Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/DSbyDSaZ_cE3BglcCTZZaSqndUo.roa
File: DSbyDSaZ_cE3BglcCTZZaSqndUo.roa (raw, json)
Hash identifier: s5jG1QpA60+e03varO/IBMztqaTzivQEbsJE4PZ/D34=
Subject key identifier: 0D:26:F2:0D:26:99:FD:C1:37:06:09:5C:09:36:59:69:2A:A7:75:4A
Certificate issuer: /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial: 018D505D794CA582D962C9A4A77BA900409E
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/DSbyDSaZ_cE3BglcCTZZaSqndUo.roa
Signing time: Sun 28 Jan 2024 13:58:39 +0000
ROA not before: Sun 28 Jan 2024 13:58:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60540
IP address blocks: 185.155.157.0/24 maxlen: 24
185.155.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 00:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:50:5d:79:4c:a5:82:d9:62:c9:a4:a7:7b:a9:00:40:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Validity
Not Before: Jan 28 13:58:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d26f20d2699fdc13706095c093659692aa7754a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:42:38:9e:c6:6f:21:bf:ad:f6:ad:86:35:da:
cd:04:57:73:82:d1:a3:19:db:ab:f6:79:e1:53:9e:
43:e0:89:68:6d:cd:8b:4a:14:d3:de:b2:09:f9:e7:
3f:73:78:8f:85:0f:2f:92:50:54:ce:f6:c5:fe:1d:
d4:77:05:d3:fd:0b:39:37:d4:6b:05:ed:cb:0f:f7:
a1:a2:5e:42:fe:47:4d:3d:da:55:cb:81:20:d4:92:
05:8c:7a:5a:5f:72:e0:30:87:a2:c8:a6:fb:53:56:
56:0e:c7:cd:1b:be:d8:aa:ba:a1:c8:8f:4b:e3:73:
cd:62:e1:d1:67:77:e3:e5:30:74:00:50:a1:e1:d8:
58:bc:06:2e:4f:90:38:82:17:f0:88:d2:c0:af:e9:
a6:51:ea:b8:14:01:34:1f:4b:6f:c0:50:0b:87:00:
20:eb:aa:cc:94:d7:aa:8d:b4:21:cf:7c:98:65:a0:
55:87:20:ed:a4:4e:11:90:21:e5:9e:26:e0:ee:16:
4f:4c:98:e8:c7:9d:95:de:d9:3b:a4:a2:d6:1a:6d:
81:9d:14:df:e9:bd:3d:c2:ac:5f:12:44:ba:f0:52:
57:b9:41:91:61:eb:d1:63:b1:94:45:89:00:4d:2a:
ba:fa:58:ae:dd:60:43:07:eb:e2:56:12:23:ca:4c:
81:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:26:F2:0D:26:99:FD:C1:37:06:09:5C:09:36:59:69:2A:A7:75:4A
X509v3 Authority Key Identifier:
keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/DSbyDSaZ_cE3BglcCTZZaSqndUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.157.0-185.155.158.255
Signature Algorithm: sha256WithRSAEncryption
8e:b4:e2:85:d8:fc:0d:3c:8e:76:e2:6c:24:eb:77:36:9a:1d:
cf:34:6c:65:13:98:8a:9f:04:9c:8e:96:93:7e:5e:6e:01:17:
2d:10:3c:de:e1:c8:33:85:99:4e:6b:27:67:78:d7:bb:bb:90:
f3:6d:be:2d:67:a8:68:f9:8b:7f:81:47:98:17:b1:95:41:d2:
01:0d:73:44:11:15:23:52:b5:50:ba:80:d6:ac:60:1b:82:d2:
19:ba:ac:fe:e3:26:76:27:9d:6b:ba:9d:a3:c6:94:24:d4:f7:
f8:a5:ef:51:ba:0f:0b:80:5b:07:c6:6b:65:e4:65:11:aa:41:
ed:03:4d:30:15:5a:5e:c2:b8:d3:1c:cd:68:37:ef:39:e5:62:
4b:c2:27:ed:63:10:14:8b:f1:1f:ff:ef:ca:94:84:35:cc:a6:
de:98:31:89:dd:b5:78:91:c3:94:2c:1e:0b:8a:75:b8:ab:67:
27:de:7e:8e:13:16:f0:c7:15:e7:09:28:5e:2b:1e:99:ac:6b:
4e:16:02:ba:11:d1:29:4a:ad:92:09:70:d8:b2:9f:9e:16:04:
d2:96:d1:9f:7d:c7:dc:d0:c2:42:fc:8e:a1:de:b0:c2:59:97:
29:ba:df:46:38:b3:3d:39:3a:fb:ac:7a:a3:3a:8c:52:a7:51:
5e:61:3c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:31 2025 by rpki-client