Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/k99LheB2ruLaIMK36_WyHYgh7d0.roa
File: k99LheB2ruLaIMK36_WyHYgh7d0.roa (raw, json)
Hash identifier: 1x5u1YkLMlShqLAmyI9fkXOSVmmJTbnhf0KKysSjCxc=
Subject key identifier: 93:DF:4B:85:E0:76:AE:E2:DA:20:C2:B7:EB:F5:B2:1D:88:21:ED:DD
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01856DC1CDA097C4E6A09B877CE9AEB75242
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/k99LheB2ruLaIMK36_WyHYgh7d0.roa
Signing time: Sun 01 Jan 2023 14:34:55 +0000
ROA not before: Sun 01 Jan 2023 14:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49107
IP address blocks: 185.126.182.0/24 maxlen: 24
185.126.183.0/24 maxlen: 24
185.255.176.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:cd:a0:97:c4:e6:a0:9b:87:7c:e9:ae:b7:52:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 14:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93df4b85e076aee2da20c2b7ebf5b21d8821eddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c4:83:37:88:3d:cd:1f:e9:73:3c:2c:2d:94:
95:86:2e:e3:b8:de:37:f7:72:91:34:f2:90:a6:3e:
f6:90:47:1e:46:8b:46:b0:c2:86:47:63:f4:ea:d3:
58:d5:a0:21:44:88:51:3f:c9:98:20:e8:ed:2c:0d:
dd:ac:a7:2c:9e:17:7b:e2:ee:55:d5:56:c6:6e:1c:
36:d7:a2:7f:9e:2b:9a:dc:a3:66:c8:5a:83:d3:a6:
22:68:26:0c:e4:4b:2c:37:51:c5:1e:db:41:cd:49:
57:08:9d:d7:fd:b2:13:29:45:06:ea:cd:16:ce:d8:
01:b0:1a:9a:c5:a4:19:75:25:59:42:6f:e9:ef:9d:
d1:17:02:57:38:19:e7:6b:b2:4d:cb:3a:83:5c:1d:
b0:eb:f2:93:47:a3:e1:7f:a8:f7:e3:2d:e7:77:e9:
00:48:45:61:08:06:d3:bc:d5:94:1b:d8:e7:7b:76:
66:46:a9:9f:a8:01:10:2b:8a:db:45:d7:62:c6:ab:
c5:08:76:37:89:f0:c9:87:22:13:20:b9:a0:99:7f:
cf:d6:60:30:85:22:2e:4b:2e:03:ba:59:e8:3a:c8:
e6:6c:78:ff:7d:6f:22:10:6d:7c:4d:8a:ab:a0:03:
05:e4:d1:a7:e8:8d:04:44:5e:0f:21:e2:3e:01:e9:
81:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DF:4B:85:E0:76:AE:E2:DA:20:C2:B7:EB:F5:B2:1D:88:21:ED:DD
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/k99LheB2ruLaIMK36_WyHYgh7d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.182.0/23
185.255.176.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:af:76:3e:5a:2c:a1:a6:c4:13:bf:45:00:d5:2d:fc:a8:b8:
ec:ff:17:d2:1f:67:5f:37:dc:21:32:9d:eb:71:b1:94:d9:48:
de:6e:59:3f:8c:02:53:f0:33:aa:9b:45:48:e3:ee:74:21:6f:
bd:0c:43:99:b4:68:5d:6f:a8:64:f6:96:1a:52:c8:a1:25:47:
69:be:ac:51:ec:2d:38:e0:b6:40:90:8e:46:98:28:97:ea:37:
65:1b:5a:94:b5:9e:ff:c6:f0:cc:71:59:f6:ca:1b:ce:8f:9d:
d8:13:bd:28:d9:49:00:3a:6a:30:87:62:f8:81:4f:09:dd:41:
4c:bd:e6:d3:d0:46:58:23:73:3a:d6:16:a0:f4:b8:f4:6d:22:
bb:99:b7:54:5e:97:e4:e9:b4:50:22:f5:73:28:98:12:40:10:
49:2f:47:74:b4:8e:89:99:17:a3:89:8c:0c:57:aa:06:83:87:
51:d1:bb:d4:56:3a:cf:ac:be:44:67:22:bc:2a:8c:53:c6:1d:
e0:b1:9b:f0:90:c0:20:9a:d0:2c:13:87:fc:c5:90:ce:f1:ee:
b1:69:dc:89:63:20:b3:99:1d:b9:5d:19:5e:6c:1f:4a:e7:fb:
2e:1d:a5:a6:98:cc:22:ae:29:ed:16:95:03:09:0a:e2:dd:c6:
61:b7:7a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:35 2024 by rpki-client on console-fra.rpki-client.org