Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/Ccu673OtSesbF0-U9VWcoOlGaKo.roa
File: Ccu673OtSesbF0-U9VWcoOlGaKo.roa (raw, json)
Hash identifier: BnY+kZxHStwOnMEUaBzxeOoty/vv38WQY3PGeZNN+Hg=
Subject key identifier: 09:CB:BA:EF:73:AD:49:EB:1B:17:4F:94:F5:55:9C:A0:E9:46:68:AA
Certificate issuer: /CN=a7c7544e8b482d2311903706eed724049fe385bf
Certificate serial: 01856FE6F13A910235B521795ED70718B306
Authority key identifier: A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/Ccu673OtSesbF0-U9VWcoOlGaKo.roa
Signing time: Mon 02 Jan 2023 00:34:44 +0000
ROA not before: Mon 02 Jan 2023 00:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33932
IP address blocks: 185.120.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e6:f1:3a:91:02:35:b5:21:79:5e:d7:07:18:b3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7c7544e8b482d2311903706eed724049fe385bf
Validity
Not Before: Jan 2 00:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09cbbaef73ad49eb1b174f94f5559ca0e94668aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a1:78:3e:92:ad:78:b2:f8:7a:4f:68:d4:b9:
59:83:a1:48:30:b8:33:f4:c2:68:e0:4b:21:d5:68:
5b:d7:ce:4e:db:11:46:c3:b5:f8:94:f3:6c:ef:09:
42:30:87:27:45:e8:ef:66:8f:02:28:f3:fe:44:0d:
75:2d:86:77:11:db:68:75:9a:ba:ae:bb:ab:4b:e7:
33:51:29:11:44:bf:62:f1:7d:49:a5:3d:1b:1f:84:
8c:6e:f9:31:de:23:92:7b:59:1e:11:3c:3c:73:d8:
93:db:ae:f8:9f:e7:73:06:fe:84:9e:ee:82:90:5c:
36:54:67:3c:84:02:25:15:70:b3:55:bb:d7:91:36:
74:9d:03:75:ff:1d:86:dc:df:50:f2:30:16:a6:02:
06:35:01:9d:28:d9:39:12:13:82:59:95:08:58:30:
4a:5d:8b:57:04:e9:2e:11:dc:19:02:f6:31:77:fa:
dd:2a:3e:7a:a3:07:bb:6f:60:77:4e:ef:b6:8a:d4:
6b:9c:8c:95:05:83:d0:5d:2f:c0:c1:82:3f:1d:77:
3e:5f:48:0f:d6:52:18:d5:93:69:3e:71:91:57:4e:
b8:17:13:8f:27:91:c7:74:d9:47:f1:2e:7b:f3:cf:
9c:8d:87:d7:bc:b9:f4:37:3b:58:67:41:25:64:75:
48:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CB:BA:EF:73:AD:49:EB:1B:17:4F:94:F5:55:9C:A0:E9:46:68:AA
X509v3 Authority Key Identifier:
keyid:A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/Ccu673OtSesbF0-U9VWcoOlGaKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.182.0/24
Signature Algorithm: sha256WithRSAEncryption
30:be:df:c8:76:97:c9:77:a3:a1:8b:b2:54:ad:85:cd:a0:dc:
5f:10:0b:3e:ba:a3:64:fc:2e:b3:9f:64:00:9c:f8:32:74:3b:
a0:81:22:36:2f:de:f3:81:18:65:66:d6:e5:2a:72:81:67:ef:
1a:e3:21:61:25:00:69:d3:b4:db:bd:f5:b4:3b:8c:83:1f:84:
d7:93:80:7b:a0:e3:da:2b:3c:6a:79:78:11:40:15:f4:fd:64:
40:fe:16:5b:7c:30:10:a4:75:48:04:f5:19:36:6a:49:11:67:
e6:97:3c:a0:0a:9a:c0:59:63:e5:8d:ea:17:ce:50:2c:f8:27:
e5:57:46:40:3d:56:84:a8:63:55:03:6b:ea:e2:91:f3:f4:b2:
26:f0:cf:3e:03:97:5c:e2:4d:16:3d:f1:d2:8f:f9:56:ed:0e:
15:a6:01:ac:25:69:02:b1:7a:02:0c:16:83:bf:5f:1a:c8:9d:
97:c6:8e:ce:8a:11:22:fd:73:db:78:79:3b:b7:26:6d:1a:f8:
1a:0c:ae:f0:4b:65:23:4b:48:69:f9:78:64:1f:d9:e6:f9:e5:
7e:08:8f:2e:cd:79:4e:31:cb:d8:dd:b1:02:26:7b:42:f0:16:
fc:10:31:7f:52:4e:2e:6f:d9:b3:7b:74:7c:18:6e:d1:04:59:
8d:39:30:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:21 2024 by rpki-client on console-fra.rpki-client.org