Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/SG5MHnwzJSnsmWB_FH4PhCW6D2M.roa
File: SG5MHnwzJSnsmWB_FH4PhCW6D2M.roa (raw, json)
Hash identifier: G3mtDmqBblZznUCZHJ2bt10Qvc5NLRyWzBlV6McoFUQ=
Subject key identifier: 48:6E:4C:1E:7C:33:25:29:EC:99:60:7F:14:7E:0F:84:25:BA:0F:63
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 0186EE67D5CCB6B24F928ED493BE2640EA7F
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/SG5MHnwzJSnsmWB_FH4PhCW6D2M.roa
Signing time: Fri 17 Mar 2023 07:10:27 +0000
ROA not before: Fri 17 Mar 2023 07:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62456
IP address blocks: 93.180.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ee:67:d5:cc:b6:b2:4f:92:8e:d4:93:be:26:40:ea:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Mar 17 07:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=486e4c1e7c332529ec99607f147e0f8425ba0f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:c7:f3:8a:05:3a:92:43:77:e7:0c:c5:0d:
39:d4:4f:72:32:95:21:8a:59:6f:32:44:1a:70:77:
58:e3:6a:9f:87:b3:6f:06:fa:c6:58:98:0a:1f:87:
19:0b:93:77:46:85:63:18:d9:ec:eb:af:d2:1d:6a:
e7:fb:2c:eb:d1:fe:c5:f1:c0:66:eb:32:35:94:e9:
bb:d7:bb:b0:38:07:d8:0d:db:a5:23:88:c0:04:43:
55:63:8d:6d:f2:30:6f:e6:01:5b:96:de:43:cb:45:
6f:c7:2d:7c:f0:42:d8:f6:3f:5a:56:3c:5f:aa:20:
51:b0:7d:eb:60:75:b3:7e:0e:4d:14:09:1f:ef:cb:
c5:98:19:c3:be:e7:30:84:27:76:92:ab:65:3d:98:
46:b4:7d:90:bb:c3:20:26:a4:60:a8:66:fc:74:3f:
ca:c5:24:cf:18:7c:13:67:a2:50:86:7a:c3:ed:93:
90:dc:4f:b9:3c:b8:f0:67:b7:1d:7e:32:b1:03:cf:
94:6f:e7:32:b9:fd:f7:54:2b:4d:24:9f:67:13:7d:
2f:7e:9d:5d:1f:10:1f:e6:c3:b8:4a:a2:be:06:78:
39:ef:0d:3f:c4:0e:c9:d1:22:c6:f0:25:f4:0f:56:
6b:fb:3d:79:6f:d9:44:98:7b:b4:a5:80:86:ff:0c:
2e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6E:4C:1E:7C:33:25:29:EC:99:60:7F:14:7E:0F:84:25:BA:0F:63
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/SG5MHnwzJSnsmWB_FH4PhCW6D2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.135.0/24
Signature Algorithm: sha256WithRSAEncryption
92:5d:bc:dc:df:76:80:34:bb:e2:ce:be:d3:c2:3a:f9:da:0f:
e5:2a:02:46:4e:f8:d1:c9:e2:0c:f6:f6:16:2e:e4:c2:fe:2a:
53:a2:81:d1:e3:68:1a:e1:ac:2f:74:63:84:16:dd:0e:c4:37:
00:a0:7f:ac:04:cf:f5:85:ad:6e:95:fc:29:3f:3e:0e:f0:f4:
61:1c:46:15:89:00:c9:e6:d2:1f:40:99:1a:ff:75:aa:3b:01:
95:b7:22:35:2b:0e:46:8b:77:d0:fa:0e:f4:1e:9c:37:e5:f9:
33:e7:ba:06:a8:28:5a:a0:00:03:13:21:d6:e2:d8:b5:bd:e5:
fe:f2:fc:c3:c7:72:ad:50:9a:16:06:4f:68:83:06:fe:e4:12:
81:51:41:77:b4:b1:25:6b:61:14:ae:c2:5a:80:92:d1:07:e7:
5f:ad:5e:cf:78:74:d2:4e:8d:a1:14:f5:4a:c3:af:c6:3a:47:
da:6d:eb:96:1b:7b:a9:6d:0f:a6:d1:06:43:4e:62:5f:dc:c3:
a7:ec:17:9c:91:8f:16:3d:49:a3:22:41:6f:40:d2:ed:0d:ca:
3c:62:aa:64:f2:9f:0c:41:8b:02:8a:de:67:35:f9:51:b8:cd:
6d:aa:9f:fe:10:78:aa:b3:dd:d9:fd:17:17:95:3b:ef:c2:fd:
21:6d:d4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:33 2024 by rpki-client on console-fra.rpki-client.org