4a:99:33:6d:61:60:fd:4e:60:72:c0:ad:
1d:2b:38:00:ea:2c:2a:64:79:2f:89:a1:b2:cf:c9:
a3:ca:ea:56:5a:b4:28:e2:09:81:5e:f9:ae:04:24:
60:e3:4e:9e:2e:48:e7:86:b4:ab:6e:16:79:c8:86:
d4:56:72:b6:6d:eb:32:e2:07:04:a4:95:44:a8:74:
51:67:8f:2f:a1:4b:24:f4:72:83:74:37:fb:88:25:
a7:6c:9d:7a:f6:b3:72:e6:1b:27:64:3d:a3:0d:82:
ec:26:cb:73:1f:74:51:d7:c7:a2:39:40:f5:9b:df:
34:12:a4:aa:bc:33:ec:aa:52:c7:5a:ad:9e:84:0c:
c2:33:a9:69:e7:d6:56:94:7c:0b:64:8f:26:de:af:
46:0e:1f:f9:08:34:9c:85:20:6a:6e:4b:be:58:be:
4f:44:04:cc:40:d8:12:d2:31:81:dc:70:59:42:cf:
2f:94:47:e6:46:e2:91:5a:8e:dc:85:74:40:2f:85:
60:a0:1a:b5:05:7f:49:de:b6:87:74:be:5c:8b:60:
30:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3D:6A:A3:F5:A1:99:62:3F:8C:47:00:29:E4:4E:35:66:76:EF:4A
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/PD1qo_WhmWI_jEcAKeRONWZ270o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.226.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:4f:e6:eb:bb:86:71:0b:8c:59:e0:be:8d:01:82:3c:02:69:
0a:c8:b0:b8:5a:e7:10:20:a8:9a:0a:c5:aa:58:4c:c5:ab:0e:
41:91:27:f4:cd:64:ba:ae:7d:fb:05:f3:da:d1:79:00:ed:69:
b4:e4:43:a1:a4:e1:0b:21:35:0d:73:53:ec:f0:6e:c9:81:04:
af:36:1b:dc:fd:75:94:f7:a7:43:9f:30:fb:01:79:68:4f:0b:
a5:b1:be:27:5f:ec:dc:97:a5:4e:33:81:0e:f1:21:ea:2a:b6:
bd:f9:ab:b3:b1:26:f6:be:a3:a5:d5:e8:46:48:ea:a0:b8:52:
de:93:2a:a5:e1:8e:af:49:64:19:cf:b6:85:ac:c3:81:71:41:
40:d8:ff:03:b0:ef:68:da:fb:b2:03:fa:37:6b:a6:b8:ca:00:
41:ef:31:46:c0:de:72:b6:fc:64:7e:4b:15:e9:77:98:16:5f:
3e:07:d8:72:22:0c:64:cb:62:57:cd:7c:86:3f:e3:bd:b7:32:
b4:72:f4:cc:d0:7f:86:f5:19:df:94:60:8d:96:7e:39:ff:50:
ac:16:6d:22:59:4a:59:9f:d1:3b:79:2d:83:58:82:8c:c0:ea:
17:01:a6:da:0f:b6:f6:84:af:76:1d:27:ae:34:31:d0:dd:f0:
cc:fd:e5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:19 2024 by rpki-client on console-fra.rpki-client.org