Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/4I-WLIZLocWHzuk9MeCaboMx9P0.roa
File: 4I-WLIZLocWHzuk9MeCaboMx9P0.roa (raw, json)
Hash identifier: lXe94tMfSB7WXUVhzrwmPlie227YsMswPGA4IhOpLxk=
Subject key identifier: E0:8F:96:2C:86:4B:A1:C5:87:CE:E9:3D:31:E0:9A:6E:83:31:F4:FD
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 0185701542E8D9BF427DB11E56563F05A6C5
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/4I-WLIZLocWHzuk9MeCaboMx9P0.roa
Signing time: Mon 02 Jan 2023 01:25:19 +0000
ROA not before: Mon 02 Jan 2023 01:25:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 185.5.146.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:42:e8:d9:bf:42:7d:b1:1e:56:56:3f:05:a6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Jan 2 01:25:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e08f962c864ba1c587cee93d31e09a6e8331f4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:3a:30:9d:88:5a:4f:e3:cc:ec:4d:d0:de:
c9:02:36:0a:64:ba:aa:64:fc:40:d8:57:d2:1e:75:
bd:df:ea:b4:92:a1:af:c9:c1:e7:e8:66:74:a4:06:
03:a4:07:c9:1c:9d:9b:bf:c4:7a:aa:f1:0d:ca:1b:
de:97:08:80:0c:8e:f7:30:6f:c1:c2:0d:82:cb:e5:
85:81:e2:c4:f8:22:21:fa:0d:ef:ee:ff:c6:f8:b3:
8c:ee:52:4b:c3:ac:05:5b:b1:3f:23:77:52:08:f6:
0c:0d:47:c5:e2:04:6e:6f:1b:4b:59:06:7b:ca:6f:
17:36:d4:af:f4:b0:9c:f8:10:88:6b:c4:b8:6f:04:
79:af:4e:ae:26:88:36:c6:b7:00:b4:d6:06:35:01:
28:6f:eb:3b:9a:22:41:ba:c2:dc:bd:46:6e:29:70:
af:de:76:cd:01:63:50:3a:52:38:83:8e:0a:e7:f1:
29:be:36:90:d1:a8:6f:91:1d:a5:0b:43:b3:4c:98:
e6:cc:b5:7e:07:56:f9:2d:49:fc:29:c3:4b:d7:65:
90:f9:a8:66:22:28:36:5f:90:56:ff:2f:07:18:0c:
d9:e4:40:d0:07:8e:f4:30:f9:54:84:92:1e:2f:4a:
28:1d:39:49:4b:01:7e:ba:32:be:5c:0a:79:ef:fa:
c3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8F:96:2C:86:4B:A1:C5:87:CE:E9:3D:31:E0:9A:6E:83:31:F4:FD
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/4I-WLIZLocWHzuk9MeCaboMx9P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.146.0/24
Signature Algorithm: sha256WithRSAEncryption
73:16:cb:67:b9:6e:19:41:6d:85:f3:e8:4b:13:ec:91:0d:ac:
e1:fc:2f:59:fa:e6:da:dc:31:88:57:69:f2:1b:cb:4f:8d:80:
c1:28:2f:be:da:66:8e:0a:2b:61:0f:ee:b6:12:b3:22:30:af:
29:12:23:07:96:6d:55:51:bb:9e:3c:5a:1b:e2:61:5c:10:9d:
8e:a2:83:81:56:4c:4d:5a:52:33:1d:0d:bd:8f:77:91:32:d7:
66:fc:bc:ad:cb:2d:9d:47:33:01:82:83:7e:e9:c4:ff:f1:56:
55:b6:3c:b0:ff:9e:44:de:bf:29:02:48:ba:65:63:bf:7c:e3:
a4:db:bc:24:ab:2d:d7:02:c5:eb:31:13:5f:59:ae:ed:4f:46:
61:5c:49:dd:22:21:93:93:ed:d9:50:ed:01:bf:67:a8:12:e2:
2c:3e:dd:10:4d:60:18:67:e0:be:24:81:0d:8b:43:a9:ca:69:
a0:31:a7:f4:74:9f:30:02:a0:d6:23:0e:12:15:ed:26:8a:16:
20:16:f9:f7:68:c1:b7:e0:a7:e8:de:4f:08:39:85:8e:0f:d5:
6a:62:21:9a:38:e8:02:93:bf:ce:4d:e3:8d:66:d3:c0:a3:b6:
ec:05:ec:d2:11:cf:bb:bc:ce:a6:e7:e6:19:ef:b9:24:c4:57:
6d:99:d9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:05 2024 by rpki-client on console-ams.rpki-client.org