Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/3Ztfo694wUwccpaXxVngLYrGV0A.roa
File: 3Ztfo694wUwccpaXxVngLYrGV0A.roa (raw, json)
Hash identifier: 1vwnLQ4U9TvQA2xxBvaV8JJeKt4Ko1rRJap8VtFz3sE=
Subject key identifier: DD:9B:5F:A3:AF:78:C1:4C:1C:72:96:97:C5:59:E0:2D:8A:C6:57:40
Certificate issuer: /CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Certificate serial: 01856BF7E97061E1CB124650DB36FE1757EC
Authority key identifier: 29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/3Ztfo694wUwccpaXxVngLYrGV0A.roa
Signing time: Sun 01 Jan 2023 06:14:47 +0000
ROA not before: Sun 01 Jan 2023 06:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9051
IP address blocks: 185.44.152.0/22 maxlen: 24
2a04:9cc0::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:f7:e9:70:61:e1:cb:12:46:50:db:36:fe:17:57:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Validity
Not Before: Jan 1 06:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd9b5fa3af78c14c1c729697c559e02d8ac65740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:87:53:d0:15:09:04:69:41:5e:44:4c:4c:ef:
65:a7:46:24:70:90:af:2b:c1:cb:0c:14:ef:20:37:
69:a5:0e:86:7a:ee:b8:38:a6:16:44:fe:67:3e:91:
00:79:cb:4d:98:2e:68:a4:ef:b8:9e:10:bd:60:8e:
30:6c:0b:11:c1:20:87:12:52:dd:0d:5e:f2:42:7e:
ff:41:a3:8f:ca:14:47:4b:0c:44:c1:39:dc:92:e5:
23:79:2b:5a:70:4f:34:26:2f:f3:74:5a:b8:e0:0b:
5f:d8:2f:24:ed:29:9b:c1:45:3c:b1:70:ba:ff:98:
e9:b4:df:80:e3:26:d1:b2:80:85:fe:a1:c1:2d:40:
d2:98:d5:1d:95:5c:87:41:2e:13:44:ec:e3:d3:af:
f0:fb:76:75:ad:be:0b:64:42:66:44:f3:7b:ec:78:
c1:6f:1d:d8:af:68:d6:98:f6:fd:41:59:5b:de:59:
c9:c0:03:1e:b6:31:c6:70:59:f5:89:66:19:cd:1d:
c6:e4:96:76:fe:44:da:ee:a2:c8:75:68:48:31:5a:
8f:30:a8:90:e2:f3:71:ac:66:bd:1a:f7:14:7a:2a:
f0:8b:64:5b:65:14:ce:39:db:14:a9:de:8b:3a:62:
5b:6b:0f:60:41:7e:57:44:a3:5d:99:da:de:51:8a:
a4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9B:5F:A3:AF:78:C1:4C:1C:72:96:97:C5:59:E0:2D:8A:C6:57:40
X509v3 Authority Key Identifier:
keyid:29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/3Ztfo694wUwccpaXxVngLYrGV0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.152.0/22
IPv6:
2a04:9cc0::/29
Signature Algorithm: sha256WithRSAEncryption
0c:7c:15:a2:6c:29:37:ac:4d:83:27:7a:20:2e:7c:97:d0:0d:
4f:0b:2d:8d:03:1b:f0:50:fb:a7:8a:01:a4:be:9c:f4:ea:14:
8a:e7:2d:07:51:6e:4d:5f:08:a3:14:a6:b1:89:08:1a:61:03:
15:ad:68:63:12:01:35:df:59:23:b4:32:ef:10:e5:4e:74:93:
39:7c:39:42:26:44:00:d4:3d:19:e3:65:9b:08:6c:46:bb:5f:
98:05:9f:8c:9e:96:e4:39:c8:6c:a4:16:2c:e0:0f:dc:ae:55:
8c:8e:34:fd:f3:6f:ce:63:cc:4a:00:f4:cc:75:55:85:4a:7f:
55:5e:73:c8:ef:4f:8f:b0:d7:34:33:a6:1f:2a:b9:3b:ed:3e:
0e:28:9c:66:82:90:a0:20:88:b8:6c:cb:23:fa:24:b5:fb:1a:
d6:4c:79:53:a6:10:10:70:69:32:63:09:05:54:0c:19:dc:0a:
63:2f:b9:fd:40:63:ab:ef:9c:21:6b:49:cf:e6:08:c5:fb:72:
3e:ad:34:e4:60:bd:ba:22:e4:41:67:17:6a:9f:5b:30:ef:38:
27:3c:77:46:1e:7a:3f:8f:b9:00:53:ca:35:26:17:73:fd:36:
5a:38:01:df:c8:f0:9f:8e:6c:e2:e0:26:a1:d9:cc:80:ab:30:
24:29:2c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:34 2024 by rpki-client on console-ams.rpki-client.org