Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/FAlJNTnJ63ml3Vk0YLW5OnN29n8.roa
File: FAlJNTnJ63ml3Vk0YLW5OnN29n8.roa (raw, json)
Hash identifier: dM2WRkoK9gu6b5HlclhAVyHNiiLO2dZAQudlMq53jeg=
Subject key identifier: 14:09:49:35:39:C9:EB:79:A5:DD:59:34:60:B5:B9:3A:73:76:F6:7F
Certificate issuer: /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Certificate serial: 01880B498C72B06BF953E358E7090781AF0D
Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/FAlJNTnJ63ml3Vk0YLW5OnN29n8.roa
Signing time: Thu 11 May 2023 14:49:09 +0000
ROA not before: Thu 11 May 2023 14:49:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 185.180.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0b:49:8c:72:b0:6b:f9:53:e3:58:e7:09:07:81:af:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Validity
Not Before: May 11 14:49:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1409493539c9eb79a5dd593460b5b93a7376f67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:d1:9b:b5:0f:52:43:50:00:ed:87:2b:8b:
60:85:90:cf:7b:d7:08:c2:5f:92:0d:64:c3:73:b7:
82:b6:f4:d2:7f:1c:b9:ad:51:38:b8:ee:31:10:93:
ec:64:05:eb:77:9e:bd:c5:e8:cf:66:4e:f4:8c:63:
2e:91:7d:00:c1:33:2e:09:dc:b4:20:37:3d:aa:5d:
58:32:61:f7:81:aa:a4:e4:25:cc:12:b7:46:e0:86:
b7:fd:00:28:40:c5:3e:16:f5:46:35:2a:88:77:96:
fc:da:c5:0a:29:ed:62:9c:b6:0a:4d:d0:2d:10:6f:
2a:1e:9a:3c:05:ae:9e:06:4d:98:41:63:ae:7d:c1:
ca:b7:96:44:97:82:ce:53:cf:96:c5:5f:62:ac:5f:
bb:0d:0a:6b:56:ed:fc:b9:f4:72:44:11:23:b8:ea:
ca:69:8d:37:44:85:fc:b4:ba:6a:d7:3f:30:45:63:
b2:74:38:7c:e9:93:45:c9:b8:47:e4:03:d3:d3:14:
49:15:51:d2:23:d3:78:dc:7f:d0:b0:80:33:01:75:
5a:86:f7:27:0b:5a:96:06:b2:62:53:01:90:19:70:
73:e3:cf:93:12:28:33:48:31:4c:18:dd:11:58:99:
11:89:f7:c0:14:76:18:30:98:86:2c:8a:ad:dd:5a:
0b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:09:49:35:39:C9:EB:79:A5:DD:59:34:60:B5:B9:3A:73:76:F6:7F
X509v3 Authority Key Identifier:
keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/FAlJNTnJ63ml3Vk0YLW5OnN29n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.195.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a6:c9:dc:e5:bd:6c:03:16:46:d8:fb:82:32:83:fb:1b:6a:
78:fb:a9:57:52:f9:0e:95:9e:d2:df:4d:46:fb:6d:61:e3:62:
57:11:b1:a8:07:39:39:ef:68:3a:7e:d1:5c:7a:ea:5c:ca:cc:
28:d3:dd:28:20:fb:34:54:ef:2a:0d:f0:1a:2f:f6:9c:33:02:
45:d2:df:ce:40:64:8a:cf:1d:65:4d:41:75:90:80:88:b4:92:
b3:3f:94:5f:bc:24:d2:1c:aa:28:f6:1f:0b:66:17:66:36:27:
59:a2:24:09:c6:fa:53:fd:9b:00:cd:ef:81:19:ce:2b:72:00:
45:e6:e3:f4:57:34:5f:d3:bb:e4:0c:9f:3f:cd:f5:74:55:cd:
88:d7:9d:ba:d9:17:4f:27:96:78:1b:9f:71:d0:21:43:85:f5:
61:51:12:d0:1f:27:32:c4:a6:e2:a3:ec:84:c8:f8:42:9f:df:
09:37:ab:7d:2b:7c:a9:c4:0c:c6:90:ad:26:e3:19:f5:ac:bb:
40:2b:c9:c1:28:80:5a:b5:3c:8c:4b:a1:93:29:1c:ef:b8:6c:
60:b0:a3:57:56:b5:f2:c6:2b:f1:15:59:cb:2f:ea:58:3c:3c:
06:e8:ac:cc:d0:b1:fb:3e:1b:bb:99:35:7e:c5:73:c1:44:96:
39:34:e5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:01 2024 by rpki-client on console-ams.rpki-client.org