Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/pcC04zg-J536vEa7ZNkJOd9PXFc.roa
File: pcC04zg-J536vEa7ZNkJOd9PXFc.roa (raw, json)
Hash identifier: xVNez7YwB2QLQZvC8k+KIY9o8aw4DwmGr4hyWRMPR7Y=
Subject key identifier: A5:C0:B4:E3:38:3E:27:9D:FA:BC:46:BB:64:D9:09:39:DF:4F:5C:57
Certificate issuer: /CN=6431e960cd061039b3b27fd25d4160771c498bab
Certificate serial: 018CC80169C0E56C4C418276E092168148AC
Authority key identifier: 64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/pcC04zg-J536vEa7ZNkJOd9PXFc.roa
Signing time: Tue 02 Jan 2024 02:29:44 +0000
ROA not before: Tue 02 Jan 2024 02:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205229
IP address blocks: 185.224.176.0/22 maxlen: 24
185.224.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 18:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:69:c0:e5:6c:4c:41:82:76:e0:92:16:81:48:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6431e960cd061039b3b27fd25d4160771c498bab
Validity
Not Before: Jan 2 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5c0b4e3383e279dfabc46bb64d90939df4f5c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f8:f5:ca:80:8b:05:eb:5a:89:2a:6a:d5:d9:
ff:53:4f:85:20:22:3d:79:7b:16:d5:e6:0a:8a:a8:
a9:3a:b8:30:4f:d6:d4:29:30:0a:77:e5:da:d1:54:
23:7b:0c:96:41:ff:d4:58:9e:2e:67:a0:a5:2d:38:
48:59:c4:d3:c2:a0:35:1f:d0:53:89:b1:47:2f:fc:
a1:9f:a4:73:82:f7:70:52:9c:6e:2d:e5:7f:28:a8:
07:65:c3:6f:9b:92:dc:4c:75:d3:4f:84:aa:58:ea:
34:bf:3e:85:b8:3a:4c:02:94:40:79:30:4d:4b:7d:
86:8e:3a:18:d1:63:c6:56:66:bf:7e:60:a4:ad:a8:
21:72:d7:45:8d:d7:e3:fb:35:06:88:2d:67:35:1e:
00:48:ec:3b:08:36:d5:69:66:24:63:00:99:63:d4:
e0:f7:4c:1c:7e:2c:0b:3e:f1:8f:cf:67:c2:68:c9:
3b:5b:d9:77:81:a5:ce:54:5d:5e:7a:af:38:a6:a9:
ed:a4:bc:2e:d6:e3:ab:1e:f2:2d:31:82:eb:59:99:
27:71:f1:ca:c0:38:fa:b7:c5:68:04:c2:b0:e2:31:
d4:eb:f4:5a:27:f2:73:fc:44:7f:dc:7f:2a:45:01:
fd:1a:b7:1c:01:cc:cd:4e:11:55:8b:5d:38:fe:2c:
8b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C0:B4:E3:38:3E:27:9D:FA:BC:46:BB:64:D9:09:39:DF:4F:5C:57
X509v3 Authority Key Identifier:
keyid:64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/pcC04zg-J536vEa7ZNkJOd9PXFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.176.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:74:06:37:cd:1b:4e:c7:d9:9d:c2:df:68:25:13:4a:3a:ec:
c5:be:17:3a:cb:b4:51:56:7d:45:de:50:b9:58:5d:5d:64:26:
b0:19:1b:2c:da:26:2e:ed:ae:96:5f:84:49:45:c9:ca:2b:e9:
ae:94:f3:ba:33:b4:04:fc:6b:bf:79:fd:7b:ac:eb:f7:25:74:
1c:2a:a1:55:6e:3b:d9:57:14:ff:ca:79:1d:d9:ef:76:e7:32:
fa:fc:b1:23:d7:93:70:4e:50:8f:e0:96:42:ba:a2:5b:0e:46:
8b:0e:71:ba:db:14:db:83:65:97:b9:5e:c0:bd:6f:ad:91:a3:
80:46:26:5a:67:08:e4:4d:1f:64:e4:70:e2:76:0f:f9:31:f4:
16:7e:f0:22:9b:4c:c5:61:ea:25:13:21:f5:48:ab:6a:d3:52:
f6:f0:a3:88:02:38:af:80:ac:35:1a:34:95:e6:7c:d7:1b:84:
05:fc:b3:07:be:b4:47:e3:89:05:ca:b3:c6:71:f0:e9:da:3e:
96:8f:6c:43:2d:30:05:27:16:51:2e:14:a5:44:c3:69:e9:8e:
8b:3e:cb:26:ef:5d:6d:12:0e:cb:d3:11:c0:51:54:0a:cc:e6:
ca:d8:ec:0d:c9:5c:7a:fa:0f:fa:e6:37:52:25:e5:b6:2b:53:
be:f6:ca:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 21:58:42 2024 by rpki-client on console-fra.rpki-client.org