Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/P2Wq1i-_nowFwm8NG9kdoyM88tg.roa
File: P2Wq1i-_nowFwm8NG9kdoyM88tg.roa (raw, json)
Hash identifier: kMsQZr0h3eqwCJ2KazISefGffHP+FRc5aH8poEtGMpA=
Subject key identifier: 3F:65:AA:D6:2F:BF:9E:8C:05:C2:6F:0D:1B:D9:1D:A3:23:3C:F2:D8
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01856BDCA38A89A2BAD86FBF710D53A8E30C
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/P2Wq1i-_nowFwm8NG9kdoyM88tg.roa
Signing time: Sun 01 Jan 2023 05:44:59 +0000
ROA not before: Sun 01 Jan 2023 05:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 185.173.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Mar 2023 14:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:a3:8a:89:a2:ba:d8:6f:bf:71:0d:53:a8:e3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 1 05:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f65aad62fbf9e8c05c26f0d1bd91da3233cf2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:23:1d:98:67:0a:66:6e:f3:ca:07:26:7c:c6:
90:45:08:44:e7:4e:da:64:fb:94:90:a5:4a:ff:5e:
e5:6c:28:52:53:5e:06:99:d9:49:71:a9:8b:94:03:
18:13:e1:9e:86:14:08:36:71:5f:85:f7:1f:39:18:
92:ac:79:df:62:7a:75:13:94:37:80:54:26:05:44:
a6:4e:fe:8f:0a:f8:02:51:f6:aa:e7:25:f6:40:3c:
d9:28:b1:95:8c:d8:75:d1:5b:d0:18:39:d5:84:9b:
4a:a3:d4:f9:a0:8c:7a:8a:26:d5:80:db:3a:c3:2c:
d5:45:42:a7:45:6d:b0:17:c2:5b:d7:06:a6:a6:63:
95:9d:d6:75:33:56:5f:98:45:ae:8f:39:90:e7:22:
36:b5:5a:76:0e:8e:f8:51:56:b0:5b:51:dd:1c:21:
6b:36:2b:65:db:9f:ac:42:86:72:14:1c:4b:a1:44:
87:b2:ee:78:78:61:65:90:18:95:7b:35:1e:d6:27:
3b:c6:40:82:84:6f:bc:74:43:60:9a:88:37:a5:a7:
37:c4:fe:06:67:5e:7d:d3:f4:d7:6b:5c:06:3b:86:
fb:b0:7d:2f:ea:79:07:4c:9e:ea:e7:52:64:1e:b1:
15:65:1a:b1:d8:5f:b8:0b:b8:97:e6:a3:6c:ec:39:
ff:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:65:AA:D6:2F:BF:9E:8C:05:C2:6F:0D:1B:D9:1D:A3:23:3C:F2:D8
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/P2Wq1i-_nowFwm8NG9kdoyM88tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.144.0/24
Signature Algorithm: sha256WithRSAEncryption
df:3c:0d:22:4c:eb:4b:65:a0:97:e3:bf:fb:70:76:97:b3:ec:
83:51:c6:62:1d:ce:2c:74:59:c7:6e:cb:9a:f2:63:07:ac:f0:
dc:e1:ce:33:01:f3:ad:2b:e5:0a:4f:98:8b:9e:a7:0d:45:bc:
2a:77:02:da:60:b8:a4:f7:0f:a0:ac:d1:d0:b0:8f:23:4d:75:
7e:58:80:b6:64:3b:2d:da:b7:1e:6c:9b:51:f1:df:c3:12:a3:
f2:6d:25:01:d1:5c:72:d5:ae:ea:ed:12:bc:23:5c:ba:15:05:
6d:86:0f:c2:dc:6e:eb:01:45:19:3f:b5:e0:91:ad:06:0d:c5:
d3:cb:5b:ee:b4:7f:ca:52:c7:be:a4:57:2a:b9:b9:e4:7c:4b:
58:82:40:ff:90:12:56:ac:31:76:2d:3a:da:ce:98:8c:da:18:
6f:89:27:7f:01:cc:0e:dd:ba:0d:da:62:06:99:df:9f:64:68:
cc:75:ea:f6:98:81:a3:15:78:6a:ba:80:83:48:3e:f5:e1:b4:
b1:6c:2b:03:65:f9:4c:ec:e1:83:17:ab:82:34:71:4f:5b:db:
26:c0:d2:3a:57:cb:81:f7:98:c3:86:ee:81:34:df:a5:31:a4:
5c:a4:51:a2:91:92:f5:c6:57:db:c0:3c:48:41:88:9d:ca:23:
4c:aa:ff:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:37 2024 by rpki-client on console-ams.rpki-client.org