Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/1S3AgilCiIcLNgOKNtNTEwCOti4.roa
File: 1S3AgilCiIcLNgOKNtNTEwCOti4.roa (raw, json)
Hash identifier: d8zEC9FGdlT3y1JreIacmu5B9cvBlsFRALzD9tnzVto=
Subject key identifier: D5:2D:C0:82:29:42:88:87:0B:36:03:8A:36:D3:53:13:00:8E:B6:2E
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 018CC80177712F8FA4117156D19442DA0018
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/1S3AgilCiIcLNgOKNtNTEwCOti4.roa
Signing time: Tue 02 Jan 2024 02:29:48 +0000
ROA not before: Tue 02 Jan 2024 02:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8311
IP address blocks: 185.251.80.0/22 maxlen: 24
194.4.52.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 10:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:77:71:2f:8f:a4:11:71:56:d1:94:42:da:00:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Jan 2 02:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d52dc082294288870b36038a36d35313008eb62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:5a:58:ce:9d:5c:27:c5:ff:96:ce:e9:70:
e4:e2:80:e8:8e:8a:86:98:e2:c5:33:a5:05:60:23:
61:60:7b:ad:00:50:1c:1d:72:c9:bc:d7:97:17:32:
12:36:4f:a7:7d:40:fe:dc:33:39:98:43:c0:5f:5d:
13:7e:af:58:d3:2e:ca:ce:8c:04:07:b0:0c:2c:1d:
5e:35:93:f8:58:ba:18:87:02:2a:9d:44:96:c7:57:
19:ce:8d:50:e1:c2:f9:f1:25:9a:e8:17:d3:86:3b:
4d:38:48:e7:c3:1e:50:cc:92:a0:a9:be:33:98:84:
d5:ed:f0:90:76:dc:19:86:8f:f3:27:72:ab:b9:09:
e4:69:72:bb:59:0a:b5:e6:9c:6e:e3:2b:61:7c:eb:
7e:a6:61:8a:b3:d6:b6:f0:69:45:98:d5:f0:a4:1c:
85:0b:fa:85:73:2e:69:04:57:84:ea:5f:cc:d4:5a:
02:b5:84:44:f4:6d:fa:2a:75:ef:02:4f:1c:e1:74:
e0:bb:6c:b6:79:75:1e:80:e2:90:13:dd:00:be:94:
3d:3b:33:81:5d:f0:6f:18:7b:05:5b:7c:b6:eb:10:
f1:a3:7b:2a:e0:4d:25:1d:b9:37:f3:52:77:b0:3f:
da:ef:6b:54:9f:c3:10:1b:13:3a:88:c4:36:cf:fa:
30:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2D:C0:82:29:42:88:87:0B:36:03:8A:36:D3:53:13:00:8E:B6:2E
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/1S3AgilCiIcLNgOKNtNTEwCOti4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.80.0/22
194.4.52.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:41:57:db:8b:e1:29:f0:d8:3b:60:a9:8a:f5:73:49:c1:5f:
87:bf:00:58:5f:80:26:d5:aa:bd:a8:fa:5f:09:4e:75:6e:6c:
f3:9e:79:06:ce:6a:69:7d:42:7a:d3:72:a0:91:10:da:fb:da:
9a:fc:ab:92:8b:dd:bc:0f:ac:c1:51:aa:6f:22:fa:f1:1f:fc:
fb:8d:c3:c4:5e:c9:fb:56:3e:db:02:b2:d6:9c:04:18:3c:02:
39:74:3c:73:4e:a0:dd:27:cd:06:1a:f6:b8:d7:6d:85:b2:b5:
df:e6:c7:3a:15:17:89:5b:c3:21:df:ac:7b:55:05:47:c5:34:
ae:2f:27:2f:73:77:dd:f9:7d:b4:81:ff:c9:c1:20:87:54:8d:
6a:a3:4d:34:af:bb:77:d3:5c:68:e0:a4:e6:97:71:89:bc:0c:
e2:20:c3:5f:15:ea:b1:6e:3b:f7:ea:80:43:85:9f:99:05:a0:
cb:90:8d:93:c0:46:01:b6:07:d2:62:3c:7e:2f:a8:0e:81:81:
a6:10:3b:12:c9:cd:89:bc:61:6a:cd:70:f3:b3:16:21:c7:4f:
8d:c1:f3:2b:7a:c0:a0:0c:51:d1:16:85:09:13:e0:5e:66:38:
3e:49:ba:9f:5c:15:1e:7c:ad:9f:67:64:4e:2a:38:f0:05:76:
67:27:7b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 14:29:40 2024 by rpki-client on console-fra.rpki-client.org