Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/nTlqsmk50-pn-zVAqWKIZKbaXyI.roa
File: nTlqsmk50-pn-zVAqWKIZKbaXyI.roa (raw, json)
Hash identifier: KUdvVw3dGZAfKTvB5zkBbTGkFZqpW2gu/Zs8yd2AgL8=
Subject key identifier: 9D:39:6A:B2:69:39:D3:EA:67:FB:35:40:A9:62:88:64:A6:DA:5F:22
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 01856EC20A543B7A258C07EBB6E851837635
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/nTlqsmk50-pn-zVAqWKIZKbaXyI.roa
Signing time: Sun 01 Jan 2023 19:14:48 +0000
ROA not before: Sun 01 Jan 2023 19:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203063
IP address blocks: 185.145.0.0/24 maxlen: 24
185.145.3.0/24 maxlen: 24
185.145.2.0/24 maxlen: 24
185.145.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:0a:54:3b:7a:25:8c:07:eb:b6:e8:51:83:76:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Jan 1 19:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d396ab26939d3ea67fb3540a9628864a6da5f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:41:65:6f:a5:00:5a:eb:e2:2e:f7:5d:29:18:
55:ba:b5:83:9e:39:8c:3e:0d:e3:3a:f4:01:10:53:
42:23:80:d2:bd:ac:42:93:99:e5:a9:77:1f:2d:ae:
c6:5c:c9:b3:65:0d:86:6a:c2:e3:0e:9c:61:44:22:
0f:c0:db:cd:47:31:00:3e:de:45:8e:1b:e1:15:bb:
6e:cb:93:55:63:0e:f4:f1:3f:2c:93:60:ed:85:54:
51:3f:e5:10:7c:36:92:12:57:a3:fd:96:41:00:69:
c1:50:f6:45:bb:58:b3:16:29:fb:ae:69:dd:25:3f:
9d:a9:1f:ee:e0:0a:df:b4:e9:c1:9c:98:9c:5d:5f:
0d:db:97:93:27:bd:27:8a:8b:2a:ca:d5:08:a4:5a:
48:69:ac:c2:7e:33:b4:06:ed:ab:94:54:69:74:8d:
2f:fc:bd:c5:42:df:5b:e6:0e:6e:08:3e:b9:e1:79:
90:f0:22:6e:3a:05:4a:7e:5a:05:dd:f8:a8:f3:94:
8f:17:e1:4b:71:9b:b2:07:5b:cf:80:38:3a:ba:e7:
d1:69:3a:d6:99:10:71:9c:65:6e:a7:f2:b7:99:9e:
fb:ee:26:be:47:e3:7f:15:a7:61:98:11:be:d5:ef:
57:a1:89:67:8c:b2:cd:97:82:b1:e7:a8:50:53:89:
c2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:39:6A:B2:69:39:D3:EA:67:FB:35:40:A9:62:88:64:A6:DA:5F:22
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/nTlqsmk50-pn-zVAqWKIZKbaXyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.0.0/22
Signature Algorithm: sha256WithRSAEncryption
45:e2:be:04:08:19:12:94:82:93:39:8b:7c:66:35:49:5e:41:
d1:d9:f8:0d:9c:66:e8:65:38:7d:72:f3:cb:cd:d2:c6:23:86:
ca:24:0c:9c:7a:ed:03:d9:be:95:84:ac:9a:9e:67:12:08:4d:
05:7a:eb:8e:af:bf:1f:a3:00:cf:11:3b:6f:93:32:25:b6:d9:
5c:ae:49:fc:6d:ac:48:5f:49:41:31:26:10:e3:17:b2:0e:3f:
ba:91:fe:94:c1:f4:4b:6f:18:90:6e:15:27:2a:90:df:00:f0:
3e:2d:5b:82:ed:3d:5f:ce:be:61:73:eb:fa:22:7a:b8:29:8c:
50:3c:69:ca:8d:d3:bb:ee:2c:a0:27:35:f7:97:e6:ff:39:90:
a3:7d:5f:08:0e:2c:41:d8:76:4b:cc:04:d5:16:32:d7:77:e2:
f1:e8:b9:4e:35:f7:2e:7e:33:d9:0e:22:bd:8f:c2:4b:92:a4:
90:90:cc:21:7d:ef:4b:70:fd:ce:00:be:aa:c3:31:2c:4b:a8:
84:8d:5e:bd:1d:2b:a0:86:99:0d:e1:df:8b:91:22:9e:d0:55:
40:85:65:c7:3c:eb:5f:67:e0:bf:3e:dc:bf:f4:06:b7:f7:8b:
e9:69:12:7c:35:3f:fc:0a:b8:fe:2a:9e:37:0f:3b:f1:d5:00:
2e:e4:8b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:49 2024 by rpki-client on console-ams.rpki-client.org