Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/v5i1eT7DWAdItpoTnovxwgogF7U.roa
File: v5i1eT7DWAdItpoTnovxwgogF7U.roa (raw, json)
Hash identifier: f8VajdAOBRPGHhKcYo7WVYCbmo+YBl3noBh1loCLGDE=
Subject key identifier: BF:98:B5:79:3E:C3:58:07:48:B6:9A:13:9E:8B:F1:C2:0A:20:17:B5
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 018DEE9A080E37619C3A461025CFD1DAFBEC
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/v5i1eT7DWAdItpoTnovxwgogF7U.roa
Signing time: Wed 28 Feb 2024 07:24:48 +0000
ROA not before: Wed 28 Feb 2024 07:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206092
IP address blocks: 185.132.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 07:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ee:9a:08:0e:37:61:9c:3a:46:10:25:cf:d1:da:fb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Feb 28 07:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf98b5793ec3580748b69a139e8bf1c20a2017b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:75:97:d5:ec:39:ae:44:e8:a3:d0:bf:22:
27:15:81:c1:23:3a:51:6a:00:67:ea:00:13:08:fc:
5d:11:67:8b:0f:ed:6f:33:cc:7e:33:61:96:d3:be:
34:8c:64:9f:ef:1c:4d:6c:6d:5f:7c:94:6e:fd:b8:
aa:b2:94:87:c0:be:8b:92:4a:0c:96:fa:44:53:d2:
ff:17:12:af:42:12:d8:16:97:5b:76:a3:4f:6a:51:
70:e2:4b:9f:0e:31:1c:8b:92:5a:c5:34:3d:0a:6c:
e4:71:e3:fe:d9:f3:45:84:f6:16:46:6b:c5:74:7f:
de:15:c9:8d:49:ca:c9:5b:c2:c6:b0:42:de:36:31:
b4:07:69:ed:c2:61:fc:c4:80:05:8d:13:83:dd:9c:
c5:87:ec:44:b8:c4:cd:bd:04:95:68:37:09:f7:4f:
5a:e5:f6:3e:d4:15:42:d2:31:97:d3:78:9a:75:d6:
49:8b:e3:ee:8e:00:97:fd:05:9e:38:40:02:99:4a:
d0:d0:b9:53:a8:4d:f3:fb:fc:07:04:34:0e:c2:89:
ad:d5:1b:9e:f7:01:48:c1:70:ba:66:50:be:57:5c:
85:88:a4:f5:5f:40:b4:c9:e7:9a:40:bf:d1:a3:72:
a3:67:24:c6:87:78:e0:da:50:bb:5a:b1:5d:fd:27:
0a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:98:B5:79:3E:C3:58:07:48:B6:9A:13:9E:8B:F1:C2:0A:20:17:B5
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/v5i1eT7DWAdItpoTnovxwgogF7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.186.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:a4:9b:1c:ed:55:06:15:85:13:a0:21:82:30:34:57:e5:e3:
74:13:de:fe:09:46:e3:23:bd:98:73:bb:52:e4:a7:0c:d6:5b:
25:56:c4:ed:c3:2c:aa:b6:07:17:87:8d:68:aa:fe:bb:bb:4b:
e4:9c:a4:28:60:f1:bd:e3:a7:d3:c7:e2:0c:6e:fc:24:18:38:
c9:37:ca:39:ec:c1:a0:47:94:38:fb:0e:48:a9:1f:33:e8:e3:
e5:18:45:89:ea:8b:64:fc:01:6b:63:47:8e:1f:d4:09:c5:73:
4b:77:56:8d:2a:fd:aa:ca:f0:db:6f:f9:39:d2:eb:1c:b3:af:
bb:63:e2:d0:02:31:59:0f:a7:36:d9:f7:8a:5c:90:78:21:44:
21:18:b5:3c:9c:73:bf:64:21:c2:c9:df:e1:ba:47:77:a2:62:
29:bd:87:1c:0c:04:70:ea:c1:c0:82:90:78:f5:92:f1:60:d0:
6e:99:d4:bf:7d:4b:70:4c:94:11:53:a4:bf:96:ca:24:97:4e:
17:68:78:96:1f:1e:c7:e2:53:39:43:27:06:6b:35:d0:65:b3:
1d:2b:6a:d1:79:f1:92:75:01:a4:14:53:ab:a7:b4:f5:37:42:
1a:38:cf:09:0b:20:40:36:6c:28:3b:53:ff:4f:7a:95:0b:91:
a0:c8:4b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 11:29:12 2024 by rpki-client on console-ams.rpki-client.org