Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/Jb2bH9eG8mL2dC4yFpMfxgLjZq0.roa
File: Jb2bH9eG8mL2dC4yFpMfxgLjZq0.roa (raw, json)
Hash identifier: Vuetp6iEoMTkaXFZktPkZS716nx4Wfw1bB/3ThTrO/k=
Subject key identifier: 25:BD:9B:1F:D7:86:F2:62:F6:74:2E:32:16:93:1F:C6:02:E3:66:AD
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 01857246C952CACED2E4FB327884487520D9
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/Jb2bH9eG8mL2dC4yFpMfxgLjZq0.roa
Signing time: Mon 02 Jan 2023 11:38:39 +0000
ROA not before: Mon 02 Jan 2023 11:38:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201341
IP address blocks: 185.122.143.0/24 maxlen: 24
185.122.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:c9:52:ca:ce:d2:e4:fb:32:78:84:48:75:20:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: Jan 2 11:38:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25bd9b1fd786f262f6742e3216931fc602e366ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:36:e7:46:6f:6d:bd:9e:65:42:76:2d:24:d4:
d3:bb:89:4a:72:52:0a:d0:3f:1f:52:15:cb:26:c4:
1e:06:97:5b:be:21:c9:5c:f4:c6:2f:58:ff:5d:71:
de:56:e7:bf:d8:a6:a3:e9:22:6e:2a:fc:ff:79:7d:
ee:e2:7d:8d:95:e5:6c:ec:07:30:9e:ff:be:ea:41:
c2:1c:ec:b1:6b:80:95:b8:b8:1c:b4:0f:5f:83:db:
fc:17:54:79:b8:db:3d:4e:c0:f8:3d:4e:3e:5f:ee:
1b:79:94:96:0a:92:09:8d:10:f2:c4:1f:07:2a:51:
ef:23:43:e7:ff:06:25:94:78:35:db:2b:b4:42:34:
dc:21:f9:94:44:98:9b:74:3a:57:ae:3b:08:9a:62:
aa:58:ea:21:d2:4c:6e:e9:8b:43:df:5a:79:e5:cf:
08:00:a8:b9:d6:0a:e3:67:4d:df:7a:7f:45:74:b2:
7b:bf:cc:93:7f:ba:c4:6c:ee:dc:53:3b:1e:27:fb:
c0:c4:36:5e:2e:1b:f5:f4:55:58:ee:21:03:85:36:
fb:52:3c:40:e1:d1:e8:ef:05:38:ed:96:1b:24:51:
c6:94:84:c9:55:7d:c5:71:86:b7:41:37:b4:dc:e8:
4e:28:f5:bb:da:7f:be:d0:df:27:93:b5:4b:97:62:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BD:9B:1F:D7:86:F2:62:F6:74:2E:32:16:93:1F:C6:02:E3:66:AD
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/Jb2bH9eG8mL2dC4yFpMfxgLjZq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.141.0/24
185.122.143.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:61:aa:98:37:80:89:ac:01:4b:8d:83:6d:39:79:8b:35:d9:
c2:5d:c0:50:92:f2:5d:46:94:e6:1e:c8:9c:b8:ac:46:d5:bf:
fe:31:30:83:c0:73:50:2f:e8:d8:3a:ba:dc:27:96:24:af:b6:
65:80:45:7c:b5:fe:79:e6:ad:66:84:66:ff:d5:5a:83:04:b1:
00:32:dc:1c:3a:0b:b1:39:6e:ef:25:21:b6:35:7c:4a:b7:5a:
0a:a6:8e:e0:d4:68:d2:41:76:58:a5:a4:35:83:f5:00:39:59:
64:d2:69:33:7c:45:60:4f:66:ea:54:ef:ea:5f:a0:ca:9f:75:
fc:21:23:6c:75:8a:a1:7d:27:3f:a5:11:00:69:1d:7e:fc:04:
e1:88:37:c6:67:8e:c7:2f:91:67:a2:3b:60:13:01:1c:0c:6f:
65:3e:0e:b4:fe:ac:fc:b2:1e:c3:5a:cf:ce:96:e0:ec:d7:c0:
49:db:23:1e:05:6c:b3:ef:40:8f:99:94:84:42:36:5d:5a:7c:
bb:26:ba:86:d4:57:7d:9c:17:2d:b0:df:bc:15:f8:95:6c:f5:
52:fa:ec:06:39:50:bc:6c:d5:cb:4a:13:7e:33:25:56:e5:a5:
dd:89:69:6f:ad:24:42:e0:ae:b8:bf:18:75:f3:8e:0f:f1:49:
fd:98:06:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:58 2024 by rpki-client on console-fra.rpki-client.org