Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/SWb7Wxu2zoPWbh191KistZjUd9I.roa
File: SWb7Wxu2zoPWbh191KistZjUd9I.roa (raw, json)
Hash identifier: WTtdXAU8cUtxRbSrOjqKTpjQ4iRzN9OW3j6nAY5P3Yc=
Subject key identifier: 49:66:FB:5B:1B:B6:CE:83:D6:6E:1D:7D:D4:A8:AC:B5:98:D4:77:D2
Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111
Certificate serial: 018C69648E713E9E0924302ED6F194C72E19
Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/SWb7Wxu2zoPWbh191KistZjUd9I.roa
Signing time: Thu 14 Dec 2023 17:34:06 +0000
ROA not before: Thu 14 Dec 2023 17:34:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200450
IP address blocks: 185.225.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:69:64:8e:71:3e:9e:09:24:30:2e:d6:f1:94:c7:2e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111
Validity
Not Before: Dec 14 17:34:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4966fb5b1bb6ce83d66e1d7dd4a8acb598d477d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3f:92:f5:5e:92:b6:88:13:0f:66:bd:de:3c:
4f:88:9d:b5:d1:57:d0:f5:f3:b6:a1:dd:53:93:d8:
45:34:be:9c:15:09:fd:51:f0:dc:12:aa:ee:63:a4:
a7:1a:aa:ba:63:1a:d0:51:54:72:fd:ea:33:c1:0f:
49:84:8a:0a:7e:39:69:11:73:fe:71:5c:f6:6e:e7:
0d:fa:19:22:52:6d:7e:e1:1e:c0:b6:b1:71:89:65:
f5:03:c2:74:e8:bd:da:13:e9:fe:5f:b1:c4:17:d4:
eb:0c:74:0a:34:db:38:10:e1:04:1d:3c:eb:0c:9f:
d1:c5:9b:a9:d5:08:6f:bc:bd:bf:d2:b5:d2:51:05:
b1:e6:86:51:06:ab:5b:c6:91:54:d5:cc:b5:2f:f7:
1e:df:b0:79:bd:86:4a:86:42:7d:69:44:9b:89:89:
24:0b:dd:5c:16:81:0f:6b:3f:f2:3e:7a:82:88:fa:
5e:5b:e0:f2:14:a2:f6:5c:fc:56:68:13:c5:0a:14:
40:23:b3:fc:36:67:dd:40:3b:54:c4:3f:21:f8:4a:
af:25:a9:33:a3:71:f4:37:17:28:48:5b:9c:2e:a8:
b3:a2:0e:72:9b:9c:a1:b5:4f:fc:a4:1d:13:ef:8a:
11:0d:4c:d2:7b:c8:fb:3d:25:25:e4:31:94:fd:c0:
77:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:66:FB:5B:1B:B6:CE:83:D6:6E:1D:7D:D4:A8:AC:B5:98:D4:77:D2
X509v3 Authority Key Identifier:
keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/SWb7Wxu2zoPWbh191KistZjUd9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.236.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:6f:9f:01:3a:2b:55:bd:ed:d6:72:56:bb:1d:1d:37:1f:ac:
ba:8c:fa:a9:a2:1c:30:74:35:87:79:a0:0c:a9:d7:c8:fc:d3:
b7:79:22:c2:18:50:09:c0:a8:ea:a8:45:f4:4c:a5:a8:7e:f5:
a9:63:24:20:db:90:69:89:ee:fd:12:cc:64:48:3d:b2:96:e3:
71:97:fe:10:8c:6e:16:3b:47:85:95:9e:4b:51:22:d1:77:95:
b0:90:20:45:5e:df:1e:7d:8c:16:41:aa:3c:59:b6:c8:50:35:
b5:a5:e1:98:8b:16:c8:2d:ff:15:a6:00:63:a9:32:58:5a:db:
87:3d:1e:22:03:32:47:76:73:80:ee:06:e3:77:8b:7f:27:9e:
b7:bf:bd:66:1b:2f:b8:30:0e:1f:43:f7:12:d0:4f:0b:37:0a:
4b:62:74:d7:fc:35:4e:7b:55:10:5c:c3:e7:0c:a4:d5:85:1a:
53:20:c7:d5:ad:f2:8e:01:33:99:16:b5:f0:60:30:1d:97:b5:
c0:4d:99:f6:ff:a9:73:e3:b2:2b:44:69:6f:42:79:f4:71:c2:
6e:72:8d:6a:4d:92:c5:6e:9e:0e:70:a4:b3:4b:14:a9:83:7e:
88:68:35:b5:5f:63:2c:36:90:71:11:28:1d:88:d1:64:bb:8b:
04:c1:58:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:14 2024 by rpki-client on console-ams.rpki-client.org