Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/c0T3iNmrowL51UjW1haIDn8fu28.roa
File: c0T3iNmrowL51UjW1haIDn8fu28.roa (raw, json)
Hash identifier: tAuwuFaR6NCYHRF3LZAqDiDejNyZX+WgInYp8YAwIc4=
Subject key identifier: 73:44:F7:88:D9:AB:A3:02:F9:D5:48:D6:D6:16:88:0E:7F:1F:BB:6F
Certificate issuer: /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial: 018CC79470A245DB82F43EEA4A701471D993
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/c0T3iNmrowL51UjW1haIDn8fu28.roa
Signing time: Tue 02 Jan 2024 00:30:43 +0000
ROA not before: Tue 02 Jan 2024 00:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57053
IP address blocks: 185.155.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Apr 2024 15:04:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:70:a2:45:db:82:f4:3e:ea:4a:70:14:71:d9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Validity
Not Before: Jan 2 00:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7344f788d9aba302f9d548d6d616880e7f1fbb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1a:43:b6:5d:c4:b4:61:9c:9b:04:8c:67:4b:
a6:79:6f:af:bd:df:a8:1c:30:11:8c:ed:86:a5:b4:
3b:6d:12:2c:b5:10:b6:ec:0c:8d:97:21:d8:55:94:
05:86:58:74:fa:88:d1:17:83:04:8b:db:33:60:32:
02:df:3b:b6:39:d3:89:8d:24:6a:0f:42:b1:1f:99:
28:17:b0:ee:22:f0:26:9e:c9:c4:ea:18:59:c4:b0:
6e:e7:40:64:19:29:2e:40:f0:c7:9d:83:03:bd:a7:
0f:7e:fd:04:eb:20:cd:6a:f2:68:af:77:e2:1d:3a:
a4:df:13:58:0d:3f:6c:7b:5b:00:c2:95:d6:81:64:
31:43:c9:05:b8:71:97:59:84:0c:ff:2e:b4:4c:6c:
8b:a2:3b:2b:8f:33:0c:00:20:27:24:90:ed:02:b8:
3b:c1:cc:9a:12:78:67:3c:0c:73:fe:7d:a0:2c:4b:
84:65:64:53:7c:db:39:5f:f5:f1:68:56:d2:13:4d:
7b:66:7d:e6:dd:7d:44:36:6b:99:8c:dd:a9:2d:e5:
d0:1d:6b:03:cd:01:a4:f6:01:23:af:66:01:28:83:
35:0f:39:38:2f:0d:57:14:a2:7c:8c:e5:40:fe:93:
0a:df:95:d9:4c:09:03:b8:d7:8f:51:86:18:29:40:
65:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:44:F7:88:D9:AB:A3:02:F9:D5:48:D6:D6:16:88:0E:7F:1F:BB:6F
X509v3 Authority Key Identifier:
keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/c0T3iNmrowL51UjW1haIDn8fu28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.159.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:cd:3a:ca:81:95:74:ad:0c:e1:09:49:02:6d:04:77:5e:80:
d9:17:2d:1c:1b:f3:03:c3:6d:5d:c4:fc:4a:be:fb:6a:dd:ba:
16:86:cd:a8:0f:c9:ba:e9:e1:44:ee:b1:86:39:ca:47:c2:13:
a0:63:d9:7e:5c:e1:49:0d:9e:9c:83:cc:12:0c:fc:f1:b1:4b:
7e:00:f1:21:9b:89:99:1d:ed:7c:90:31:b4:4e:ac:88:66:ab:
56:cd:ee:d4:04:4b:85:8b:16:72:93:37:41:62:fb:5e:b9:4d:
1c:2b:a2:cb:69:a0:fb:54:2b:28:eb:5c:23:ff:0e:ea:ab:36:
8c:3d:8d:2e:d7:b7:dd:87:12:f7:37:71:bc:98:a5:4c:85:8d:
e7:0f:03:3f:b0:c2:2e:78:37:1d:54:b9:f9:a4:09:16:ec:eb:
91:8d:bf:ee:fe:15:0b:a4:0d:ae:0d:47:12:61:b0:88:ff:66:
b7:ea:1e:00:6f:78:71:78:8b:5b:1e:51:be:d8:5e:4d:db:64:
9d:29:d8:7f:3a:1e:3e:4d:01:0b:4b:4a:41:ea:86:be:a2:89:
3a:5b:5c:da:25:60:22:db:34:77:0b:a1:ae:0a:bf:a6:d0:ac:
a6:6c:01:fc:3a:87:67:5b:82:36:70:e0:a1:90:a4:15:81:44:
0d:67:59:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:00 2024 by rpki-client on console-ams.rpki-client.org