Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/p-IP36piIArQElZss27ybRzV90M.roa
File: p-IP36piIArQElZss27ybRzV90M.roa (raw, json)
Hash identifier: XI5tR1I04uSiHuyIz9A++fF7M51ASDKSoQSXhH2APPw=
Subject key identifier: A7:E2:0F:DF:AA:62:20:0A:D0:12:56:6C:B3:6E:F2:6D:1C:D5:F7:43
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 0186B2DBE5740DF31FDF8DF374C11580AE37
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/p-IP36piIArQElZss27ybRzV90M.roa
Signing time: Sun 05 Mar 2023 17:40:00 +0000
ROA not before: Sun 05 Mar 2023 17:40:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56484
IP address blocks: 185.124.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b2:db:e5:74:0d:f3:1f:df:8d:f3:74:c1:15:80:ae:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Mar 5 17:40:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7e20fdfaa62200ad012566cb36ef26d1cd5f743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:46:4e:56:96:5b:8b:d7:f2:6e:a5:ff:eb:dc:
39:5a:f2:4a:ca:c0:17:34:39:fe:b8:c8:77:84:01:
95:12:64:04:46:8f:d8:41:db:74:89:d3:fc:5f:76:
8d:96:b3:de:9c:ba:db:26:62:a6:81:86:a4:09:f8:
18:ef:9a:ff:53:9f:bb:af:d7:04:4e:05:8f:8b:58:
7a:d0:8f:b5:ca:e6:66:3f:7e:d3:9e:0b:eb:ba:3e:
52:e8:58:1b:5d:0c:e7:b1:28:1b:e1:fb:b8:bc:56:
7e:f2:a2:39:d3:29:a4:b7:df:ec:93:9f:45:12:72:
64:8b:78:9b:9e:75:6a:5e:98:c7:6e:40:e8:1b:dd:
b9:0d:73:80:73:de:bf:ad:ab:81:dd:bd:75:51:d0:
df:1c:1d:29:c4:e9:1b:42:bd:19:56:e9:ce:1c:31:
c3:8b:69:f8:85:67:a2:d4:bd:2e:a0:90:42:d8:03:
73:e4:00:42:0e:5f:40:2a:1a:e3:c3:66:10:31:8f:
c9:05:02:38:b2:da:f3:17:6c:8e:9e:92:13:11:45:
f4:8d:dc:7f:1f:9e:4b:a9:bc:73:3a:0a:9b:68:7c:
01:53:69:95:ec:e3:e3:5e:20:3d:c1:45:fa:d1:31:
1d:e7:87:84:06:45:0b:75:d9:e7:85:bf:53:7a:b5:
2d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E2:0F:DF:AA:62:20:0A:D0:12:56:6C:B3:6E:F2:6D:1C:D5:F7:43
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/p-IP36piIArQElZss27ybRzV90M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.150.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:6d:d1:0f:a2:e1:5b:bf:42:9c:d6:00:58:73:30:4d:d6:2a:
af:8c:ac:87:f4:73:b6:2c:80:9c:be:48:62:66:2b:14:96:36:
c9:96:f3:69:2e:7d:e6:73:6a:c0:2e:5d:57:f2:3c:bd:09:d5:
49:30:0d:5d:f6:58:c9:bc:c9:0c:85:e3:ed:91:fc:d6:3c:53:
ac:1c:cf:4f:f9:7e:6d:36:b2:d9:69:6e:0b:d5:b7:4f:19:c8:
0a:1b:82:66:33:c1:cd:33:d9:ff:70:0f:b2:08:1e:84:70:34:
68:e5:56:2a:d6:a3:61:2b:a1:72:17:65:e4:cc:e5:a0:28:8f:
32:3b:59:17:de:9f:8c:ea:f5:3f:1f:f2:4e:84:dc:f0:03:a0:
10:a6:ae:97:dd:97:d1:e8:a3:82:10:83:fa:de:20:d7:92:b6:
25:e9:62:df:c7:b1:09:9c:54:8d:4f:79:9f:17:7f:a1:6c:7d:
46:08:db:68:51:93:35:00:fd:d6:a0:b4:5d:30:c9:05:48:6c:
00:a6:a2:71:0f:ee:99:32:99:a2:ef:d1:75:1e:7c:61:6c:cc:
be:3f:21:86:ab:03:da:24:9f:b9:1b:80:67:9d:ae:09:dc:03:
bc:e6:52:36:c4:bd:c1:27:bd:e9:b1:c5:c9:70:c6:30:2c:7c:
34:0a:00:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:06 2024 by rpki-client on console-fra.rpki-client.org